last executing test programs: 8m33.726441599s ago: executing program 4 (id=304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='source', 0x0, r2) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 8m32.793987819s ago: executing program 4 (id=311): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 8m29.07209206s ago: executing program 4 (id=324): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 8m26.5517852s ago: executing program 4 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 8m25.293223665s ago: executing program 4 (id=341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x4, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x6, 0xdddd8004, 0x2000, &(0x7f0000276000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 8m25.222611767s ago: executing program 4 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00'], 0x1, 0x26c, &(0x7f0000000340)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000428d00"/20], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r1, &(0x7f0000000a80), 0x0}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) 8m10.085451743s ago: executing program 32 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00'], 0x1, 0x26c, &(0x7f0000000340)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000428d00"/20], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r1, &(0x7f0000000a80), 0x0}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) 15.188166072s ago: executing program 1 (id=1616): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), 0x0}, 0x20) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x7ffffffa) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11.641766466s ago: executing program 1 (id=1621): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.255872422s ago: executing program 0 (id=1622): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80482, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 11.215765914s ago: executing program 2 (id=1623): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(r6, 0xffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 10.364422941s ago: executing program 0 (id=1624): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket(0x11, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x4000810) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$lock(r1, 0x21, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.361035151s ago: executing program 2 (id=1625): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 9.882073192s ago: executing program 0 (id=1627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x9, 0xfffff034}, {0x6, 0xf6}]}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 9.857043233s ago: executing program 1 (id=1628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001"], 0x0) 9.807181515s ago: executing program 0 (id=1629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001"], 0x0) 7.714571616s ago: executing program 3 (id=1630): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.659278631s ago: executing program 5 (id=1632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x9, 0xfffff034}, {0x6, 0xf6}]}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 6.626306773s ago: executing program 1 (id=1633): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0xe, 0x5}]}, @struct]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000000)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'rr\x00', 0x20, 0x78, 0x7b}, {@local, 0x4e22, 0x1, 0x10000, 0x6, 0x101}}, 0x44) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000308"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 6.623251963s ago: executing program 0 (id=1634): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0xe, 0x5}]}, @struct]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd700000000000020000", @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000000)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'rr\x00', 0x20, 0x78, 0x7b}, {@local, 0x4e22, 0x1, 0x10000, 0x6, 0x101}}, 0x44) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000308"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 6.416056702s ago: executing program 2 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000080)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), 0x0}, 0x20) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x7ffffffa) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x8572a000) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6.415285512s ago: executing program 5 (id=1636): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x168, 0x198, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000001100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 4.540959393s ago: executing program 2 (id=1637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x9, 0xfffff034}, {0x6, 0xf6}]}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 4.512327995s ago: executing program 3 (id=1638): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(r6, 0xffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.864086152s ago: executing program 2 (id=1639): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000001100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 3.715944979s ago: executing program 5 (id=1640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.811224818s ago: executing program 3 (id=1641): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) fcntl$setlease(r5, 0x400, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) 2.786446609s ago: executing program 1 (id=1642): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x20) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x7ffffffa) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x8572a000) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.679584084s ago: executing program 2 (id=1643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001"], 0x0) 2.413469795s ago: executing program 5 (id=1644): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), 0x0}, 0x20) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x7ffffffa) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x8572a000) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.771822683s ago: executing program 0 (id=1645): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.577279322s ago: executing program 3 (id=1646): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80482, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 1.513369854s ago: executing program 1 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), 0x0}, 0x20) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8572a000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.505349825s ago: executing program 5 (id=1648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 224.71782ms ago: executing program 3 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x7ffffffa) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x8572a000) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 146.031964ms ago: executing program 5 (id=1650): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000780)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=0x0], 0x1, 0x26c, &(0x7f0000000340)="$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") 0s ago: executing program 3 (id=1651): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000780)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=0x0], 0x1, 0x26c, &(0x7f0000000340)="$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") kernel console output (not intermixed with test programs): rror (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1241: bg 0: block 248: padding at end of block bitmap is not set [ 451.599555][ T5416] Quota error (device loop3): write_blk: dquota write failed [ 451.614244][ T5416] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 451.624487][ T5416] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.1241: Failed to acquire dquot type 1 [ 451.638939][ T5416] EXT4-fs (loop3): 1 truncate cleaned up [ 451.645396][ T5416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 452.486066][ T5437] loop0: detected capacity change from 0 to 512 [ 453.118085][ T5437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 453.258976][ T5437] EXT4-fs (loop0): orphan cleanup on readonly fs [ 453.268276][ T5437] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1248: bg 0: block 248: padding at end of block bitmap is not set [ 453.284266][ T5437] Quota error (device loop0): write_blk: dquota write failed [ 453.291868][ T5437] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 453.301893][ T5437] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1248: Failed to acquire dquot type 1 [ 453.315631][ T5437] EXT4-fs (loop0): 1 truncate cleaned up [ 453.322411][ T5437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 454.380101][ T5448] loop1: detected capacity change from 0 to 512 [ 454.445675][ T5448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 454.510590][ T282] EXT4-fs (loop0): unmounting filesystem. [ 454.537675][ T5448] EXT4-fs (loop1): orphan cleanup on readonly fs [ 454.547465][ T5448] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1249: bg 0: block 248: padding at end of block bitmap is not set [ 454.562887][ T5448] Quota error (device loop1): write_blk: dquota write failed [ 454.570476][ T5448] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 454.580711][ T5448] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1249: Failed to acquire dquot type 1 [ 454.594632][ T5448] EXT4-fs (loop1): 1 truncate cleaned up [ 454.601350][ T5448] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 456.498906][ T283] EXT4-fs (loop1): unmounting filesystem. [ 456.579258][ T5461] loop0: detected capacity change from 0 to 256 [ 456.588262][ T5461] FAT-fs (loop0): Unrecognized mount option "0x000000000000000600000000000000000000000" or missing value [ 456.848294][ T5464] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 459.511245][ T5466] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 459.524655][ T28] audit: type=1326 audit(1764014370.186:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 459.584745][ T5466] FAT-fs (loop5): unable to read boot sector [ 459.591841][ T28] audit: type=1326 audit(1764014370.216:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 459.615748][ T28] audit: type=1326 audit(1764014370.216:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 459.639696][ T28] audit: type=1326 audit(1764014370.216:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 459.664148][ T28] audit: type=1326 audit(1764014370.216:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 459.702063][ T5479] loop0: detected capacity change from 0 to 512 [ 459.751507][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1258'. [ 459.762269][ T28] audit: type=1326 audit(1764014370.216:8882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 459.787145][ T5479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 459.878066][ T5479] EXT4-fs (loop0): orphan cleanup on readonly fs [ 459.888262][ T5479] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1259: bg 0: block 248: padding at end of block bitmap is not set [ 459.903989][ T5479] Quota error (device loop0): write_blk: dquota write failed [ 459.911575][ T5479] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 459.921691][ T5479] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1259: Failed to acquire dquot type 1 [ 459.935352][ T5479] EXT4-fs (loop0): 1 truncate cleaned up [ 459.941999][ T5479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 460.234342][ T28] audit: type=1326 audit(1764014370.216:8883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 460.426772][ T28] audit: type=1326 audit(1764014370.216:8884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 460.619481][ T28] audit: type=1326 audit(1764014370.216:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 461.216680][ T285] EXT4-fs (loop3): unmounting filesystem. [ 461.594865][ T380] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 461.624861][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 461.877814][ T5499] loop5: detected capacity change from 0 to 512 [ 461.906164][ T5499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 461.962695][ T5499] EXT4-fs (loop5): orphan cleanup on readonly fs [ 461.972290][ T5499] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1264: bg 0: block 248: padding at end of block bitmap is not set [ 461.988646][ T5499] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1264: Failed to acquire dquot type 1 [ 462.002937][ T5499] EXT4-fs (loop5): 1 truncate cleaned up [ 462.010063][ T5499] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 462.893813][ T282] EXT4-fs (loop0): unmounting filesystem. [ 463.014543][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 463.034870][ T380] usb 3-1: Using ep0 maxpacket: 32 [ 463.041263][ T380] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.051460][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 463.057727][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.115644][ T380] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 463.124735][ T380] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 463.133993][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 463.143041][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 463.152146][ T380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.277962][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.547467][ T380] usb 3-1: config 0 descriptor?? [ 463.554295][ T24] usb 2-1: config 0 descriptor?? [ 463.679468][ T5512] loop3: detected capacity change from 0 to 512 [ 463.740000][ T5512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.816454][ T5512] EXT4-fs (loop3): orphan cleanup on readonly fs [ 463.823757][ T5512] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1267: bg 0: block 248: padding at end of block bitmap is not set [ 463.842352][ T5512] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.1267: Failed to acquire dquot type 1 [ 463.865382][ T5512] EXT4-fs (loop3): 1 truncate cleaned up [ 463.871309][ T540] usb 3-1: USB disconnect, device number 50 [ 463.873279][ T24] usb 2-1: USB disconnect, device number 63 [ 463.938200][ T5512] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 464.195873][ T5521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 464.620270][ T5520] loop5: detected capacity change from 0 to 512 [ 464.802230][ T5520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.154203][ T5520] EXT4-fs (loop5): orphan cleanup on readonly fs [ 465.163738][ T5520] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1269: bg 0: block 248: padding at end of block bitmap is not set [ 465.179858][ T5520] __quota_error: 67 callbacks suppressed [ 465.179879][ T5520] Quota error (device loop5): write_blk: dquota write failed [ 465.193113][ T5520] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 465.203160][ T5520] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1269: Failed to acquire dquot type 1 [ 465.216544][ T5520] EXT4-fs (loop5): 1 truncate cleaned up [ 465.224714][ T5520] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 465.382654][ T285] EXT4-fs (loop3): unmounting filesystem. [ 465.996409][ T28] audit: type=1326 audit(1764014376.646:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 465.999211][ T5524] loop3: detected capacity change from 0 to 2048 [ 466.033456][ T28] audit: type=1326 audit(1764014376.646:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 466.057389][ T28] audit: type=1326 audit(1764014376.646:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 466.080963][ T28] audit: type=1326 audit(1764014376.646:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 466.120601][ T28] audit: type=1326 audit(1764014376.646:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 466.144210][ T28] audit: type=1326 audit(1764014376.646:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 466.144325][ T309] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 466.169907][ T28] audit: type=1326 audit(1764014376.646:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 466.199258][ T28] audit: type=1326 audit(1764014376.646:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5523 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 466.224954][ T5524] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 466.252514][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 466.324875][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 466.354912][ T309] usb 1-1: Using ep0 maxpacket: 16 [ 466.361738][ T309] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 466.380343][ T309] usb 1-1: can't read configurations, error -61 [ 466.514871][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 466.521450][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.544843][ T309] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 466.554585][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.564864][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 466.574318][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.595286][ T24] usb 3-1: config 0 descriptor?? [ 466.744835][ T309] usb 1-1: Using ep0 maxpacket: 16 [ 466.752183][ T309] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 466.765052][ T309] usb 1-1: can't read configurations, error -61 [ 466.777715][ T309] usb usb1-port1: attempt power cycle [ 466.908753][ T540] usb 3-1: USB disconnect, device number 51 [ 467.015566][ T285] EXT4-fs (loop3): unmounting filesystem. [ 467.017755][ T5537] loop0: detected capacity change from 0 to 256 [ 467.028735][ T5537] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 467.074654][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 467.305108][ T5545] loop5: detected capacity change from 0 to 512 [ 467.343290][ T5545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 467.546512][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 467.601405][ T5545] EXT4-fs (loop5): orphan cleanup on readonly fs [ 467.820019][ T5545] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1275: bg 0: block 248: padding at end of block bitmap is not set [ 467.902956][ T5545] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1275: Failed to acquire dquot type 1 [ 468.389634][ T5545] EXT4-fs (loop5): 1 truncate cleaned up [ 468.396472][ T5545] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 469.334831][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 469.503616][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.516525][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 469.527668][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 469.703010][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.918946][ T24] usb 4-1: config 0 descriptor?? [ 469.979145][ T5561] loop2: detected capacity change from 0 to 512 [ 470.025498][ T5561] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 470.034650][ T5561] ext4 filesystem being mounted at /269/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.062186][ T24] usb 4-1: USB disconnect, device number 47 [ 470.181939][ T5561] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.1279: corrupted inode contents [ 470.205014][ T5561] EXT4-fs error (device loop2): ext4_dirty_inode:6135: inode #2: comm syz.2.1279: mark_inode_dirty error [ 470.224773][ T5561] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.1279: corrupted inode contents [ 470.249701][ T5561] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1279: mark_inode_dirty error [ 470.738413][ T5573] loop1: detected capacity change from 0 to 512 [ 470.755816][ T5573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 470.807523][ T5573] EXT4-fs (loop1): orphan cleanup on readonly fs [ 470.844107][ T5573] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1281: bg 0: block 248: padding at end of block bitmap is not set [ 470.859686][ T5573] __quota_error: 68 callbacks suppressed [ 470.859718][ T5573] Quota error (device loop1): write_blk: dquota write failed [ 470.873179][ T5573] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 470.883227][ T5573] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1281: Failed to acquire dquot type 1 [ 470.896985][ T5573] EXT4-fs (loop1): 1 truncate cleaned up [ 470.907163][ T5573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 471.420168][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 471.456514][ T284] EXT4-fs (loop2): unmounting filesystem. [ 472.106407][ T5584] loop5: detected capacity change from 0 to 512 [ 472.185400][ T5584] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 472.194968][ T5584] ext4 filesystem being mounted at /191/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.200921][ T5591] loop2: detected capacity change from 0 to 512 [ 472.216829][ T283] EXT4-fs (loop1): unmounting filesystem. [ 472.252706][ T5584] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #2: comm syz.5.1283: corrupted inode contents [ 472.266134][ T5591] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 472.285064][ T5591] ext4 filesystem being mounted at /270/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.325345][ T5584] EXT4-fs error (device loop5): ext4_dirty_inode:6135: inode #2: comm syz.5.1283: mark_inode_dirty error [ 472.337644][ T5591] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.1284: corrupted inode contents [ 472.394109][ T5591] EXT4-fs error (device loop2): ext4_dirty_inode:6135: inode #2: comm syz.2.1284: mark_inode_dirty error [ 472.415250][ T5591] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.1284: corrupted inode contents [ 472.427218][ T5584] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #2: comm syz.5.1283: corrupted inode contents [ 472.505764][ T5584] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1283: mark_inode_dirty error [ 472.517338][ T5591] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1284: mark_inode_dirty error [ 472.784692][ T284] EXT4-fs (loop2): unmounting filesystem. [ 472.791711][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 472.801498][ T28] audit: type=1326 audit(1764014383.466:9023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 472.816024][ T5601] loop0: detected capacity change from 0 to 2048 [ 472.825128][ T28] audit: type=1326 audit(1764014383.466:9024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 472.856731][ T28] audit: type=1326 audit(1764014383.466:9025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 472.875090][ T5603] loop5: detected capacity change from 0 to 512 [ 472.886820][ T28] audit: type=1326 audit(1764014383.466:9026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 472.910484][ T28] audit: type=1326 audit(1764014383.466:9027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 472.943593][ T5603] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 472.957527][ T5603] ext4 filesystem being mounted at /192/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.976824][ T5603] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #2: comm syz.5.1288: corrupted inode contents [ 472.988987][ T5603] EXT4-fs error (device loop5): ext4_dirty_inode:6135: inode #2: comm syz.5.1288: mark_inode_dirty error [ 473.000653][ T5603] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #2: comm syz.5.1288: corrupted inode contents [ 473.013058][ T28] audit: type=1326 audit(1764014383.466:9028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 473.037265][ T28] audit: type=1326 audit(1764014383.466:9029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 473.061259][ T5603] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1288: mark_inode_dirty error [ 473.064047][ T5601] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 473.147740][ T28] audit: type=1326 audit(1764014383.466:9030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5600 comm="syz.0.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 473.168434][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1289'. [ 473.455099][ T1964] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 473.475364][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 473.684829][ T1964] usb 2-1: Using ep0 maxpacket: 32 [ 473.691260][ T1964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.709416][ T1964] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 473.726920][ T282] EXT4-fs (loop0): unmounting filesystem. [ 473.747782][ T1964] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 473.757132][ T1964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.768299][ T1964] usb 2-1: config 0 descriptor?? [ 473.794235][ T5627] loop0: detected capacity change from 0 to 2048 [ 473.900743][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 473.960809][ T5627] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 474.013050][ T1964] usb 2-1: USB disconnect, device number 64 [ 474.017860][ T5627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 474.084923][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 474.095761][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.141927][ T5634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 474.199975][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 474.231240][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 474.283378][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.301389][ T24] usb 6-1: config 0 descriptor?? [ 474.577050][ T24] usb 6-1: USB disconnect, device number 35 [ 474.604864][ T1964] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 474.683765][ T5638] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 474.693212][ T5638] FAT-fs (loop5): unable to read boot sector [ 474.814986][ T1964] usb 4-1: Using ep0 maxpacket: 16 [ 474.822814][ T1964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.928570][ T1964] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 474.947468][ T282] EXT4-fs (loop0): unmounting filesystem. [ 474.987423][ T1964] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 474.996918][ T1964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.015445][ T1964] usb 4-1: config 0 descriptor?? [ 475.936986][ T5643] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 475.946287][ T5643] FAT-fs (loop3): unable to read boot sector [ 476.504870][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 476.504912][ T28] audit: type=1326 audit(1764014387.156:9171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 476.545663][ T5652] loop5: detected capacity change from 0 to 2048 [ 476.623884][ T28] audit: type=1326 audit(1764014387.156:9172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 476.751883][ T28] audit: type=1326 audit(1764014387.156:9173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 476.859972][ T28] audit: type=1326 audit(1764014387.156:9174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 476.902651][ T28] audit: type=1326 audit(1764014387.156:9175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 476.930945][ T28] audit: type=1326 audit(1764014387.156:9176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 476.952972][ T5652] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 476.973143][ T28] audit: type=1326 audit(1764014387.156:9177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 476.977329][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1299'. [ 477.006664][ T687] usb 4-1: USB disconnect, device number 48 [ 477.014430][ T28] audit: type=1326 audit(1764014387.196:9178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 477.045182][ T28] audit: type=1326 audit(1764014387.196:9179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 477.109391][ T28] audit: type=1326 audit(1764014387.196:9180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5650 comm="syz.5.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 477.536450][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 477.556092][ T5671] loop5: detected capacity change from 0 to 256 [ 477.564007][ T5671] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 478.216967][ T5675] loop3: detected capacity change from 0 to 256 [ 478.223755][ T5675] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 479.298682][ T5686] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1308'. [ 479.307898][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 479.882308][ T5693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 480.654340][ T5709] loop1: detected capacity change from 0 to 2048 [ 480.726738][ T540] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 480.749668][ T5709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 480.837052][ T5714] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 480.846601][ T5714] FAT-fs (loop11): unable to read boot sector [ 480.896135][ T5709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 480.974968][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 481.144870][ T540] usb 1-1: Using ep0 maxpacket: 16 [ 481.151382][ T540] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.174168][ T540] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 481.194864][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 481.194888][ T540] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 481.201480][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.209400][ T540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.228267][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 481.238740][ T540] usb 1-1: config 0 descriptor?? [ 481.243994][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 481.278750][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.302047][ T24] usb 3-1: config 0 descriptor?? [ 481.619998][ T687] usb 3-1: USB disconnect, device number 52 [ 481.642732][ T283] EXT4-fs (loop1): unmounting filesystem. [ 482.500231][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 482.542789][ T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 482.555373][ T1964] usb 1-1: USB disconnect, device number 57 [ 482.872874][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 482.906168][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.916519][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.925980][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 482.935651][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.948395][ T24] usb 6-1: config 0 descriptor?? [ 483.121553][ T19] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 484.416750][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 484.416767][ T28] audit: type=1326 audit(1764014395.076:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.462035][ T5745] loop3: detected capacity change from 0 to 512 [ 484.465194][ T5742] loop2: detected capacity change from 0 to 2048 [ 484.468518][ T28] audit: type=1326 audit(1764014395.106:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.498691][ T28] audit: type=1326 audit(1764014395.106:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.522296][ T28] audit: type=1326 audit(1764014395.106:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.522318][ T5746] loop0: detected capacity change from 0 to 128 [ 484.570078][ T5745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 484.573880][ T24] usb 6-1: USB disconnect, device number 36 [ 484.579352][ T5745] ext4 filesystem being mounted at /261/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.591771][ T28] audit: type=1326 audit(1764014395.106:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.620734][ T5742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 484.620772][ T28] audit: type=1326 audit(1764014395.106:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.630038][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 484.652763][ T28] audit: type=1326 audit(1764014395.106:9325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.666048][ T5745] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #2: comm syz.3.1324: corrupted inode contents [ 484.682810][ T28] audit: type=1326 audit(1764014395.106:9326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.713058][ T5745] EXT4-fs error (device loop3): ext4_dirty_inode:6135: inode #2: comm syz.3.1324: mark_inode_dirty error [ 484.729039][ T28] audit: type=1326 audit(1764014395.106:9327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.730658][ T19] usb 2-1: device descriptor read/all, error -71 [ 484.752590][ T28] audit: type=1326 audit(1764014395.106:9328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 484.761565][ T5745] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #2: comm syz.3.1324: corrupted inode contents [ 484.795794][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 484.820614][ T5745] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1324: mark_inode_dirty error [ 484.850861][ T5754] loop1: detected capacity change from 0 to 512 [ 484.886178][ T5754] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 484.895395][ T5754] ext4 filesystem being mounted at /255/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.914910][ T285] EXT4-fs (loop3): unmounting filesystem. [ 484.921327][ T5754] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #2: comm syz.1.1325: corrupted inode contents [ 484.946122][ T5754] EXT4-fs error (device loop1): ext4_dirty_inode:6135: inode #2: comm syz.1.1325: mark_inode_dirty error [ 484.965479][ T5754] EXT4-fs error (device loop1): ext4_do_update_inode:5270: inode #2: comm syz.1.1325: corrupted inode contents [ 484.977583][ T5754] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.1325: mark_inode_dirty error [ 485.043343][ T283] EXT4-fs (loop1): unmounting filesystem. [ 485.109619][ T5760] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1326'. [ 485.118785][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 485.192888][ T5764] loop1: detected capacity change from 0 to 512 [ 485.204083][ T5764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.414237][ T5764] EXT4-fs (loop1): orphan cleanup on readonly fs [ 485.423463][ T5764] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1327: bg 0: block 248: padding at end of block bitmap is not set [ 485.440897][ T5764] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1327: Failed to acquire dquot type 1 [ 485.454755][ T5764] EXT4-fs (loop1): 1 truncate cleaned up [ 485.465586][ T5764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 487.376481][ T5771] loop5: detected capacity change from 0 to 2048 [ 487.504929][ T19] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 487.600750][ T5771] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 487.677097][ T284] EXT4-fs (loop2): unmounting filesystem. [ 487.744882][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 487.751778][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.782939][ T19] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 487.822899][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1328'. [ 487.837120][ T19] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 487.898895][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.942612][ T19] usb 1-1: config 0 descriptor?? [ 487.943637][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 489.769920][ T19] usb 1-1: USB disconnect, device number 58 [ 490.486408][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 491.029912][ T283] EXT4-fs (loop1): unmounting filesystem. [ 491.554843][ T6] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 491.995009][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 492.001396][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.021092][ T6] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 492.039517][ T6] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 492.105398][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.115127][ T6] usb 3-1: config 0 descriptor?? [ 492.238672][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1342'. [ 492.525515][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 492.525532][ T28] audit: type=1326 audit(1764014403.186:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.569067][ T5834] loop1: detected capacity change from 0 to 2048 [ 492.576449][ T28] audit: type=1326 audit(1764014403.216:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.608587][ T28] audit: type=1326 audit(1764014403.216:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.666298][ T1964] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 492.674517][ T28] audit: type=1326 audit(1764014403.216:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.684185][ T5834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 492.717595][ T28] audit: type=1326 audit(1764014403.216:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.743515][ T28] audit: type=1326 audit(1764014403.216:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.748574][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 492.767874][ T28] audit: type=1326 audit(1764014403.216:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.777192][ T5842] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1345'. [ 492.799551][ T28] audit: type=1326 audit(1764014403.216:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.808834][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 492.848944][ T28] audit: type=1326 audit(1764014403.216:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.872525][ T28] audit: type=1326 audit(1764014403.216:9437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.1.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 492.884862][ T1964] usb 6-1: Using ep0 maxpacket: 16 [ 492.902575][ T1964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.912799][ T1964] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 492.922056][ T1964] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 492.931433][ T1964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.024727][ T1964] usb 6-1: config 0 descriptor?? [ 493.506199][ T476] usb 3-1: USB disconnect, device number 53 [ 493.596664][ T283] EXT4-fs (loop1): unmounting filesystem. [ 495.795307][ T5856] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 495.804578][ T5856] FAT-fs (loop5): unable to read boot sector [ 496.146736][ T24] usb 6-1: USB disconnect, device number 37 [ 496.190357][ T5866] loop3: detected capacity change from 0 to 512 [ 496.197622][ T5866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 496.228743][ T5866] EXT4-fs (loop3): orphan cleanup on readonly fs [ 496.235959][ T5866] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1352: bg 0: block 248: padding at end of block bitmap is not set [ 496.251102][ T5866] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.1352: Failed to acquire dquot type 1 [ 497.037595][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'. [ 497.995307][ T1964] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 498.273824][ T5866] EXT4-fs (loop3): 1 truncate cleaned up [ 498.287942][ T5878] loop1: detected capacity change from 0 to 256 [ 498.296361][ T5878] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 498.584520][ T5866] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 498.708702][ T285] EXT4-fs (loop3): unmounting filesystem. [ 498.848141][ T19] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 499.224868][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 499.224892][ T28] audit: type=1326 audit(1764014409.866:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 499.261874][ T5898] loop0: detected capacity change from 0 to 512 [ 499.269173][ T5898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.293318][ T5896] loop5: detected capacity change from 0 to 2048 [ 499.302103][ T28] audit: type=1326 audit(1764014409.866:9509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 499.327713][ T5898] EXT4-fs (loop0): orphan cleanup on readonly fs [ 499.336125][ T5898] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1358: bg 0: block 248: padding at end of block bitmap is not set [ 499.351111][ T5898] Quota error (device loop0): write_blk: dquota write failed [ 499.358511][ T28] audit: type=1326 audit(1764014409.866:9510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 499.358545][ T28] audit: type=1326 audit(1764014409.866:9511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 499.406046][ T5898] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 499.416209][ T5898] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1358: Failed to acquire dquot type 1 [ 499.440910][ T5898] EXT4-fs (loop0): 1 truncate cleaned up [ 499.632170][ T5896] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 499.676711][ T5898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 499.693918][ T28] audit: type=1326 audit(1764014409.866:9512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 499.718237][ T28] audit: type=1326 audit(1764014409.866:9513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 499.751679][ T28] audit: type=1326 audit(1764014409.866:9514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 499.787402][ T28] audit: type=1326 audit(1764014409.866:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 499.811424][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1360'. [ 500.453425][ T282] EXT4-fs (loop0): unmounting filesystem. [ 500.600334][ T5917] loop0: detected capacity change from 0 to 512 [ 501.340137][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 501.407463][ T5917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 501.425033][ T5917] ext4 filesystem being mounted at /269/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.461213][ T5917] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.1363: corrupted inode contents [ 501.493294][ T5917] EXT4-fs error (device loop0): ext4_dirty_inode:6135: inode #2: comm syz.0.1363: mark_inode_dirty error [ 501.546390][ T5927] loop3: detected capacity change from 0 to 512 [ 501.554717][ T5927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 502.607375][ T5932] loop5: detected capacity change from 0 to 512 [ 502.622755][ T5932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 502.696535][ T5917] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.1363: corrupted inode contents [ 502.740649][ T5932] EXT4-fs (loop5): orphan cleanup on readonly fs [ 502.749786][ T5932] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1366: bg 0: block 248: padding at end of block bitmap is not set [ 502.765802][ T5932] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1366: Failed to acquire dquot type 1 [ 502.779085][ T5932] EXT4-fs (loop5): 1 truncate cleaned up [ 502.785894][ T5932] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 502.842385][ T5927] EXT4-fs (loop3): orphan cleanup on readonly fs [ 502.852092][ T5927] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1367: bg 0: block 248: padding at end of block bitmap is not set [ 502.867751][ T5927] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.1367: Failed to acquire dquot type 1 [ 502.881216][ T5927] EXT4-fs (loop3): 1 truncate cleaned up [ 502.888230][ T5927] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 503.303814][ T5917] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1363: mark_inode_dirty error [ 503.378955][ T282] EXT4-fs (loop0): unmounting filesystem. [ 503.586410][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 503.696727][ T5944] loop5: detected capacity change from 0 to 512 [ 503.737977][ T5944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.749169][ T5945] loop0: detected capacity change from 0 to 512 [ 503.765078][ T5945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.883294][ T5945] EXT4-fs (loop0): orphan cleanup on readonly fs [ 503.893563][ T5945] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1369: bg 0: block 248: padding at end of block bitmap is not set [ 503.910037][ T5945] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1369: Failed to acquire dquot type 1 [ 503.924037][ T5945] EXT4-fs (loop0): 1 truncate cleaned up [ 503.931508][ T5945] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 503.994622][ T5944] EXT4-fs (loop5): orphan cleanup on readonly fs [ 504.004683][ T5944] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1370: bg 0: block 248: padding at end of block bitmap is not set [ 504.020572][ T5944] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1370: Failed to acquire dquot type 1 [ 504.034276][ T5944] EXT4-fs (loop5): 1 truncate cleaned up [ 504.042638][ T5944] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 504.599654][ T285] EXT4-fs (loop3): unmounting filesystem. [ 504.599688][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 505.222635][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 505.222651][ T28] audit: type=1326 audit(1764014415.876:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 505.262987][ T5959] loop1: detected capacity change from 0 to 2048 [ 505.997998][ T28] audit: type=1326 audit(1764014415.886:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 506.027187][ T28] audit: type=1326 audit(1764014415.886:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 506.059197][ T28] audit: type=1326 audit(1764014415.886:9600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 506.080691][ T5959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 506.083484][ T28] audit: type=1326 audit(1764014415.886:9601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 506.148212][ T28] audit: type=1326 audit(1764014415.886:9602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 506.173063][ T28] audit: type=1326 audit(1764014415.886:9603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 506.211399][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 506.223456][ T28] audit: type=1326 audit(1764014415.886:9604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 506.247427][ T28] audit: type=1326 audit(1764014415.886:9605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 506.271671][ T28] audit: type=1326 audit(1764014415.886:9606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5958 comm="syz.1.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca8d8f749 code=0x7ffc0000 [ 506.467091][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1375'. [ 506.963751][ T282] EXT4-fs (loop0): unmounting filesystem. [ 507.030328][ T283] EXT4-fs (loop1): unmounting filesystem. [ 507.116995][ T5978] loop0: detected capacity change from 0 to 512 [ 507.150883][ T5978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 507.203210][ T476] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 507.271793][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 507.748818][ T594] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 508.106732][ T5978] EXT4-fs (loop0): orphan cleanup on readonly fs [ 508.116677][ T5978] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1377: bg 0: block 248: padding at end of block bitmap is not set [ 508.132343][ T5978] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1377: Failed to acquire dquot type 1 [ 508.146017][ T5978] EXT4-fs (loop0): 1 truncate cleaned up [ 508.152694][ T5978] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 508.474897][ T1963] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 508.497525][ T5985] loop2: detected capacity change from 0 to 512 [ 508.570113][ T5985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 508.634193][ T5985] EXT4-fs (loop2): orphan cleanup on readonly fs [ 508.662376][ T5985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1379: bg 0: block 248: padding at end of block bitmap is not set [ 508.677168][ T1963] usb 1-1: Using ep0 maxpacket: 32 [ 508.684350][ T1963] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.707333][ T1963] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.756512][ T1963] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 508.773571][ T5985] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.1379: Failed to acquire dquot type 1 [ 508.785913][ T1963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.849528][ T5985] EXT4-fs (loop2): 1 truncate cleaned up [ 508.877912][ T5985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 508.891968][ T1963] usb 1-1: config 0 descriptor?? [ 508.902091][ T1963] hub 1-1:0.0: bad descriptor, ignoring hub [ 508.925789][ T1963] hub: probe of 1-1:0.0 failed with error -5 [ 508.951268][ T1963] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 509.074824][ T476] usb 6-1: Using ep0 maxpacket: 16 [ 509.081073][ T476] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.091333][ T476] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.136399][ T476] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 509.145645][ T476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.155557][ T476] usb 6-1: config 0 descriptor?? [ 509.174936][ T594] usb 2-1: Using ep0 maxpacket: 16 [ 509.181513][ T594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.191921][ T594] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.201285][ T594] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 509.201317][ T594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.205529][ T594] usb 2-1: config 0 descriptor?? [ 509.248174][ T19] usb 6-1: USB disconnect, device number 38 [ 509.251318][ T5990] loop5: detected capacity change from 0 to 512 [ 509.300082][ T5990] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 509.300163][ T5990] ext4 filesystem being mounted at /210/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.310349][ T5990] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #2: comm syz.5.1381: corrupted inode contents [ 509.343640][ T5990] EXT4-fs error (device loop5): ext4_dirty_inode:6135: inode #2: comm syz.5.1381: mark_inode_dirty error [ 509.355828][ T5990] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #2: comm syz.5.1381: corrupted inode contents [ 509.368812][ T5990] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1381: mark_inode_dirty error [ 509.404682][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 509.493919][ T5998] loop3: detected capacity change from 0 to 512 [ 509.526474][ T5998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 509.535527][ T5998] ext4 filesystem being mounted at /278/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.771014][ T5998] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #2: comm syz.3.1383: corrupted inode contents [ 509.798521][ T5998] EXT4-fs error (device loop3): ext4_dirty_inode:6135: inode #2: comm syz.3.1383: mark_inode_dirty error [ 509.824570][ T5998] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #2: comm syz.3.1383: corrupted inode contents [ 509.856310][ T5998] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1383: mark_inode_dirty error [ 510.003180][ T285] EXT4-fs (loop3): unmounting filesystem. [ 510.657175][ T1963] usb 2-1: USB disconnect, device number 68 [ 510.670517][ T282] EXT4-fs (loop0): unmounting filesystem. [ 510.774937][ T19] usb 1-1: USB disconnect, device number 59 [ 510.913909][ T6020] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 510.923413][ T6020] FAT-fs (loop3): unable to read boot sector [ 511.908218][ T6021] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1387'. [ 511.917335][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 511.971961][ T284] EXT4-fs (loop2): unmounting filesystem. [ 512.057907][ T6029] loop1: detected capacity change from 0 to 512 [ 512.067372][ T6029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 513.167154][ T6029] EXT4-fs (loop1): orphan cleanup on readonly fs [ 513.176663][ T6029] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1389: bg 0: block 248: padding at end of block bitmap is not set [ 513.192708][ T6029] __quota_error: 70 callbacks suppressed [ 513.192728][ T6029] Quota error (device loop1): write_blk: dquota write failed [ 513.205957][ T6029] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 513.215954][ T6029] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1389: Failed to acquire dquot type 1 [ 513.229070][ T6029] EXT4-fs (loop1): 1 truncate cleaned up [ 513.235513][ T6029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 514.797741][ T6041] loop5: detected capacity change from 0 to 512 [ 514.958079][ T6041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 514.971729][ T283] EXT4-fs (loop1): unmounting filesystem. [ 515.914602][ T6041] EXT4-fs (loop5): orphan cleanup on readonly fs [ 515.922801][ T6041] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1392: bg 0: block 248: padding at end of block bitmap is not set [ 515.951846][ T6041] Quota error (device loop5): write_blk: dquota write failed [ 515.959372][ T6041] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 515.969397][ T6041] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1392: Failed to acquire dquot type 1 [ 515.996150][ T6041] EXT4-fs (loop5): 1 truncate cleaned up [ 516.377949][ T6041] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 516.418764][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 518.584478][ T6068] loop0: detected capacity change from 0 to 512 [ 518.616843][ T6070] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1396'. [ 518.625985][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1396'. [ 518.680700][ T6068] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 518.693279][ T6068] ext4 filesystem being mounted at /276/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.722491][ T6068] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.1399: corrupted inode contents [ 519.666033][ T6081] loop2: detected capacity change from 0 to 512 [ 519.742691][ T6081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 519.863668][ T6068] EXT4-fs error (device loop0): ext4_dirty_inode:6135: inode #2: comm syz.0.1399: mark_inode_dirty error [ 519.911009][ T6081] EXT4-fs (loop2): orphan cleanup on readonly fs [ 519.920236][ T6081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1400: bg 0: block 248: padding at end of block bitmap is not set [ 519.936721][ T6081] Quota error (device loop2): write_blk: dquota write failed [ 519.944273][ T6081] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 519.954286][ T6081] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.1400: Failed to acquire dquot type 1 [ 519.968258][ T6081] EXT4-fs (loop2): 1 truncate cleaned up [ 519.974990][ T6081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 520.936667][ T6068] EXT4-fs error (device loop0): ext4_do_update_inode:5270: inode #2: comm syz.0.1399: corrupted inode contents [ 520.950234][ T6068] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1399: mark_inode_dirty error [ 520.983413][ T6093] loop5: detected capacity change from 0 to 512 [ 521.069859][ T6097] loop1: detected capacity change from 0 to 512 [ 521.080149][ T6097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 521.095130][ T6093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 521.148795][ T6097] EXT4-fs (loop1): orphan cleanup on readonly fs [ 521.158326][ T6097] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1404: bg 0: block 248: padding at end of block bitmap is not set [ 521.174861][ T6097] Quota error (device loop1): write_blk: dquota write failed [ 521.182488][ T6097] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 521.192547][ T6097] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1404: Failed to acquire dquot type 1 [ 521.207889][ T6097] EXT4-fs (loop1): 1 truncate cleaned up [ 521.215752][ T6097] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 521.467380][ T6093] EXT4-fs (loop5): orphan cleanup on readonly fs [ 521.530859][ T6093] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1403: bg 0: block 248: padding at end of block bitmap is not set [ 521.579010][ T6093] Quota error (device loop5): write_blk: dquota write failed [ 521.588768][ T6093] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 521.600690][ T6093] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1403: Failed to acquire dquot type 1 [ 521.619735][ T6093] EXT4-fs (loop5): 1 truncate cleaned up [ 521.725694][ T6093] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 521.725830][ T282] EXT4-fs (loop0): unmounting filesystem. [ 521.736270][ T284] EXT4-fs (loop2): unmounting filesystem. [ 523.642375][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 523.727355][ T687] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 525.911800][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 526.255349][ T283] EXT4-fs (loop1): unmounting filesystem. [ 526.535707][ T6138] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 526.544959][ T6138] FAT-fs (loop1): unable to read boot sector [ 528.993164][ T476] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 529.204056][ T6166] loop0: detected capacity change from 0 to 512 [ 529.215147][ T6166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 529.234889][ T6161] 9pnet_fd: Insufficient options for proto=fd [ 529.266811][ T6166] EXT4-fs (loop0): orphan cleanup on readonly fs [ 529.282993][ T6166] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1417: bg 0: block 248: padding at end of block bitmap is not set [ 529.305071][ T6168] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 529.314368][ T6168] FAT-fs (loop7): unable to read boot sector [ 529.348599][ T6166] Quota error (device loop0): write_blk: dquota write failed [ 529.361739][ T6166] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 529.382578][ T6166] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1417: Failed to acquire dquot type 1 [ 529.454569][ T6166] EXT4-fs (loop0): 1 truncate cleaned up [ 529.523801][ T6166] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 531.046208][ T289] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 531.525518][ T289] usb 1-1: Using ep0 maxpacket: 32 [ 531.814471][ T289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.908099][ T289] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.989947][ T289] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 532.000097][ T289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.027636][ T289] usb 1-1: config 0 descriptor?? [ 532.042505][ T289] hub 1-1:0.0: bad descriptor, ignoring hub [ 532.048866][ T289] hub: probe of 1-1:0.0 failed with error -5 [ 532.057135][ T289] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 532.233799][ T282] EXT4-fs (loop0): unmounting filesystem. [ 532.308885][ T6183] loop5: detected capacity change from 0 to 512 [ 532.389575][ T6186] loop2: detected capacity change from 0 to 512 [ 532.443888][ T6186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 532.453069][ T6183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 532.527383][ T476] usb 1-1: USB disconnect, device number 60 [ 532.572965][ T6186] EXT4-fs (loop2): orphan cleanup on readonly fs [ 532.622108][ T6186] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1425: bg 0: block 248: padding at end of block bitmap is not set [ 532.637604][ T6186] Quota error (device loop2): write_blk: dquota write failed [ 532.645308][ T6186] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 532.655387][ T6186] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.1425: Failed to acquire dquot type 1 [ 532.669261][ T6186] EXT4-fs (loop2): 1 truncate cleaned up [ 532.676113][ T6186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 532.737926][ T6183] EXT4-fs (loop5): orphan cleanup on readonly fs [ 532.748106][ T6183] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1424: bg 0: block 248: padding at end of block bitmap is not set [ 532.770249][ T6183] Quota error (device loop5): write_blk: dquota write failed [ 532.777948][ T6183] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 532.788028][ T6183] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1424: Failed to acquire dquot type 1 [ 532.801843][ T6183] EXT4-fs (loop5): 1 truncate cleaned up [ 532.809023][ T6183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 533.495089][ T6200] overlayfs: overlapping lowerdir path [ 534.964810][ T594] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 535.557443][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 535.605175][ T594] usb 3-1: Using ep0 maxpacket: 32 [ 535.605619][ T284] EXT4-fs (loop2): unmounting filesystem. [ 535.618306][ T594] usb 3-1: device descriptor read/all, error -71 [ 538.197082][ T28] audit: type=1326 audit(1764014448.856:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 538.245008][ T6238] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1433'. [ 538.254114][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 538.280691][ T6240] loop5: detected capacity change from 0 to 512 [ 538.341474][ T6228] loop2: detected capacity change from 0 to 2048 [ 538.408548][ T28] audit: type=1326 audit(1764014448.956:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 538.442005][ T28] audit: type=1326 audit(1764014448.976:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 538.465060][ T6228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 538.476593][ T6240] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 538.494894][ T28] audit: type=1326 audit(1764014448.986:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 538.518487][ T28] audit: type=1326 audit(1764014448.986:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 538.541774][ T6240] ext4 filesystem being mounted at /222/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.580822][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 538.585166][ T28] audit: type=1326 audit(1764014448.986:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 538.623285][ T28] audit: type=1326 audit(1764014448.986:9679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 538.623759][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 538.647299][ T28] audit: type=1326 audit(1764014448.986:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 539.625233][ T28] audit: type=1326 audit(1764014448.986:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 539.663721][ T28] audit: type=1326 audit(1764014448.986:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6227 comm="syz.2.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 539.730173][ T284] EXT4-fs (loop2): unmounting filesystem. [ 539.756836][ T6260] loop2: detected capacity change from 0 to 128 [ 540.128964][ T6265] loop0: detected capacity change from 0 to 512 [ 540.197454][ T6265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 540.884528][ T6265] EXT4-fs (loop0): orphan cleanup on readonly fs [ 540.893563][ T6265] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1440: bg 0: block 248: padding at end of block bitmap is not set [ 540.909954][ T6265] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1440: Failed to acquire dquot type 1 [ 540.923203][ T6265] EXT4-fs (loop0): 1 truncate cleaned up [ 540.930527][ T6265] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 541.315825][ T289] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 542.264881][ T289] usb 1-1: Using ep0 maxpacket: 32 [ 542.271625][ T289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.284221][ T289] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.298177][ T289] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 542.308189][ T289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.342498][ T289] usb 1-1: config 0 descriptor?? [ 542.360826][ T289] hub 1-1:0.0: bad descriptor, ignoring hub [ 542.366986][ T289] hub: probe of 1-1:0.0 failed with error -5 [ 542.374381][ T289] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 544.133780][ T282] EXT4-fs (loop0): unmounting filesystem. [ 544.247581][ T289] usb 1-1: USB disconnect, device number 61 [ 545.213963][ T6300] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1449'. [ 545.223044][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'. [ 547.846481][ T6321] overlayfs: overlapping lowerdir path [ 550.045880][ T476] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 550.686737][ T476] usb 3-1: Using ep0 maxpacket: 16 [ 550.809695][ T6356] loop0: detected capacity change from 0 to 512 [ 550.818333][ T6356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 550.840558][ T476] usb 3-1: device descriptor read/all, error -71 [ 551.498962][ T1963] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 551.930602][ T6356] EXT4-fs (loop0): orphan cleanup on readonly fs [ 551.939688][ T6356] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1463: bg 0: block 248: padding at end of block bitmap is not set [ 551.955272][ T6356] __quota_error: 61 callbacks suppressed [ 551.955301][ T6356] Quota error (device loop0): write_blk: dquota write failed [ 551.968777][ T6356] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 551.978904][ T6356] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1463: Failed to acquire dquot type 1 [ 551.992157][ T6356] EXT4-fs (loop0): 1 truncate cleaned up [ 552.012381][ T6356] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 552.173577][ T6360] loop2: detected capacity change from 0 to 512 [ 553.214900][ T19] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 553.339305][ T6369] loop1: detected capacity change from 0 to 512 [ 553.397092][ T6360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 553.414908][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 553.421912][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.536636][ T6369] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 553.551624][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.635872][ T6360] EXT4-fs (loop2): orphan cleanup on readonly fs [ 553.665548][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 553.741828][ T6369] EXT4-fs (loop1): orphan cleanup on readonly fs [ 553.750569][ T6360] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1465: bg 0: block 248: padding at end of block bitmap is not set [ 553.765205][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.771972][ T427] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 553.781786][ T282] EXT4-fs (loop0): unmounting filesystem. [ 553.802945][ T6369] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1466: bg 0: block 248: padding at end of block bitmap is not set [ 553.821578][ T19] usb 1-1: config 0 descriptor?? [ 553.827209][ T19] usb 1-1: can't set config #0, error -71 [ 553.842780][ T19] usb 1-1: USB disconnect, device number 62 [ 553.896579][ T6369] Quota error (device loop1): write_blk: dquota write failed [ 553.904033][ T6369] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 553.914737][ T6360] Quota error (device loop2): write_blk: dquota write failed [ 553.922588][ T6360] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 553.937100][ T6369] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1466: Failed to acquire dquot type 1 [ 553.955394][ T6360] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.1465: Failed to acquire dquot type 1 [ 554.026011][ T6379] overlayfs: overlapping lowerdir path [ 554.057615][ T6369] EXT4-fs (loop1): 1 truncate cleaned up [ 554.200755][ T6360] EXT4-fs (loop2): 1 truncate cleaned up [ 555.605261][ T6369] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 555.621068][ T6360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 556.333495][ T6397] loop3: detected capacity change from 0 to 512 [ 556.346550][ T6397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 556.689167][ T6397] EXT4-fs (loop3): orphan cleanup on readonly fs [ 556.698337][ T6397] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1473: bg 0: block 248: padding at end of block bitmap is not set [ 556.770976][ T6402] overlayfs: overlapping lowerdir path [ 556.835430][ T6397] Quota error (device loop3): write_blk: dquota write failed [ 556.843353][ T6397] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 556.859905][ T6397] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.1473: Failed to acquire dquot type 1 [ 557.087117][ T6397] EXT4-fs (loop3): 1 truncate cleaned up [ 557.172753][ T6397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 557.917663][ T540] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 559.081312][ T540] usb 4-1: Using ep0 maxpacket: 32 [ 559.150627][ T540] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.219839][ T540] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.260839][ T540] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 559.288505][ T540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.319295][ T540] usb 4-1: config 0 descriptor?? [ 559.376770][ T540] usb 4-1: can't set config #0, error -71 [ 559.388082][ T285] EXT4-fs (loop3): unmounting filesystem. [ 559.400621][ T540] usb 4-1: USB disconnect, device number 51 [ 560.932318][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 561.923734][ T284] EXT4-fs (loop2): unmounting filesystem. [ 561.984816][ T427] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 562.045568][ T540] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 562.056695][ T283] EXT4-fs (loop1): unmounting filesystem. [ 562.234833][ T540] usb 4-1: Using ep0 maxpacket: 16 [ 562.241529][ T540] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.264838][ T6435] loop0: detected capacity change from 0 to 512 [ 562.272426][ T6435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 562.289086][ T6435] EXT4-fs (loop0): orphan cleanup on readonly fs [ 562.296689][ T6435] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1482: bg 0: block 248: padding at end of block bitmap is not set [ 562.312477][ T6435] Quota error (device loop0): write_blk: dquota write failed [ 562.319958][ T6435] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 562.329901][ T6435] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1482: Failed to acquire dquot type 1 [ 562.341369][ T540] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.350653][ T540] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 562.351018][ T6435] EXT4-fs (loop0): 1 truncate cleaned up [ 562.365878][ T540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.376156][ T540] usb 4-1: config 0 descriptor?? [ 562.381675][ T6435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 562.636161][ T427] usb 1-1: device not accepting address 63, error -71 [ 564.660212][ T540] usb 4-1: USB disconnect, device number 52 [ 564.669074][ T282] EXT4-fs (loop0): unmounting filesystem. [ 564.681830][ T28] audit: type=1326 audit(1764014475.336:9742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 564.719410][ T6450] loop2: detected capacity change from 0 to 2048 [ 564.728847][ T28] audit: type=1326 audit(1764014475.366:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 564.759979][ T28] audit: type=1326 audit(1764014475.366:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 564.852278][ T28] audit: type=1326 audit(1764014475.366:9745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 564.855889][ T6450] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 564.875937][ T28] audit: type=1326 audit(1764014475.366:9746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 564.910613][ T6452] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1487'. [ 564.921168][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 566.471727][ T28] audit: type=1326 audit(1764014475.366:9747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 566.497014][ T28] audit: type=1326 audit(1764014475.366:9748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 566.525227][ T28] audit: type=1326 audit(1764014475.366:9749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ea38f749 code=0x7ffc0000 [ 566.560776][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 570.028243][ T284] EXT4-fs (loop2): unmounting filesystem. [ 570.115343][ T6491] loop0: detected capacity change from 0 to 512 [ 571.284863][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'. [ 572.059548][ T6491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 572.069378][ T6491] EXT4-fs (loop0): orphan cleanup on readonly fs [ 572.076747][ T6491] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1493: bg 0: block 248: padding at end of block bitmap is not set [ 572.091694][ T6491] __quota_error: 74 callbacks suppressed [ 572.091711][ T6491] Quota error (device loop0): write_blk: dquota write failed [ 572.105830][ T6491] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 572.116309][ T6491] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1493: Failed to acquire dquot type 1 [ 574.028336][ T6505] overlayfs: overlapping lowerdir path [ 574.124950][ T6491] EXT4-fs (loop0): 1 truncate cleaned up [ 574.131084][ T6491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 574.235541][ T1963] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 574.853924][ T6518] overlayfs: overlapping lowerdir path [ 574.991782][ T28] audit: type=1326 audit(1764014485.646:9824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 575.024846][ T1964] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 575.040841][ T6523] loop3: detected capacity change from 0 to 2048 [ 575.047422][ T28] audit: type=1326 audit(1764014485.646:9825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 575.114322][ T28] audit: type=1326 audit(1764014485.676:9826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 575.150810][ T28] audit: type=1326 audit(1764014485.676:9827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 575.624417][ T6535] overlayfs: overlapping lowerdir path [ 576.484840][ T28] audit: type=1326 audit(1764014485.676:9828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 576.519638][ T28] audit: type=1326 audit(1764014485.676:9829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 576.574880][ T28] audit: type=1326 audit(1764014485.676:9830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 577.194857][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1505'. [ 577.790194][ T28] audit: type=1326 audit(1764014485.676:9831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 577.845257][ T6523] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 577.966109][ T6542] overlayfs: overlapping lowerdir path [ 577.975188][ T28] audit: type=1326 audit(1764014485.676:9832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 578.009525][ T285] EXT4-fs (loop3): unmounting filesystem. [ 578.033907][ T28] audit: type=1326 audit(1764014485.676:9833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 578.057893][ T28] audit: type=1326 audit(1764014485.676:9834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 578.088844][ T28] audit: type=1326 audit(1764014485.676:9835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 578.112705][ T1964] usb 2-1: Using ep0 maxpacket: 16 [ 578.122359][ T28] audit: type=1326 audit(1764014485.676:9836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 578.136341][ T1964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.156506][ T28] audit: type=1326 audit(1764014485.676:9837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 578.180256][ T28] audit: type=1326 audit(1764014485.676:9838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 578.206907][ T1964] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 578.216320][ T1964] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.224963][ T28] audit: type=1326 audit(1764014485.676:9839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 578.243368][ T28] audit: type=1326 audit(1764014485.676:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7518f749 code=0x7ffc0000 [ 578.310900][ T1964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.421668][ T1964] usb 2-1: config 0 descriptor?? [ 581.225602][ T6565] overlayfs: overlapping lowerdir path [ 581.346916][ T6] usb 2-1: USB disconnect, device number 69 [ 581.413954][ T6567] loop1: detected capacity change from 0 to 2048 [ 581.527302][ T6567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 581.569281][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 581.649959][ T282] EXT4-fs (loop0): unmounting filesystem. [ 581.842872][ T6581] loop0: detected capacity change from 0 to 512 [ 581.975119][ T6581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 582.446428][ T6581] EXT4-fs (loop0): orphan cleanup on readonly fs [ 582.474405][ T6581] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1516: bg 0: block 248: padding at end of block bitmap is not set [ 582.666037][ T6581] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1516: Failed to acquire dquot type 1 [ 582.834478][ T6581] EXT4-fs (loop0): 1 truncate cleaned up [ 582.864572][ T6581] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 582.944830][ T427] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 583.027522][ T283] EXT4-fs (loop1): unmounting filesystem. [ 583.194805][ T427] usb 6-1: Using ep0 maxpacket: 16 [ 583.201536][ T427] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.235303][ T427] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.254998][ T427] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 583.264494][ T427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.307651][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1520'. [ 583.383321][ T427] usb 6-1: config 0 descriptor?? [ 583.614877][ T687] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 583.955039][ T687] usb 2-1: Using ep0 maxpacket: 16 [ 583.974006][ T687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.316041][ T687] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.386289][ T687] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 584.439662][ T687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.511329][ T687] usb 2-1: config 0 descriptor?? [ 584.632618][ T6609] loop3: detected capacity change from 0 to 512 [ 584.656008][ T6609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 584.725442][ T6609] EXT4-fs (loop3): orphan cleanup on readonly fs [ 584.741460][ T6609] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1522: bg 0: block 248: padding at end of block bitmap is not set [ 584.817718][ T6609] __quota_error: 106 callbacks suppressed [ 584.817738][ T6609] Quota error (device loop3): write_blk: dquota write failed [ 584.851249][ T6609] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 584.861528][ T6609] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.1522: Failed to acquire dquot type 1 [ 584.914404][ T6609] EXT4-fs (loop3): 1 truncate cleaned up [ 585.183771][ T309] usb 6-1: USB disconnect, device number 41 [ 585.190077][ T6609] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 585.693203][ T6624] loop2: detected capacity change from 0 to 256 [ 585.700138][ T6624] FAT-fs (loop2): Unrecognized mount option "0x000000000000000600000000000000000000000" or missing value [ 586.113253][ T687] usb 2-1: USB disconnect, device number 70 [ 588.431100][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1529'. [ 588.866282][ T282] EXT4-fs (loop0): unmounting filesystem. [ 589.446865][ T687] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 589.590871][ T28] audit: type=1326 audit(1764014500.246:9945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.620491][ T28] audit: type=1326 audit(1764014500.256:9946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.622471][ T6648] loop0: detected capacity change from 0 to 2048 [ 589.644075][ T28] audit: type=1326 audit(1764014500.256:9947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.679391][ T28] audit: type=1326 audit(1764014500.256:9948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.703230][ T28] audit: type=1326 audit(1764014500.256:9949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.716573][ T687] usb 6-1: Using ep0 maxpacket: 16 [ 589.751813][ T28] audit: type=1326 audit(1764014500.256:9950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.777481][ T28] audit: type=1326 audit(1764014500.256:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.803669][ T687] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.814553][ T28] audit: type=1326 audit(1764014500.256:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.838326][ T687] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 589.847666][ T687] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.857124][ T687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.865820][ T28] audit: type=1326 audit(1764014500.256:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.893374][ T687] usb 6-1: config 0 descriptor?? [ 589.899552][ T6648] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 589.946417][ T28] audit: type=1326 audit(1764014500.256:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 589.983896][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 589.996809][ T28] audit: type=1326 audit(1764014500.256:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 590.020585][ T28] audit: type=1326 audit(1764014500.256:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 590.044264][ T28] audit: type=1326 audit(1764014500.256:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 590.069302][ T28] audit: type=1326 audit(1764014500.256:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 590.093176][ T28] audit: type=1326 audit(1764014500.256:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 590.093322][ T285] EXT4-fs (loop3): unmounting filesystem. [ 590.117417][ T28] audit: type=1326 audit(1764014500.256:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 590.146653][ T28] audit: type=1326 audit(1764014500.256:9961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 590.170558][ T28] audit: type=1326 audit(1764014500.256:9962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.0.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa4e6b8f749 code=0x7ffc0000 [ 590.218716][ T282] EXT4-fs (loop0): unmounting filesystem. [ 590.720390][ T6669] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 590.729704][ T6669] FAT-fs (loop1): unable to read boot sector [ 591.148004][ T6674] loop2: detected capacity change from 0 to 512 [ 591.243678][ T540] usb 6-1: USB disconnect, device number 42 [ 591.383169][ T6680] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 591.392696][ T6680] FAT-fs (loop7): unable to read boot sector [ 592.437229][ T6674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 592.727388][ T6674] EXT4-fs (loop2): orphan cleanup on readonly fs [ 592.734399][ T6674] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1537: bg 0: block 248: padding at end of block bitmap is not set [ 592.749135][ T6674] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.1537: Failed to acquire dquot type 1 [ 594.336813][ T6674] EXT4-fs (loop2): 1 truncate cleaned up [ 594.349912][ T6674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 595.207648][ T6704] loop1: detected capacity change from 0 to 256 [ 595.214551][ T6704] FAT-fs (loop1): Unrecognized mount option "0x000000000000000600000000000000000000000" or missing value [ 599.841366][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 599.841385][ T28] audit: type=1326 audit(1764014510.496:10024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 599.871571][ T28] audit: type=1326 audit(1764014510.496:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 599.895486][ T28] audit: type=1326 audit(1764014510.526:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 599.897848][ T6742] loop5: detected capacity change from 0 to 2048 [ 599.919205][ T28] audit: type=1326 audit(1764014510.526:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 601.664869][ T6] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 601.741150][ T28] audit: type=1326 audit(1764014510.526:10028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 601.773112][ T28] audit: type=1326 audit(1764014510.526:10029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 601.773441][ T6742] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 601.796762][ T28] audit: type=1326 audit(1764014510.526:10030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 601.829427][ T28] audit: type=1326 audit(1764014510.526:10031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 601.853068][ T28] audit: type=1326 audit(1764014510.526:10032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 601.877322][ T28] audit: type=1326 audit(1764014510.526:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.5.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde76f8f749 code=0x7ffc0000 [ 602.090423][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1554'. [ 602.448673][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 603.628720][ T284] EXT4-fs (loop2): unmounting filesystem. [ 605.304828][ T530] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 605.630374][ T6794] loop2: detected capacity change from 0 to 512 [ 605.697544][ T6794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 605.830705][ T6794] EXT4-fs (loop2): orphan cleanup on readonly fs [ 605.837911][ T6794] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1567: bg 0: block 248: padding at end of block bitmap is not set [ 605.852798][ T6794] __quota_error: 73 callbacks suppressed [ 605.852821][ T6794] Quota error (device loop2): write_blk: dquota write failed [ 605.865970][ T6794] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 605.875942][ T6794] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.1567: Failed to acquire dquot type 1 [ 605.888610][ T6794] EXT4-fs (loop2): 1 truncate cleaned up [ 605.894687][ T6794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 606.829800][ T6] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 608.331812][ T289] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 608.364536][ T284] EXT4-fs (loop2): unmounting filesystem. [ 609.637637][ T6824] loop3: detected capacity change from 0 to 512 [ 610.595783][ T6824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 610.695090][ T6824] EXT4-fs (loop3): orphan cleanup on readonly fs [ 610.702369][ T6824] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1573: bg 0: block 248: padding at end of block bitmap is not set [ 610.717786][ T6824] Quota error (device loop3): write_blk: dquota write failed [ 610.725347][ T6824] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 610.735306][ T6824] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.1573: Failed to acquire dquot type 1 [ 610.747666][ T6824] EXT4-fs (loop3): 1 truncate cleaned up [ 610.753557][ T6824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 612.168046][ T6839] loop1: detected capacity change from 0 to 512 [ 612.193443][ T6839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 613.076053][ T6839] EXT4-fs (loop1): orphan cleanup on readonly fs [ 613.092039][ T6839] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1575: bg 0: block 248: padding at end of block bitmap is not set [ 613.491049][ T6839] Quota error (device loop1): write_blk: dquota write failed [ 613.491808][ T285] EXT4-fs (loop3): unmounting filesystem. [ 613.498844][ T6839] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 613.567052][ T6839] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1575: Failed to acquire dquot type 1 [ 613.663212][ T6839] EXT4-fs (loop1): 1 truncate cleaned up [ 613.684254][ T6839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 614.099386][ T6859] loop3: detected capacity change from 0 to 512 [ 614.162827][ T6859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 614.316949][ T6859] EXT4-fs (loop3): orphan cleanup on readonly fs [ 614.479353][ T6859] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1581: bg 0: block 248: padding at end of block bitmap is not set [ 614.930376][ T6859] Quota error (device loop3): write_blk: dquota write failed [ 614.938159][ T6859] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 614.948250][ T6859] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.1581: Failed to acquire dquot type 1 [ 615.312132][ T6859] EXT4-fs (loop3): 1 truncate cleaned up [ 615.481933][ T6859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 616.334821][ T289] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 616.534807][ T289] usb 4-1: Using ep0 maxpacket: 32 [ 616.541731][ T289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.584298][ T289] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.642448][ T289] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 616.683031][ T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.739329][ T289] usb 4-1: config 0 descriptor?? [ 616.770553][ T289] hub 4-1:0.0: bad descriptor, ignoring hub [ 616.796926][ T289] hub: probe of 4-1:0.0 failed with error -5 [ 617.121633][ T285] EXT4-fs (loop3): unmounting filesystem. [ 617.234889][ T289] usb 4-1: USB disconnect, device number 54 [ 617.730927][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1585'. [ 618.294852][ T289] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 618.358804][ T6887] loop0: detected capacity change from 0 to 512 [ 618.365804][ T283] EXT4-fs (loop1): unmounting filesystem. [ 618.372925][ T6887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 618.397772][ T6887] EXT4-fs (loop0): orphan cleanup on readonly fs [ 618.410788][ T6887] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1588: bg 0: block 248: padding at end of block bitmap is not set [ 618.425535][ T6887] Quota error (device loop0): write_blk: dquota write failed [ 618.433028][ T6887] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 618.443079][ T6887] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1588: Failed to acquire dquot type 1 [ 618.461923][ T6887] EXT4-fs (loop0): 1 truncate cleaned up [ 618.484938][ T289] usb 4-1: Using ep0 maxpacket: 16 [ 618.529869][ T289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.545314][ T6887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 618.626368][ T289] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 618.637668][ T289] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.647788][ T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.656612][ T289] usb 4-1: config 0 descriptor?? [ 618.847195][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1591'. [ 619.124835][ T289] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 619.324768][ T289] usb 6-1: Using ep0 maxpacket: 16 [ 619.341027][ T289] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.354793][ T289] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 619.364035][ T289] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 619.374970][ T289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.384177][ T289] usb 6-1: config 0 descriptor?? [ 620.270994][ T289] usb 4-1: USB disconnect, device number 55 [ 621.437258][ T6912] overlayfs: overlapping lowerdir path [ 622.554087][ T24] usb 6-1: USB disconnect, device number 44 [ 624.009556][ T6942] loop1: detected capacity change from 0 to 512 [ 624.065125][ T6942] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 624.104419][ T282] EXT4-fs (loop0): unmounting filesystem. [ 625.108810][ T6942] EXT4-fs (loop1): orphan cleanup on readonly fs [ 625.125495][ T6942] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1598: bg 0: block 248: padding at end of block bitmap is not set [ 625.502946][ T6942] Quota error (device loop1): write_blk: dquota write failed [ 625.586799][ T6942] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 625.616424][ T6942] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1598: Failed to acquire dquot type 1 [ 625.628361][ T6942] EXT4-fs (loop1): 1 truncate cleaned up [ 625.651228][ T6942] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 625.967661][ T476] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 626.154999][ T476] usb 4-1: Using ep0 maxpacket: 16 [ 626.162786][ T476] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.251437][ T476] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 626.261110][ T476] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 626.270479][ T476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.282920][ T476] usb 4-1: config 0 descriptor?? [ 626.557141][ T540] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 627.054773][ T540] usb 1-1: Using ep0 maxpacket: 16 [ 627.061250][ T540] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.071811][ T540] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 627.081032][ T540] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 627.090230][ T540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.093685][ T283] EXT4-fs (loop1): unmounting filesystem. [ 627.099507][ T540] usb 1-1: config 0 descriptor?? [ 627.599242][ T540] usb 4-1: USB disconnect, device number 56 [ 628.625297][ T476] usb 1-1: USB disconnect, device number 67 [ 629.666509][ T6996] loop3: detected capacity change from 0 to 256 [ 629.673477][ T6996] FAT-fs (loop3): Unrecognized mount option "0x000000000000000600000000000000000000000" or missing value [ 633.343980][ T7015] loop5: detected capacity change from 0 to 512 [ 633.358021][ T7015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 633.380238][ T7015] EXT4-fs (loop5): orphan cleanup on readonly fs [ 633.387339][ T7015] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1620: bg 0: block 248: padding at end of block bitmap is not set [ 633.406271][ T7015] Quota error (device loop5): write_blk: dquota write failed [ 633.414032][ T7015] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 633.424420][ T7015] EXT4-fs error (device loop5): ext4_acquire_dquot:6803: comm syz.5.1620: Failed to acquire dquot type 1 [ 633.440014][ T7015] EXT4-fs (loop5): 1 truncate cleaned up [ 633.679450][ T7015] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 633.969595][ T7030] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 633.978886][ T7030] FAT-fs (loop1): unable to read boot sector [ 634.458116][ T540] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 634.664855][ T540] usb 6-1: Using ep0 maxpacket: 32 [ 634.677919][ T540] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.688575][ T540] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.701752][ T540] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 634.711042][ T540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.723393][ T540] usb 6-1: config 0 descriptor?? [ 634.736228][ T540] hub 6-1:0.0: bad descriptor, ignoring hub [ 634.742328][ T540] hub: probe of 6-1:0.0 failed with error -5 [ 634.911373][ T7042] overlayfs: overlapping lowerdir path [ 635.419303][ T7052] loop1: detected capacity change from 0 to 512 [ 635.512826][ T7054] loop0: detected capacity change from 0 to 512 [ 636.723903][ T7054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 636.739843][ T1873] EXT4-fs (loop5): unmounting filesystem. [ 636.750136][ T7052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 636.850210][ T7054] EXT4-fs (loop0): orphan cleanup on readonly fs [ 636.859260][ T7054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1629: bg 0: block 248: padding at end of block bitmap is not set [ 636.874829][ T530] usb 6-1: USB disconnect, device number 45 [ 636.881668][ T7054] Quota error (device loop0): write_blk: dquota write failed [ 636.889521][ T7054] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 636.900001][ T7054] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1629: Failed to acquire dquot type 1 [ 636.914990][ T7054] EXT4-fs (loop0): 1 truncate cleaned up [ 636.928166][ T7054] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 636.998186][ T7052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 637.007602][ T7052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1628: bg 0: block 248: padding at end of block bitmap is not set [ 637.023083][ T7052] Quota error (device loop1): write_blk: dquota write failed [ 637.030694][ T7052] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 637.040782][ T7052] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1628: Failed to acquire dquot type 1 [ 637.054237][ T7052] EXT4-fs (loop1): 1 truncate cleaned up [ 637.061225][ T7052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 637.445356][ T530] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 637.766123][ T7064] overlayfs: overlapping lowerdir path [ 638.004832][ T476] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 638.381302][ T283] EXT4-fs (loop1): unmounting filesystem. [ 638.387461][ T282] EXT4-fs (loop0): unmounting filesystem. [ 639.631398][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'. [ 639.694829][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1633'. [ 640.106490][ T476] usb 2-1: device not accepting address 71, error -71 [ 640.534888][ T476] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 641.139677][ T530] usb 1-1: Using ep0 maxpacket: 32 [ 641.152093][ T530] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.169694][ T530] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.186952][ T530] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 641.196426][ T530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.261294][ T530] usb 1-1: config 0 descriptor?? [ 641.288793][ T476] usb 2-1: Using ep0 maxpacket: 16 [ 641.298435][ T476] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.308839][ T476] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 642.212555][ T476] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 642.550204][ T476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.586396][ T476] usb 2-1: config 0 descriptor?? [ 642.597115][ T476] usb 2-1: can't set config #0, error -71 [ 642.605249][ T7111] loop2: detected capacity change from 0 to 512 [ 642.615048][ T7111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.633224][ T7111] EXT4-fs (loop2): orphan cleanup on readonly fs [ 642.640445][ T7111] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1643: bg 0: block 248: padding at end of block bitmap is not set [ 642.655455][ T7111] Quota error (device loop2): write_blk: dquota write failed [ 642.663070][ T7111] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 642.673113][ T7111] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.1643: Failed to acquire dquot type 1 [ 642.681662][ T476] usb 2-1: USB disconnect, device number 72 [ 642.720879][ T7111] EXT4-fs (loop2): 1 truncate cleaned up [ 642.727888][ T7111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 643.014872][ T687] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 643.214808][ T687] usb 3-1: Using ep0 maxpacket: 32 [ 643.222224][ T687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.238842][ T530] usb 1-1: USB disconnect, device number 68 [ 643.254971][ T687] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.288487][ T687] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 643.309566][ T687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.332789][ T687] usb 3-1: config 0 descriptor?? [ 643.344377][ T687] hub 3-1:0.0: bad descriptor, ignoring hub [ 643.360764][ T687] hub: probe of 3-1:0.0 failed with error -5 [ 643.763841][ T7135] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 643.773444][ T7135] FAT-fs (loop7): unable to read boot sector [ 645.061972][ T7144] loop5: detected capacity change from 0 to 256 [ 645.076809][ T7144] FAT-fs (loop5): Unrecognized mount option "0x000000000000000600000000000000000000000" or missing value [ 745.294682][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 745.301708][ C1] (detected by 1, t=10002 jiffies, g=48109, q=82 ncpus=2) [ 745.308925][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295011738-4295001736), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 745.322493][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g48109 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 745.333887][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 745.343887][ C1] rcu: RCU grace-period kthread stack dump: [ 745.349805][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 745.360626][ C1] Call Trace: [ 745.363926][ C1] [ 745.366878][ C1] __schedule+0xb87/0x14e0 [ 745.371354][ C1] ? __sched_text_start+0x8/0x8 [ 745.376230][ C1] schedule+0xbd/0x170 [ 745.380322][ C1] schedule_timeout+0x12c/0x2e0 [ 745.385198][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 745.390590][ C1] ? __cfi_process_timeout+0x10/0x10 [ 745.395987][ C1] ? prepare_to_swait_event+0x308/0x320 [ 745.401564][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 745.406435][ C1] ? rcu_gp_init+0xf10/0xf10 [ 745.411137][ C1] rcu_gp_kthread+0x95/0x370 [ 745.415773][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 745.420991][ C1] ? __kasan_check_read+0x11/0x20 [ 745.426046][ C1] ? __kthread_parkme+0x142/0x180 [ 745.431175][ C1] kthread+0x281/0x320 [ 745.435276][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 745.440499][ C1] ? __cfi_kthread+0x10/0x10 [ 745.445213][ C1] ret_from_fork+0x1f/0x30 [ 745.449668][ C1] [ 745.452704][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 745.459042][ C1] CPU: 1 PID: 7146 Comm: syz.3.1651 Not tainted syzkaller #0 [ 745.466434][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 745.476514][ C1] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 745.482442][ C1] Code: 74 12 48 89 fb 48 c7 c7 c0 d3 ed 86 e8 01 41 c0 fc 48 89 df 48 83 3d 66 75 f9 01 00 74 26 e8 93 0c 00 00 90 fb bf 01 00 00 00 03 59 57 fc 65 8b 05 54 0f 0e 7b 85 c0 74 03 5b 5d c3 e8 14 1c [ 745.502077][ C1] RSP: 0018:ffffc90004a0fb90 EFLAGS: 00000246 [ 745.508189][ C1] RAX: 0000000000000001 RBX: 0000000000000021 RCX: dffffc0000000000 [ 745.516182][ C1] RDX: ffffc90002df0000 RSI: 000000000007ffff RDI: 0000000000000001 [ 745.524187][ C1] RBP: ffffc90004a0fb98 R08: dffffc0000000000 R09: fffff52000941fc0 [ 745.532178][ C1] R10: fffff52000941fc0 R11: 1ffff92000941fbc R12: dffffc0000000000 [ 745.540170][ C1] R13: 1ffff110224c982c R14: 000000001c000004 R15: ffff88811264c160 [ 745.548166][ C1] FS: 00007f3f760306c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 745.557120][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.563730][ C1] CR2: 000020000006b000 CR3: 0000000133a73000 CR4: 00000000003526a0 [ 745.571728][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 745.580154][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 745.588146][ C1] Call Trace: [ 745.591475][ C1] [ 745.594513][ C1] get_signal+0x12a4/0x1520 [ 745.599408][ C1] arch_do_signal_or_restart+0xb0/0x1030 [ 745.605080][ C1] ? __ia32_sys_rt_sigreturn+0x5e7/0x6c0 [ 745.610747][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 745.616669][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 745.622849][ C1] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 745.628701][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 745.633959][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 745.639463][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 745.644968][ C1] do_syscall_64+0x58/0xa0 [ 745.649415][ C1] ? clear_bhb_loop+0x30/0x80 [ 745.654120][ C1] ? clear_bhb_loop+0x30/0x80 [ 745.658825][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.664744][ C1] RIP: 0033:0x7f3f7518f747 [ 745.669195][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 745.689863][ C1] RSP: 002b:00007f3f760300e8 EFLAGS: 00000246 [ 745.695956][ C1] RAX: 00000000000000ca RBX: 00007f3f753e5fa8 RCX: 00007f3f7518f749 [ 745.703953][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f753e5fa8 [ 745.712034][ C1] RBP: 00007f3f753e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 745.720026][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.728018][ C1] R13: 00007f3f753e6038 R14: 00007fffc552bb90 R15: 00007fffc552bc78 [ 745.736022][ C1] [ 858.954664][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 213s! [ 858.963663][ C0] Showing busy workqueues and worker pools: [ 858.969612][ C0] workqueue events: flags=0x0 [ 858.974334][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=15/256 refcnt=16 [ 858.974387][ C0] pending: kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 859.012967][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=17/256 refcnt=18 [ 859.013023][ C0] pending: vmstat_shepherd, psi_avgs_work, rht_deferred_worker, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 859.013330][ C0] workqueue events_long: flags=0x0 [ 859.059581][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=48/256 refcnt=49 [ 859.059638][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 859.060624][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=48/256 refcnt=49 [ 859.060667][ C0] pending: br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 859.061651][ C0] workqueue events_unbound: flags=0x2 [ 859.238144][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 859.238194][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 859.238260][ C0] workqueue events_power_efficient: flags=0x80 [ 859.259191][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 859.259241][ C0] pending: neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work [ 859.259361][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 859.259402][ C0] pending: wg_ratelimiter_gc_entries, check_lifetime, gc_worker [ 859.259495][ C0] workqueue mm_percpu_wq: flags=0x8 [ 859.298574][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.298628][ C0] pending: vmstat_update [ 859.298675][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.298717][ C0] pending: vmstat_update [ 859.298761][ C0] workqueue writeback: flags=0x4a [ 859.328268][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 859.328316][ C0] pending: wb_workfn, wb_workfn [ 859.328361][ C0] workqueue kblockd: flags=0x18 [ 859.345786][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 859.345835][ C0] pending: blk_mq_timeout_work [ 859.345866][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 859.345907][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 859.346038][ C0] workqueue dm_bufio_cache: flags=0x8 [ 859.379194][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.379246][ C0] pending: work_fn [ 859.379299][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 859.396707][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 859.396778][ C0] pending: addrconf_verify_work [ 859.396814][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 859.396855][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 859.396897][ C0] pending: addrconf_verify_work [ 859.396934][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 859.396983][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 859.442360][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.442410][ C0] pending: wg_packet_encrypt_worker [ 859.442455][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.442497][ C0] pending: wg_packet_encrypt_worker [ 859.442537][ C0] workqueue wg-kex-wg1: flags=0x6 [ 859.473962][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 859.474010][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 859.474065][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 859.495964][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.496013][ C0] pending: wg_packet_encrypt_worker [ 859.496059][ C0] workqueue wg-kex-wg2: flags=0x6 [ 859.514307][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 859.514359][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 859.514411][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 859.536388][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.536438][ C0] pending: wg_packet_encrypt_worker [ 859.536482][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 859.555171][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.555219][ C0] pending: wg_packet_encrypt_worker [ 859.555258][ C0] workqueue wg-kex-wg1: flags=0x6 [ 859.573698][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 859.573755][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 859.573814][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 859.595824][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.595877][ C0] pending: wg_packet_encrypt_worker [ 859.595924][ C0] workqueue wg-kex-wg2: flags=0x6 [ 859.614233][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 859.614275][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material, wg_queued_expired_zero_key_material [ 859.614365][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 859.642346][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.642403][ C0] pending: wg_packet_encrypt_worker [ 859.642457][ C0] workqueue wg-kex-wg1: flags=0x6 [ 859.660757][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 859.660803][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 859.660856][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 859.682925][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.682978][ C0] pending: wg_packet_encrypt_worker [ 859.683021][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 859.701722][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.701771][ C0] pending: wg_packet_encrypt_worker [ 859.701812][ C0] workqueue wg-kex-wg1: flags=0x6 [ 859.720074][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 859.720126][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 859.720183][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 859.742156][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.742210][ C0] pending: wg_packet_encrypt_worker [ 859.742255][ C0] workqueue wg-kex-wg2: flags=0x6 [ 859.760583][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 859.760625][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 859.760698][ C0] workqueue wg-kex-wg2: flags=0x6 [ 859.785220][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 859.785273][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material, wg_queued_expired_zero_key_material [ 859.785382][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 859.813450][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.813503][ C0] pending: wg_packet_encrypt_worker [ 859.813553][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.813595][ C0] pending: wg_packet_encrypt_worker [ 859.813638][ C0] workqueue wg-kex-wg1: flags=0x6 [ 859.845367][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 859.845414][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 859.845468][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 859.867407][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.867465][ C0] pending: wg_packet_encrypt_worker [ 859.867514][ C0] workqueue wg-kex-wg2: flags=0x6 [ 859.885831][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 859.885876][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 859.885928][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 859.908014][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.908075][ C0] pending: wg_packet_encrypt_worker