last executing test programs: 6.332203314s ago: executing program 1 (id=8883): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000840)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {}, {@utf8no}, {@utf8}, {@shortname_win95}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2a8, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x42, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x4045) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x6000000b) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r5, 0x313, 0x4}, 0x14}}, 0xc804) 5.872355483s ago: executing program 3 (id=8884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x6a, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x14}, 0x400c850) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000040)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) 5.596411092s ago: executing program 4 (id=8885): socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setitimer(0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 5.029122971s ago: executing program 1 (id=8887): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 5.010723891s ago: executing program 1 (id=8888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r2, r3, 0x6, 0x0, @val=@tcx={@void, @value}}, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 4.4332644s ago: executing program 3 (id=8889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2, 0x14200}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) 4.33436741s ago: executing program 3 (id=8890): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0xf2, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r3 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) 4.312471799s ago: executing program 3 (id=8892): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300b3cd37d9194ce282ffff080211000000505050505050"], 0x48}}, 0x0) 4.079377829s ago: executing program 3 (id=8893): r0 = socket(0x40000000002, 0x3, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x4800) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d820000000000000000fbf7ffffff00"}) r8 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x40], 0x6c, 0x0, 0x0}, 0x230) 3.969813689s ago: executing program 4 (id=8895): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r8, @ANYRESOCT=r6, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX=r7], 0x1, 0x14ee, &(0x7f0000004000)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom") lstat(&(0x7f00000001c0)='./file0\x00', 0x0) shutdown(r4, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0xe7, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) 3.953764489s ago: executing program 1 (id=8896): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x600010c) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) 3.174906867s ago: executing program 3 (id=8899): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfd, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7ff, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x8, 0x870, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x5, 0x1, 0x0, 0x400, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x0, 0x10, 0x2, "639e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.145102387s ago: executing program 0 (id=8900): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) open(0x0, 0x549280, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 2.791506456s ago: executing program 1 (id=8904): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) 2.276817085s ago: executing program 0 (id=8907): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x840d, 0x0) 2.124803214s ago: executing program 2 (id=8909): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000000000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x2, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 1.993555414s ago: executing program 0 (id=8910): r0 = socket(0x40000000002, 0x3, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x4800) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d820000000000000000fbf7ffffff00"}) r8 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x40], 0x6c, 0x0, 0x0}, 0x230) 1.988836434s ago: executing program 2 (id=8911): syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f00000003c0)='./bus/file0\x00', 0x4006, &(0x7f0000000400)={[{@dioread_nolock}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@data_err_ignore}, {@noload}, {@nodelalloc}]}, 0x0, 0x443, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x7, @empty}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) ioctl$int_in(r2, 0x5452, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x7, 0x4100000000010001) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000180)={0xffffffff, 0x0, 0x0, 0x8, 0x7, "4db6f6f284daa209540e47e2ab761f6ab44eb7"}) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0xd) 1.512673113s ago: executing program 4 (id=8902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.504465283s ago: executing program 2 (id=8912): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r8, @ANYRESOCT=r6, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX=r7], 0x1, 0x14ee, &(0x7f0000004000)="$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") lstat(&(0x7f00000001c0)='./file0\x00', 0x0) shutdown(r4, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0xe7, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) 1.434348783s ago: executing program 4 (id=8913): socket$inet_udp(0x2, 0x2, 0x0) setresgid(0x0, 0xee00, 0x0) r0 = syz_clone(0x0, 0x0, 0x40, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='fdinfo/3\x00') 1.412813623s ago: executing program 4 (id=8914): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getresgid(&(0x7f0000000000), &(0x7f0000000180), 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x8004c61) 890.128022ms ago: executing program 0 (id=8915): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffff7ff8, 0x80000000, 0x0, 0xb, 0xe, "101a0dfe0ef7f0200000ff00000000002a00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa) 773.132822ms ago: executing program 0 (id=8916): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a30"], 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000034000000090a010400000000000000000100000008000a40000000000900020073797a32000200000900010073797a30"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 730.041491ms ago: executing program 4 (id=8917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) 654.295581ms ago: executing program 0 (id=8918): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfd, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7ff, 0x29}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x8, 0x870, 0xab8, 0xfffc, 0x4, 0x0, 0x0, 0xe5, 0x3, 0x5, 0x7a, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 499.580031ms ago: executing program 2 (id=8919): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'team_slave_1\x00', 0x2}) 121.82605ms ago: executing program 2 (id=8920): unshare(0x24020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x6) 18.2246ms ago: executing program 2 (id=8921): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=8922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): njection options not supported [ 3416.025573][ T5816] F2FS-fs (loop2): invalid crc value [ 3416.038643][ T5816] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3416.379606][ T5816] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 3416.386619][ T5816] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3416.402705][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3417.522001][ T5854] loop0: detected capacity change from 0 to 128 [ 3418.060504][ T5854] syz.0.8523: attempt to access beyond end of device [ 3418.060504][ T5854] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 3418.259458][ T5859] input: syz0 as /devices/virtual/input/input158 [ 3418.419634][T27454] syz-executor: attempt to access beyond end of device [ 3418.419634][T27454] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3418.556715][ T5854] syz.0.8523: attempt to access beyond end of device [ 3418.556715][ T5854] loop0: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 3419.134301][ T5870] loop2: detected capacity change from 0 to 512 [ 3419.172114][ T28] audit: type=1326 audit(1736846146.556:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.4.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3419.266992][ T28] audit: type=1326 audit(1736846146.566:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.4.8525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3419.338979][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3419.812849][ T5870] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3419.823228][ T5870] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 3419.832514][ T5870] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.8526: Failed to acquire dquot type 0 [ 3419.844966][ T5870] EXT4-fs (loop2): Remounting filesystem read-only [ 3419.851408][ T5870] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3419.861684][ T5870] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 3419.871122][ T5870] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.8526: Failed to acquire dquot type 0 [ 3419.885500][ T5870] EXT4-fs (loop2): Remounting filesystem read-only [ 3419.894578][ T5870] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3419.905073][ T5870] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 3419.914576][ T5870] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.8526: Failed to acquire dquot type 0 [ 3420.093941][ T5870] EXT4-fs (loop2): Remounting filesystem read-only [ 3420.100508][ T5870] EXT4-fs (loop2): 1 orphan inode deleted [ 3420.106075][ T5870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3420.115031][ T5870] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3420.215192][ T5881] loop3: detected capacity change from 0 to 40427 [ 3420.222249][ T5881] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 768) [ 3420.238647][T27454] EXT4-fs (loop2): unmounting filesystem. [ 3420.278997][ T5881] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3420.294053][ T5881] F2FS-fs (loop3): fault_injection options not supported [ 3420.297958][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 3420.316904][ T5881] F2FS-fs (loop3): invalid crc value [ 3420.331279][ T5881] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3420.393577][ T5900] input: syz0 as /devices/virtual/input/input159 [ 3420.990874][ T5881] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3420.998057][ T5881] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3421.031811][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 3422.589438][ T5910] input: syz0 as /devices/virtual/input/input160 [ 3423.672644][ T5905] fuse: Unknown parameter '0x0000000000000005' [ 3424.362503][T26461] syz-executor: attempt to access beyond end of device [ 3424.362503][T26461] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3426.820513][ T5939] input: syz0 as /devices/virtual/input/input161 [ 3429.598840][ T5967] futex_wake_op: syz.1.8548 tries to shift op by 32; fix this program [ 3429.611543][ T5967] loop1: detected capacity change from 0 to 512 [ 3429.688522][ T5964] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8545'. [ 3429.699063][T32170] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 3429.699113][T16261] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 3429.724075][ T5966] loop0: detected capacity change from 0 to 16 [ 3429.743301][ T5967] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3429.753638][ T5967] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 3429.762922][ T5967] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.8548: Failed to acquire dquot type 0 [ 3429.776532][ T5967] EXT4-fs (loop1): Remounting filesystem read-only [ 3429.783281][ T5967] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3429.793618][ T5967] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 3429.802892][ T5967] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.8548: Failed to acquire dquot type 0 [ 3429.817178][ T5967] EXT4-fs (loop1): Remounting filesystem read-only [ 3429.826366][ T5967] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3429.836694][ T5967] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 3429.845974][ T5967] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.8548: Failed to acquire dquot type 0 [ 3429.859317][ T5967] EXT4-fs (loop1): Remounting filesystem read-only [ 3429.866085][ T5967] EXT4-fs (loop1): 1 orphan inode deleted [ 3429.871749][ T5967] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3429.881103][ T5967] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3430.208869][T16261] usb 4-1: Using ep0 maxpacket: 32 [ 3430.216508][T16261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 3430.256446][ T5966] erofs: (device loop0): mounted with root inode @ nid 36. [ 3430.502681][T16261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8224, setting to 1024 [ 3430.513866][T16261] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3430.522943][T16261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3430.607682][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 3430.632830][T32170] usb 3-1: Using ep0 maxpacket: 32 [ 3430.638825][T25840] EXT4-fs (loop1): unmounting filesystem. [ 3430.648894][T32170] usb 3-1: device descriptor read/all, error -71 [ 3430.655345][T16261] usb 4-1: config 0 descriptor?? [ 3430.669636][T16261] usb 4-1: can't set config #0, error -71 [ 3430.674750][ T5975] loop2: detected capacity change from 0 to 512 [ 3430.675750][T16261] usb 4-1: USB disconnect, device number 84 [ 3430.704475][T15360] udevd[15360]: symlink '../../loop0' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 3430.726555][ T5975] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3430.736847][T15361] udevd[15361]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3430.754584][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 3430.796499][ T5975] EXT4-fs error (device loop2): __ext4_iget:5057: inode #11: block 1: comm syz.2.8549: invalid block [ 3430.829498][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8550'. [ 3430.838500][ T5975] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8549: couldn't read orphan inode 11 (err -117) [ 3430.868813][ T5975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3430.903424][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3430.920585][ T5975] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3430.979571][T27454] EXT4-fs (loop2): unmounting filesystem. [ 3431.004887][ T5977] loop1: detected capacity change from 0 to 40427 [ 3431.015302][ T5977] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 768) [ 3431.026542][ T5982] loop4: detected capacity change from 0 to 512 [ 3431.037343][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3431.038833][ T5977] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3431.063031][ T5982] EXT4-fs (loop4): Test dummy encryption mode enabled [ 3431.071683][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3431.085039][ T5982] EXT4-fs error (device loop4): __ext4_iget:5057: inode #11: block 1: comm syz.4.8553: invalid block [ 3431.096304][ T5977] F2FS-fs (loop1): fault_injection options not supported [ 3431.103407][ T5982] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.8553: couldn't read orphan inode 11 (err -117) [ 3431.115694][ T5977] F2FS-fs (loop1): invalid crc value [ 3431.134580][ T5982] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3431.143512][ T5977] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3431.147774][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3431.149800][ T5984] fuse: Unknown parameter 'group_id00000000000000000000' [ 3431.235067][ T5989] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3431.256148][ T5977] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3431.267535][ T5977] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3431.299816][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3431.395798][ T5992] loop2: detected capacity change from 0 to 128 [ 3431.427532][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3431.458718][ T28] audit: type=1326 audit(1736846158.906:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.3.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cd85d29 code=0x7fc00000 [ 3431.478097][ T5992] syz.2.8554: attempt to access beyond end of device [ 3431.478097][ T5992] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 3431.493333][ T28] audit: type=1326 audit(1736846158.906:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.3.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f037cd85d29 code=0x7fc00000 [ 3432.539068][ T5999] input: syz0 as /devices/virtual/input/input162 [ 3432.870633][T25840] syz-executor: attempt to access beyond end of device [ 3432.870633][T25840] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3432.871963][ T28] audit: type=1326 audit(1736846158.906:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.3.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cd85d29 code=0x7fc00000 [ 3432.923271][ T28] audit: type=1326 audit(1736846158.906:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.3.8550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cd85d29 code=0x7fc00000 [ 3432.924608][ T5992] syz.2.8554: attempt to access beyond end of device [ 3432.924608][ T5992] loop2: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 3433.989100][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8557'. [ 3435.761055][ T6032] loop1: detected capacity change from 0 to 16 [ 3435.779612][ T6032] erofs: (device loop1): mounted with root inode @ nid 36. [ 3435.839563][ T6032] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3435.849106][ T6032] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3435.858595][ T6032] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3435.867973][ T6032] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3435.877682][ T6032] syz.1.8560: attempt to access beyond end of device [ 3435.877682][ T6032] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3435.891742][ T6032] syz.1.8560: attempt to access beyond end of device [ 3435.891742][ T6032] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3435.915733][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 3435.946741][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 3435.946756][ T28] audit: type=1326 audit(1736846163.396:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3435.980038][ T28] audit: type=1326 audit(1736846163.396:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3436.011755][ T28] audit: type=1326 audit(1736846163.396:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3436.041290][ T28] audit: type=1326 audit(1736846163.396:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3436.131352][ T6039] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8563'. [ 3436.337230][ T28] audit: type=1326 audit(1736846163.396:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3436.360919][ T28] audit: type=1326 audit(1736846163.396:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3436.434879][ T28] audit: type=1326 audit(1736846163.396:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3436.511937][ T6036] fuse: Unknown parameter 'group_id00000000000000000000' [ 3436.528898][ T28] audit: type=1326 audit(1736846163.396:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3436.642171][ T6046] input: syz0 as /devices/virtual/input/input163 [ 3436.787128][ T28] audit: type=1326 audit(1736846163.396:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3436.826396][ T28] audit: type=1326 audit(1736846163.436:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.8557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab8185d29 code=0x7fc00000 [ 3437.334652][ T6055] loop2: detected capacity change from 0 to 16 [ 3437.364594][ T6055] erofs: (device loop2): mounted with root inode @ nid 36. [ 3437.372470][ T6055] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3437.381458][ T6055] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3437.390562][ T6055] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3437.399534][ T6055] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3437.408441][ T6055] syz.2.8569: attempt to access beyond end of device [ 3437.408441][ T6055] loop2: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3437.422165][ T6055] syz.2.8569: attempt to access beyond end of device [ 3437.422165][ T6055] loop2: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3437.461011][ T6043] loop1: detected capacity change from 0 to 40427 [ 3437.484765][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 3437.507324][ T6043] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 768) [ 3437.515566][ T6043] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3437.524173][ T6043] F2FS-fs (loop1): fault_injection options not supported [ 3437.532756][T16270] udevd[16270]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3437.532851][ T6043] F2FS-fs (loop1): invalid crc value [ 3438.016931][ T6067] input: syz0 as /devices/virtual/input/input164 [ 3438.209373][ T6043] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3438.341726][ T6043] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3438.348677][ T6043] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3438.364867][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3438.964414][ T6077] loop0: detected capacity change from 0 to 16 [ 3438.975429][ T6077] erofs: (device loop0): mounted with root inode @ nid 36. [ 3439.032736][ T6077] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3439.042292][ T6077] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3439.051831][ T6077] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3439.061186][ T6077] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3439.070451][ T6077] syz.0.8572: attempt to access beyond end of device [ 3439.070451][ T6077] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3439.084159][ T6077] syz.0.8572: attempt to access beyond end of device [ 3439.084159][ T6077] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3439.126616][T15360] udevd[15360]: symlink '../../loop0' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 3439.964709][ T6087] input: syz0 as /devices/virtual/input/input165 [ 3440.611985][ T6090] netlink: 25 bytes leftover after parsing attributes in process `syz.3.8577'. [ 3440.681545][T25840] syz-executor: attempt to access beyond end of device [ 3440.681545][T25840] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3440.892165][ T6096] loop2: detected capacity change from 0 to 40427 [ 3440.899323][ T6096] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 768) [ 3440.906782][ T6096] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3440.915425][ T6096] F2FS-fs (loop2): fault_injection options not supported [ 3440.923227][ T6096] F2FS-fs (loop2): invalid crc value [ 3440.972045][ T6096] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3441.004117][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3441.037869][ T6096] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 3441.044968][ T6096] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3441.057047][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3441.158402][ T6111] input: syz0 as /devices/virtual/input/input166 [ 3441.201069][ T6101] fuse: Unknown parameter 'group_id00000000000000000000' [ 3441.552834][ T6117] loop0: detected capacity change from 0 to 512 [ 3441.623247][ T6117] EXT4-fs (loop0): Test dummy encryption mode enabled [ 3442.735600][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3442.814718][ T6123] loop4: detected capacity change from 0 to 512 [ 3442.828231][ T6117] EXT4-fs error (device loop0): __ext4_iget:5057: inode #11: block 1: comm syz.0.8582: invalid block [ 3442.843636][T15360] udevd[15360]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3442.877590][ T6117] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.8582: couldn't read orphan inode 11 (err -117) [ 3442.889469][ T6117] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3442.899561][ T6123] EXT4-fs (loop4): Test dummy encryption mode enabled [ 3442.908273][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3442.922615][ T6123] EXT4-fs error (device loop4): __ext4_iget:5057: inode #11: block 1: comm syz.4.8584: invalid block [ 3442.934494][ T6123] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.8584: couldn't read orphan inode 11 (err -117) [ 3442.949163][ T6123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3442.956988][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3442.985281][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3443.119674][ T6127] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3443.135221][ T6129] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3443.422113][T27454] syz-executor: attempt to access beyond end of device [ 3443.422113][T27454] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3443.858366][ T6135] input: syz0 as /devices/virtual/input/input167 [ 3444.049869][ T6141] loop2: detected capacity change from 0 to 256 [ 3444.078817][ T6141] exfat: Bad value for 'uid' [ 3444.509649][T26366] EXT4-fs (loop0): unmounting filesystem. [ 3444.519953][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3444.644736][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3445.203095][ T6160] netlink: 25 bytes leftover after parsing attributes in process `syz.3.8591'. [ 3445.615426][ T6150] fuse: Unknown parameter 'fd0x0000000000000005' [ 3446.316298][ T6169] fuse: Bad value for 'user_id' [ 3446.752248][ T6175] loop1: detected capacity change from 0 to 40427 [ 3446.773043][ T6175] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 768) [ 3446.777375][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3446.787670][ T6175] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3446.812912][ T6175] F2FS-fs (loop1): fault_injection options not supported [ 3446.829703][ T6175] F2FS-fs (loop1): invalid crc value [ 3446.845844][ T6175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3446.897130][ T6185] input: syz0 as /devices/virtual/input/input168 [ 3446.941392][ T6188] loop2: detected capacity change from 0 to 16 [ 3446.952561][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 3446.969407][ T6175] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3446.976263][ T6175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3446.985599][ T6188] erofs: (device loop2): mounted with root inode @ nid 36. [ 3446.994998][T16271] udevd[16271]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3447.085647][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 3448.730313][T25840] syz-executor: attempt to access beyond end of device [ 3448.730313][T25840] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3449.252692][ T6214] input: syz0 as /devices/virtual/input/input169 [ 3449.277050][ T6210] loop0: detected capacity change from 0 to 16 [ 3449.284524][ T6210] erofs: (device loop0): mounted with root inode @ nid 36. [ 3449.293481][ T6210] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3449.302505][ T6210] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3449.309997][T15360] udevd[15360]: symlink '../../loop0' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 3449.311617][ T6210] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3449.334130][ T6210] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3449.343099][ T6210] syz.0.8603: attempt to access beyond end of device [ 3449.343099][ T6210] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3449.356803][ T6210] syz.0.8603: attempt to access beyond end of device [ 3449.356803][ T6210] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3449.631273][ T6212] loop4: detected capacity change from 0 to 40427 [ 3449.673171][ T6212] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 768) [ 3449.692271][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3449.706283][ T6212] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3449.714778][ T6212] F2FS-fs (loop4): fault_injection options not supported [ 3449.788686][ T6222] loop1: detected capacity change from 0 to 16 [ 3449.828099][ T6222] erofs: (device loop1): mounted with root inode @ nid 36. [ 3449.836022][ T6222] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3449.844986][ T6222] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3449.853936][ T6222] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3449.862752][ T6222] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3449.871524][ T6222] syz.1.8604: attempt to access beyond end of device [ 3449.871524][ T6222] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3449.886149][ T6222] syz.1.8604: attempt to access beyond end of device [ 3449.886149][ T6222] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3450.403758][ T6212] F2FS-fs (loop4): invalid crc value [ 3450.430807][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 3450.462315][ T6212] F2FS-fs (loop4): Found nat_bits in checkpoint [ 3450.678510][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 3450.774856][ T6212] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 3450.784852][ T6212] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 3451.069261][ T6238] fuse: Bad value for 'user_id' [ 3451.079448][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3452.269959][ T6261] input: syz0 as /devices/virtual/input/input170 [ 3452.396612][T27402] syz-executor: attempt to access beyond end of device [ 3452.396612][T27402] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3452.477611][ T6257] loop2: detected capacity change from 0 to 40427 [ 3452.499829][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3452.959927][ T6257] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 768) [ 3452.976220][ T6257] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3452.988980][ T6257] F2FS-fs (loop2): fault_injection options not supported [ 3453.005214][ T6257] F2FS-fs (loop2): invalid crc value [ 3453.062868][ T6270] input: syz0 as /devices/virtual/input/input171 [ 3453.254439][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3453.289397][ T6257] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3453.395165][ T6257] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 3453.403195][ T6257] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3453.420672][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3455.633984][ T6301] input: syz0 as /devices/virtual/input/input172 [ 3456.039333][T27454] syz-executor: attempt to access beyond end of device [ 3456.039333][T27454] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3456.081355][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8624'. [ 3456.090170][ T6282] loop1: detected capacity change from 0 to 40427 [ 3456.096991][ T6282] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 768) [ 3456.104714][ T6282] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3456.113097][ T6282] F2FS-fs (loop1): fault_injection options not supported [ 3456.113965][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3456.130819][ T6282] F2FS-fs (loop1): invalid crc value [ 3456.140124][ T6282] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3456.148488][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3456.199936][ T6282] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3456.206803][ T6282] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3456.233006][T16270] udevd[16270]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3456.284619][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 3456.284637][ T28] audit: type=1326 audit(1736846183.736:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.4.8624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3456.320512][ T489] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 3457.337690][ T6320] input: syz0 as /devices/virtual/input/input173 [ 3458.509729][T25840] syz-executor: attempt to access beyond end of device [ 3458.509729][T25840] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3458.644480][ T6332] loop4: detected capacity change from 0 to 128 [ 3458.725007][ T6336] input: syz0 as /devices/virtual/input/input174 [ 3459.060895][ T6335] loop0: detected capacity change from 0 to 512 [ 3459.156817][ T6335] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3459.160559][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3459.167112][ T6335] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 3459.187652][ T6335] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.8636: Failed to acquire dquot type 0 [ 3459.199798][ T6335] EXT4-fs (loop0): Remounting filesystem read-only [ 3459.206218][ T6335] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3459.216401][ T6335] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 3459.218707][ T489] usb 1-1: device not accepting address 84, error -71 [ 3459.225731][ T6335] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.8636: Failed to acquire dquot type 0 [ 3459.232852][ T6332] syz.4.8635: attempt to access beyond end of device [ 3459.232852][ T6332] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 3459.256831][ T6335] EXT4-fs (loop0): Remounting filesystem read-only [ 3459.263720][ T6335] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3459.273984][ T6335] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 3459.283369][ T6335] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.8636: Failed to acquire dquot type 0 [ 3459.294731][ T6335] EXT4-fs (loop0): Remounting filesystem read-only [ 3459.301309][ T6335] EXT4-fs (loop0): 1 orphan inode deleted [ 3459.307007][ T6335] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 3459.315900][ T6335] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3459.317473][ T6332] syz.4.8635: attempt to access beyond end of device [ 3459.317473][ T6332] loop4: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 3459.332793][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3459.407543][ T6346] loop3: detected capacity change from 0 to 512 [ 3459.423328][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3459.439841][ T6346] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3459.476113][T26366] EXT4-fs (loop0): unmounting filesystem. [ 3459.494883][ T6346] EXT4-fs error (device loop3): __ext4_iget:5057: inode #11: block 1: comm syz.3.8637: invalid block [ 3459.506209][ T6350] loop1: detected capacity change from 0 to 256 [ 3459.507004][ T6346] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.8637: couldn't read orphan inode 11 (err -117) [ 3459.541449][ T6350] exfat: Bad value for 'uid' [ 3459.560314][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3459.625141][ T6357] loop4: detected capacity change from 0 to 1024 [ 3459.721973][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:4' failed: Read-only file system [ 3460.286749][ T6363] futex_wake_op: syz.2.8641 tries to shift op by 32; fix this program [ 3460.299987][ T6363] loop2: detected capacity change from 0 to 512 [ 3460.325869][ T6364] input: syz0 as /devices/virtual/input/input175 [ 3460.394088][ T6346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3460.415057][ T6363] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3460.425473][ T6363] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 3460.434834][ T6363] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.8641: Failed to acquire dquot type 0 [ 3460.515017][ T6363] EXT4-fs (loop2): Remounting filesystem read-only [ 3460.521734][ T6363] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3460.532069][ T6363] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.8641: Failed to acquire dquot type 0 [ 3460.569891][ T6363] EXT4-fs (loop2): Remounting filesystem read-only [ 3460.578876][ T6363] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.8641: Failed to acquire dquot type 0 [ 3460.592867][ T6363] EXT4-fs (loop2): Remounting filesystem read-only [ 3460.599647][ T6363] EXT4-fs (loop2): 1 orphan inode deleted [ 3460.605295][ T6363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3460.614349][ T6363] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3461.440891][ T6357] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.8638: Invalid block bitmap block 0 in block_group 0 [ 3461.464891][T27454] EXT4-fs (loop2): unmounting filesystem. [ 3461.495779][ T6357] __quota_error: 3 callbacks suppressed [ 3461.522608][T16270] udevd[16270]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3461.538854][ T6357] Quota error (device loop4): write_blk: dquota write failed [ 3461.579166][ T6357] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 3461.604537][ T6357] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.8638: Failed to acquire dquot type 0 [ 3461.617003][ T6357] EXT4-fs error (device loop4): ext4_free_blocks:6210: comm syz.4.8638: Freeing blocks not in datazone - block = 0, count = 4096 [ 3462.495762][ T6357] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.8638: Invalid inode bitmap blk 0 in block_group 0 [ 3462.615545][ T6383] input: syz0 as /devices/virtual/input/input176 [ 3463.035591][ T2902] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 3463.044190][ T6357] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 3463.053445][ T2902] EXT4-fs error (device loop4): ext4_release_dquot:6811: comm kworker/u4:0: Failed to release dquot type 0 [ 3463.086882][ T6357] EXT4-fs (loop4): 1 orphan inode deleted [ 3464.382108][ T6357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3464.516265][ T6398] input: syz0 as /devices/virtual/input/input177 [ 3464.806798][ T6406] loop0: detected capacity change from 0 to 512 [ 3464.826959][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3464.888564][ T6406] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3464.898924][ T6406] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 3464.908227][ T6406] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.8649: Failed to acquire dquot type 0 [ 3464.929882][ T6406] EXT4-fs (loop0): Remounting filesystem read-only [ 3464.936381][ T6406] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3464.946645][ T6406] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 3464.948443][ T6411] loop1: detected capacity change from 0 to 1024 [ 3464.955889][ T6406] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.8649: Failed to acquire dquot type 0 [ 3464.973328][ T6406] EXT4-fs (loop0): Remounting filesystem read-only [ 3464.980142][ T6406] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3464.990356][ T6406] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 3464.999525][ T6406] EXT4-fs error (device loop0): ext4_acquire_dquot:6788: comm syz.0.8649: Failed to acquire dquot type 0 [ 3465.011112][ T6406] EXT4-fs (loop0): Remounting filesystem read-only [ 3465.017629][ T6406] EXT4-fs (loop0): 1 orphan inode deleted [ 3465.023291][ T6406] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 3465.032070][ T6406] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3465.053292][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3465.070046][T15360] udevd[15360]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system [ 3465.102586][ T6411] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.8650: Invalid block bitmap block 0 in block_group 0 [ 3465.169921][ T6411] Quota error (device loop1): write_blk: dquota write failed [ 3465.198848][ T6411] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.8650: Failed to acquire dquot type 0 [ 3465.244085][ T6411] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.8650: Freeing blocks not in datazone - block = 0, count = 4096 [ 3465.299311][ T6411] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.8650: Invalid inode bitmap blk 0 in block_group 0 [ 3465.318907][T19395] EXT4-fs error (device loop1): ext4_release_dquot:6811: comm kworker/u4:7: Failed to release dquot type 0 [ 3465.363148][ T6411] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 3465.409345][ T6411] EXT4-fs (loop1): 1 orphan inode deleted [ 3465.418866][ T6411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3465.463002][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system [ 3465.506454][T26461] EXT4-fs (loop3): unmounting filesystem. [ 3465.582409][T26366] EXT4-fs (loop0): unmounting filesystem. [ 3465.583362][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3466.683753][ T6421] loop3: detected capacity change from 0 to 40427 [ 3466.718587][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 3466.732742][ T6421] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 768) [ 3466.748588][ T6421] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3466.764737][ T6421] F2FS-fs (loop3): fault_injection options not supported [ 3466.772708][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3466.779770][ T6421] F2FS-fs (loop3): invalid crc value [ 3466.799693][ T6421] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3466.821715][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:4' failed: Read-only file system [ 3466.875388][ T6419] loop0: detected capacity change from 0 to 40427 [ 3466.895796][ T6419] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 768) [ 3466.903421][ T6419] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3466.912032][ T6419] F2FS-fs (loop0): fault_injection options not supported [ 3466.926519][ T6419] F2FS-fs (loop0): invalid crc value [ 3466.942033][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3466.956367][ T6419] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3466.958201][ T6421] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3466.969444][ T6421] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3467.312412][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 3467.916880][ T6419] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3467.928075][ T6419] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3467.964442][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3468.657528][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 3468.718824][ T28] audit: type=1326 audit(1736846196.106:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3468.765970][ T28] audit: type=1326 audit(1736846196.106:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3469.866264][ T28] audit: type=1326 audit(1736846196.106:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3469.891939][ T28] audit: type=1326 audit(1736846196.106:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3469.951425][ T28] audit: type=1326 audit(1736846196.106:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3470.000388][ T28] audit: type=1326 audit(1736846196.106:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3470.023829][ T28] audit: type=1326 audit(1736846196.106:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3470.048507][ T28] audit: type=1326 audit(1736846196.106:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3470.118567][T26366] syz-executor: attempt to access beyond end of device [ 3470.118567][T26366] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3470.118949][ T28] audit: type=1326 audit(1736846196.106:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3470.229857][ T6464] loop2: detected capacity change from 0 to 512 [ 3470.247529][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3470.258811][ T28] audit: type=1326 audit(1736846196.106:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.4.8659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3470.277609][ T6462] loop4: detected capacity change from 0 to 40427 [ 3470.293124][T15360] udevd[15360]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3470.307617][ T6464] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3470.332003][T16271] udevd[16271]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3470.346251][ T6464] EXT4-fs error (device loop2): __ext4_iget:5057: inode #11: block 1: comm syz.2.8663: invalid block [ 3470.357585][ T6462] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 768) [ 3470.385202][ T6464] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8663: couldn't read orphan inode 11 (err -117) [ 3470.397744][ T6462] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3470.418957][ T6462] F2FS-fs (loop4): fault_injection options not supported [ 3470.426473][ T6464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3470.435604][ T6462] F2FS-fs (loop4): invalid crc value [ 3470.459459][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3470.472639][T25840] EXT4-fs (loop1): unmounting filesystem. [ 3470.482690][ T6462] F2FS-fs (loop4): Found nat_bits in checkpoint [ 3470.621661][ T6462] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 3470.628532][ T6462] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 3470.664594][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3470.712704][ T6480] loop1: detected capacity change from 0 to 256 [ 3470.757492][ T6480] exfat: Bad value for 'uid' [ 3470.958202][T27402] syz-executor: attempt to access beyond end of device [ 3470.958202][T27402] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3471.109892][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3471.235946][T27454] EXT4-fs (loop2): unmounting filesystem. [ 3471.359539][T26461] syz-executor: attempt to access beyond end of device [ 3471.359539][T26461] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3471.554945][ T6490] input: syz0 as /devices/virtual/input/input178 [ 3472.405676][ T6501] input: syz0 as /devices/virtual/input/input179 [ 3474.017267][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 3474.017288][ T28] audit: type=1326 audit(1736846201.006:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cd85d29 code=0x7ffc0000 [ 3474.063046][ T28] audit: type=1326 audit(1736846201.006:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cd85d29 code=0x7ffc0000 [ 3474.096907][ T28] audit: type=1326 audit(1736846201.036:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037cd85d29 code=0x7ffc0000 [ 3474.210041][ T6525] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8673'. [ 3474.342940][ T6526] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8674'. [ 3474.356191][ T28] audit: type=1326 audit(1736846201.036:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cd85d29 code=0x7ffc0000 [ 3474.384521][ T28] audit: type=1326 audit(1736846201.036:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cd85d29 code=0x7ffc0000 [ 3474.478801][ T28] audit: type=1326 audit(1736846201.036:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f037cd85d29 code=0x7ffc0000 [ 3474.488111][ T6532] loop2: detected capacity change from 0 to 512 [ 3474.502313][ T6499] fuse: Bad value for 'fd' [ 3474.520314][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3474.532887][ T6532] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3474.554545][ T28] audit: type=1326 audit(1736846201.056:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f037cdb85e5 code=0x7ffc0000 [ 3474.578535][ T6532] EXT4-fs error (device loop2): __ext4_iget:5057: inode #11: block 1: comm syz.2.8677: invalid block [ 3474.601352][ T6532] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8677: couldn't read orphan inode 11 (err -117) [ 3474.604816][ T6524] input: syz0 as /devices/virtual/input/input180 [ 3474.619426][ T6532] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3474.650570][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3474.662269][ T28] audit: type=1326 audit(1736846201.256:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f037cd85d29 code=0x7ffc0000 [ 3474.766938][ T28] audit: type=1326 audit(1736846201.356:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cd85d29 code=0x7ffc0000 [ 3474.828392][ T28] audit: type=1326 audit(1736846201.356:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037cd85d29 code=0x7ffc0000 [ 3475.286698][ T6540] input: syz0 as /devices/virtual/input/input181 [ 3475.677030][ T6542] input: syz0 as /devices/virtual/input/input182 [ 3477.972735][T27454] EXT4-fs (loop2): unmounting filesystem. [ 3478.076691][ T6577] input: syz0 as /devices/virtual/input/input184 [ 3478.402228][ T6575] fuse: Bad value for 'fd' [ 3478.523455][ T6582] input: syz0 as /devices/virtual/input/input185 [ 3480.065341][ T6603] loop2: detected capacity change from 0 to 1024 [ 3480.080680][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:2' failed: Read-only file system [ 3480.202891][ T6606] input: syz0 as /devices/virtual/input/input186 [ 3480.625562][T26570] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 3480.707733][ T6603] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.8694: Invalid block bitmap block 0 in block_group 0 [ 3480.738391][ T6603] Quota error (device loop2): write_blk: dquota write failed [ 3480.746872][ T6603] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 3480.760712][ T6603] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.8694: Failed to acquire dquot type 0 [ 3480.819018][ T6603] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.8694: Freeing blocks not in datazone - block = 0, count = 4096 [ 3480.833986][ T6603] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.8694: Invalid inode bitmap blk 0 in block_group 0 [ 3481.050737][ T6614] input: syz0 as /devices/virtual/input/input187 [ 3481.057458][T26570] usb 4-1: Using ep0 maxpacket: 32 [ 3481.066115][T26570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 3481.225363][T26570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8224, setting to 1024 [ 3481.225772][ T6603] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 3481.236487][T26570] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3481.260805][T26570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3481.271890][ T6603] EXT4-fs (loop2): 1 orphan inode deleted [ 3481.273495][T26570] usb 4-1: config 0 descriptor?? [ 3481.286734][ T5544] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 3481.289975][ T6603] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3481.298964][ T5544] EXT4-fs error (device loop2): ext4_release_dquot:6811: comm kworker/u4:4: Failed to release dquot type 0 [ 3481.350095][T15360] udevd[15360]: symlink '../../loop2' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:2' failed: Read-only file system [ 3481.711407][T26570] savu 0003:1E7D:2D5A.005A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 3481.859797][ T6628] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8699'. [ 3482.016036][ T6629] loop0: detected capacity change from 0 to 16 [ 3482.057452][ T6629] erofs: (device loop0): mounted with root inode @ nid 36. [ 3482.103033][ T6629] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3482.112377][ T6629] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3482.121732][ T6629] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3482.131211][ T6629] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3482.140783][ T6629] syz.0.8700: attempt to access beyond end of device [ 3482.140783][ T6629] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3482.154750][ T6629] syz.0.8700: attempt to access beyond end of device [ 3482.154750][ T6629] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3482.223309][T15360] udevd[15360]: symlink '../../loop0' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 3482.885486][ T28] audit: type=1326 audit(1736846210.096:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7ffc0000 [ 3482.945118][ T28] audit: type=1326 audit(1736846210.106:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7ffc0000 [ 3482.993880][ T28] audit: type=1326 audit(1736846210.206:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f26da385d29 code=0x7ffc0000 [ 3483.017379][T26570] usb 4-1: USB disconnect, device number 85 [ 3483.034087][ T6643] loop3: detected capacity change from 0 to 128 [ 3483.042075][ T28] audit: type=1326 audit(1736846210.206:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7ffc0000 [ 3483.070412][ T28] audit: type=1326 audit(1736846210.216:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.8701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7ffc0000 [ 3483.101865][ T6641] loop4: detected capacity change from 0 to 512 [ 3483.197578][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3483.212692][ T6643] syz.3.8704: attempt to access beyond end of device [ 3483.212692][ T6643] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 3483.308438][ T6641] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 3483.320190][ T6643] syz.3.8704: attempt to access beyond end of device [ 3483.320190][ T6643] loop3: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 3483.325411][ T6641] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 3483.589899][ T6641] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.8703: Failed to acquire dquot type 0 [ 3483.602366][ T6640] loop0: detected capacity change from 0 to 40427 [ 3483.608780][ T6641] EXT4-fs (loop4): Remounting filesystem read-only [ 3483.615149][ T6641] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.8703: Failed to acquire dquot type 0 [ 3483.623875][ T6640] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 768) [ 3483.633461][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3483.648083][ T6640] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3483.664106][ T6640] F2FS-fs (loop0): fault_injection options not supported [ 3483.666977][ T6641] EXT4-fs (loop4): Remounting filesystem read-only [ 3483.678387][ T6641] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.8703: Failed to acquire dquot type 0 [ 3483.691857][ T6641] EXT4-fs (loop4): Remounting filesystem read-only [ 3483.692659][ T6640] F2FS-fs (loop0): invalid crc value [ 3483.704753][ T6641] EXT4-fs (loop4): 1 orphan inode deleted [ 3483.710573][ T6641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3483.719715][ T6641] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3483.800170][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3483.813864][ T6640] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3483.847493][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3484.287387][ T6640] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3484.296533][ T6640] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3485.543931][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3485.681548][T27454] EXT4-fs (loop2): unmounting filesystem. [ 3486.314639][ T6677] loop3: detected capacity change from 0 to 16 [ 3486.840516][ T6677] erofs: (device loop3): mounted with root inode @ nid 36. [ 3486.852654][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 3486.878835][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8711'. [ 3487.977991][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8712'. [ 3488.050855][T26366] syz-executor: attempt to access beyond end of device [ 3488.050855][T26366] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 3488.082209][ T6693] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8713'. [ 3488.307968][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 3488.307984][ T28] audit: type=1326 audit(1736846215.756:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3488.337580][ T28] audit: type=1326 audit(1736846215.756:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3488.373011][ T28] audit: type=1326 audit(1736846215.756:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3488.466128][ T28] audit: type=1326 audit(1736846215.756:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3488.490097][ T28] audit: type=1326 audit(1736846215.756:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3488.514844][ T28] audit: type=1326 audit(1736846215.756:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3488.538454][ T28] audit: type=1326 audit(1736846215.756:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3488.561971][ T28] audit: type=1326 audit(1736846215.756:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3489.154567][ T6701] loop4: detected capacity change from 0 to 512 [ 3489.169389][ T28] audit: type=1326 audit(1736846215.756:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3489.180369][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3489.193020][ T28] audit: type=1326 audit(1736846215.756:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.1.8711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26da385d29 code=0x7fc00000 [ 3489.214974][ T6701] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.8717: Failed to acquire dquot type 0 [ 3489.270520][ T6701] EXT4-fs (loop4): Remounting filesystem read-only [ 3489.298219][ T6701] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.8717: Failed to acquire dquot type 0 [ 3489.310086][ T6701] EXT4-fs (loop4): Remounting filesystem read-only [ 3489.316809][ T6701] EXT4-fs error (device loop4): ext4_acquire_dquot:6788: comm syz.4.8717: Failed to acquire dquot type 0 [ 3489.328377][ T6701] EXT4-fs (loop4): Remounting filesystem read-only [ 3489.334807][ T6701] EXT4-fs (loop4): 1 orphan inode deleted [ 3489.340546][ T6701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3489.349346][ T6701] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3489.372459][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3489.473930][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3489.603308][ T6717] loop0: detected capacity change from 0 to 40427 [ 3489.631571][ T6708] loop3: detected capacity change from 0 to 40427 [ 3489.632799][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3489.651740][ T6708] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 768) [ 3489.654633][ T6717] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 768) [ 3489.694863][ T6708] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3489.695238][ T6717] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3489.744559][ T6722] input: syz0 as /devices/virtual/input/input189 [ 3489.932991][ T6717] F2FS-fs (loop0): fault_injection options not supported [ 3489.934013][ T6708] F2FS-fs (loop3): fault_injection options not supported [ 3489.955254][ T6708] F2FS-fs (loop3): invalid crc value [ 3489.969620][ T6717] F2FS-fs (loop0): invalid crc value [ 3489.976185][T15360] udevd[15360]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 3489.995804][ T6717] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3490.134748][ T6708] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3490.140911][ T6717] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3490.157930][ T6717] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3490.171261][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3490.561610][ T6708] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3490.628846][ T6708] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3490.665726][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 3492.522059][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3492.548027][T26366] syz-executor: attempt to access beyond end of device [ 3492.548027][T26366] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3492.570192][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 3492.701914][ T6756] loop3: detected capacity change from 0 to 1024 [ 3492.753450][ T6756] EXT4-fs: Ignoring removed nobh option [ 3492.767387][ T6757] loop2: detected capacity change from 0 to 16 [ 3492.840594][ T6757] erofs: (device loop2): mounted with root inode @ nid 36. [ 3492.909985][ T6757] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3492.919531][ T6757] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3492.928522][ T6757] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3492.937561][ T6757] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3492.946500][ T6757] syz.2.8727: attempt to access beyond end of device [ 3492.946500][ T6757] loop2: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3492.960063][ T6757] syz.2.8727: attempt to access beyond end of device [ 3492.960063][ T6757] loop2: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3493.035040][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3493.048209][T15360] udevd[15360]: symlink '../../loop2' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 3493.082940][ T6756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3493.102146][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3493.207225][ T6767] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8730'. [ 3493.539791][ T6769] device gretap0 left promiscuous mode [ 3493.612611][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3493.620873][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3493.737730][ T6770] netlink: 25 bytes leftover after parsing attributes in process `syz.0.8729'. [ 3493.756145][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 3493.805175][ T28] audit: type=1400 audit(1736846220.846:4465): avc: denied { sys_module } for pid=6755 comm="syz.3.8728" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3493.900386][ T6769] syz.3.8728 (6769) used greatest stack depth: 18176 bytes left [ 3494.000859][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 3494.114262][T26461] EXT4-fs (loop3): unmounting filesystem. [ 3494.124327][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3494.145182][ T6759] loop4: detected capacity change from 0 to 40427 [ 3494.152507][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 3494.160644][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3494.169919][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3494.180004][ T6759] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 768) [ 3494.182476][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3494.509546][ T6759] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3494.566611][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3494.622114][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3494.649485][ T6759] F2FS-fs (loop4): fault_injection options not supported [ 3494.657351][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3494.666087][ T6759] F2FS-fs (loop4): invalid crc value [ 3494.673823][ T6781] loop1: detected capacity change from 0 to 128 [ 3494.693902][ T6759] F2FS-fs (loop4): Found nat_bits in checkpoint [ 3494.713280][ T6785] loop3: detected capacity change from 0 to 512 [ 3494.722243][ T6781] syz.1.8735: attempt to access beyond end of device [ 3494.722243][ T6781] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 3494.736303][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3494.737890][ T6785] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3494.773709][ T6781] syz.1.8735: attempt to access beyond end of device [ 3494.773709][ T6781] loop1: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 3494.773823][ T6785] EXT4-fs error (device loop3): __ext4_iget:5057: inode #11: block 1: comm syz.3.8734: invalid block [ 3494.798128][ T6785] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.8734: couldn't read orphan inode 11 (err -117) [ 3494.798323][ T6759] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 3494.817594][ T6759] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 3494.817796][ T6785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3494.832579][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3494.886752][T15360] udevd[15360]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3495.023841][ T6796] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3495.388917][ T6800] input: syz0 as /devices/virtual/input/input190 [ 3496.008073][ T6802] input: syz0 as /devices/virtual/input/input191 [ 3496.045299][T27402] syz-executor: attempt to access beyond end of device [ 3496.045299][T27402] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3496.097227][ T6805] loop1: detected capacity change from 0 to 1024 [ 3496.131057][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system [ 3496.165473][ T6805] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.8737: Invalid block bitmap block 0 in block_group 0 [ 3496.309314][ T6805] Quota error (device loop1): write_blk: dquota write failed [ 3496.319184][ T6805] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3496.347857][ T6805] EXT4-fs error (device loop1): ext4_acquire_dquot:6788: comm syz.1.8737: Failed to acquire dquot type 0 [ 3496.402349][ T6805] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.8737: Freeing blocks not in datazone - block = 0, count = 4096 [ 3496.883981][ T6805] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.8737: Invalid inode bitmap blk 0 in block_group 0 [ 3496.898833][ T2902] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 3496.920124][ T6805] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 3496.930302][ T2902] EXT4-fs error (device loop1): ext4_release_dquot:6811: comm kworker/u4:0: Failed to release dquot type 0 [ 3497.017164][ T6805] EXT4-fs (loop1): 1 orphan inode deleted [ 3497.035453][ T6805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3497.101769][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system [ 3497.234398][ T6810] loop2: detected capacity change from 0 to 40427 [ 3497.279188][ T6810] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 768) [ 3497.288564][ T6810] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3497.350807][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3497.356684][ T6810] F2FS-fs (loop2): fault_injection options not supported [ 3497.379719][ T6810] F2FS-fs (loop2): invalid crc value [ 3497.394697][ T6810] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3497.711054][ T6825] loop0: detected capacity change from 0 to 16 [ 3497.734522][ T6825] erofs: (device loop0): mounted with root inode @ nid 36. [ 3497.747840][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 3497.785798][T26461] EXT4-fs (loop3): unmounting filesystem. [ 3497.889991][ T6810] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 3497.911380][ T6810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3497.932072][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3498.005668][ T6830] netlink: 25 bytes leftover after parsing attributes in process `syz.3.8743'. [ 3498.015264][ T6830] device gretap0 entered promiscuous mode [ 3498.822482][ T6835] netlink: 25 bytes leftover after parsing attributes in process `syz.0.8744'. [ 3500.683022][T27454] syz-executor: attempt to access beyond end of device [ 3500.683022][T27454] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3500.699395][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3501.444739][ T6850] input: syz0 as /devices/virtual/input/input192 [ 3501.782090][ T6842] loop0: detected capacity change from 0 to 40427 [ 3501.802306][ T6842] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 768) [ 3501.812067][ T6858] input: syz0 as /devices/virtual/input/input193 [ 3501.832235][ T6842] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3501.842948][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3501.871876][ T6842] F2FS-fs (loop0): fault_injection options not supported [ 3501.949529][ T6859] loop4: detected capacity change from 0 to 16 [ 3502.009882][ T6859] erofs: (device loop4): mounted with root inode @ nid 36. [ 3502.117154][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 3502.131260][ T6842] F2FS-fs (loop0): invalid crc value [ 3502.151078][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 3502.169676][ T6842] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3502.380143][ T6842] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3502.397274][ T6842] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3502.427380][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3502.452864][T25840] EXT4-fs (loop1): unmounting filesystem. [ 3502.871994][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3503.148938][T26366] syz-executor: attempt to access beyond end of device [ 3503.148938][T26366] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3503.304560][ T6867] loop1: detected capacity change from 0 to 40427 [ 3503.330484][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3503.712725][ T6867] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 768) [ 3503.720377][ T6867] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3503.731325][ T6867] F2FS-fs (loop1): fault_injection options not supported [ 3503.739762][ T6867] F2FS-fs (loop1): invalid crc value [ 3503.747255][ T6867] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3503.755091][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 3503.812456][ T6867] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3503.819678][ T6867] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3503.840484][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 3505.021058][T25840] syz-executor: attempt to access beyond end of device [ 3505.021058][T25840] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3505.318908][ T28] audit: type=1326 audit(1736846232.606:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.410349][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8758'. [ 3505.411626][ T2196] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 3505.428668][ T28] audit: type=1326 audit(1736846232.606:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.452662][ T28] audit: type=1326 audit(1736846232.626:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.476064][ T28] audit: type=1326 audit(1736846232.626:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.807465][ T28] audit: type=1326 audit(1736846232.626:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.843527][ T6912] loop0: detected capacity change from 0 to 1024 [ 3505.858386][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3505.863962][ T28] audit: type=1326 audit(1736846232.646:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.885352][ T6914] loop4: detected capacity change from 0 to 1024 [ 3505.892879][ T28] audit: type=1326 audit(1736846232.646:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.899103][ T2196] usb 3-1: Using ep0 maxpacket: 32 [ 3505.922194][ T28] audit: type=1326 audit(1736846232.646:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.922225][ T28] audit: type=1326 audit(1736846232.666:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.928173][ T6912] EXT4-fs: Ignoring removed nobh option [ 3505.950822][ T6914] EXT4-fs: Ignoring removed nobh option [ 3505.979693][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3505.985429][ T28] audit: type=1326 audit(1736846232.666:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.4.8757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7ffc0000 [ 3505.998801][ T2196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 3506.033519][ T2196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8224, setting to 1024 [ 3506.045066][ T2196] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3506.047831][ T6917] loop3: detected capacity change from 0 to 512 [ 3506.054963][ T2196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3506.068425][ T6917] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3506.071912][ T2196] usb 3-1: config 0 descriptor?? [ 3506.078343][ T6914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3506.080305][ T6912] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3506.089315][ T6917] EXT4-fs error (device loop3): __ext4_iget:5057: inode #11: block 1: comm syz.3.8762: invalid block [ 3506.108119][ T6917] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.8762: couldn't read orphan inode 11 (err -117) [ 3506.121502][ T6917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3506.294642][ T6924] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3507.013690][ T2196] savu 0003:1E7D:2D5A.005B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 3507.063980][ T6929] device gretap0 left promiscuous mode [ 3507.072363][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3507.079513][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3507.102265][T30816] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 3507.111211][T30816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3507.121478][T30816] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 3507.130122][T30816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3507.140100][T30816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3507.148315][T30816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3507.207623][ T6933] loop1: detected capacity change from 0 to 16 [ 3507.325281][T26366] EXT4-fs (loop0): unmounting filesystem. [ 3507.337292][T30816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3507.361809][T30816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3507.371878][ T6933] erofs: (device loop1): mounted with root inode @ nid 36. [ 3507.413912][ T6933] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3507.423306][ T6933] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3507.433231][ T6933] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3507.442638][ T6933] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3507.451956][ T6933] syz.1.8763: attempt to access beyond end of device [ 3507.451956][ T6933] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3507.465990][ T6933] syz.1.8763: attempt to access beyond end of device [ 3507.465990][ T6933] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3507.477166][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 3507.514131][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3507.526162][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3507.527315][T15360] udevd[15360]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3507.581823][ T6936] loop4: detected capacity change from 0 to 512 [ 3507.592857][ T6936] EXT4-fs (loop4): Test dummy encryption mode enabled [ 3507.605138][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3507.652214][ T6936] EXT4-fs error (device loop4): __ext4_iget:5057: inode #11: block 1: comm syz.4.8765: invalid block [ 3507.674704][ T6936] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.8765: couldn't read orphan inode 11 (err -117) [ 3507.686868][ T6936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3507.704085][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3508.092280][T26461] EXT4-fs (loop3): unmounting filesystem. [ 3508.101838][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3508.169180][ T6950] input: syz0 as /devices/virtual/input/input195 [ 3508.271363][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3508.404306][T28243] usb 3-1: USB disconnect, device number 85 [ 3508.431755][ T6955] loop2: detected capacity change from 0 to 128 [ 3508.484607][ T6956] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8770'. [ 3508.748505][ T6955] syz.2.8771: attempt to access beyond end of device [ 3508.748505][ T6955] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 3508.782269][ T6955] syz.2.8771: attempt to access beyond end of device [ 3508.782269][ T6955] loop2: rw=524288, sector=145, nr_sectors = 33 limit=128 [ 3509.814741][ T6973] loop2: detected capacity change from 0 to 16 [ 3509.834026][ T6973] erofs: (device loop2): mounted with root inode @ nid 36. [ 3509.841951][ T6973] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3509.845547][ T6974] loop4: detected capacity change from 0 to 16 [ 3509.850915][ T6973] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3509.865747][ T6974] erofs: (device loop4): mounted with root inode @ nid 36. [ 3509.865762][ T6973] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3509.873904][ T6974] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3509.881614][ T6973] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3509.890501][ T6974] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3509.899251][ T6973] syz.2.8775: attempt to access beyond end of device [ 3509.899251][ T6973] loop2: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3509.908059][ T6974] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3509.921561][ T6973] syz.2.8775: attempt to access beyond end of device [ 3509.921561][ T6973] loop2: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3509.930391][ T6974] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3509.953247][ T6974] syz.4.8776: attempt to access beyond end of device [ 3509.953247][ T6974] loop4: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3509.953329][ T6974] syz.4.8776: attempt to access beyond end of device [ 3509.953329][ T6974] loop4: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3509.984079][ T6975] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8774'. [ 3509.984545][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 3510.020332][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 3510.053189][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 3510.192562][ T6985] loop3: detected capacity change from 0 to 512 [ 3510.199466][ T6985] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3510.212536][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 3510.236330][ T6985] EXT4-fs error (device loop3): __ext4_iget:5057: inode #11: block 1: comm syz.3.8781: invalid block [ 3510.254387][ T6990] loop4: detected capacity change from 0 to 512 [ 3510.260837][ T6985] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.8781: couldn't read orphan inode 11 (err -117) [ 3510.273512][ T6990] EXT4-fs (loop4): Test dummy encryption mode enabled [ 3510.746527][ T6985] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3510.765939][ T6990] EXT4-fs error (device loop4): __ext4_iget:5057: inode #11: block 1: comm syz.4.8780: invalid block [ 3510.777005][ T6990] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.8780: couldn't read orphan inode 11 (err -117) [ 3510.789679][ T6990] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3510.896014][ T6996] input: syz0 as /devices/virtual/input/input196 [ 3511.145043][ T6997] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3511.162136][ T7002] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3511.524439][ T7012] input: syz0 as /devices/virtual/input/input197 [ 3511.751800][ T7014] loop0: detected capacity change from 0 to 16 [ 3511.759105][ T7014] erofs: (device loop0): mounted with root inode @ nid 36. [ 3511.767604][ T7014] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3511.776654][ T7014] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3511.785747][ T7014] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3511.794852][ T7014] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3511.804036][ T7014] syz.0.8784: attempt to access beyond end of device [ 3511.804036][ T7014] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3511.817775][ T7014] syz.0.8784: attempt to access beyond end of device [ 3511.817775][ T7014] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3512.070750][T26461] EXT4-fs (loop3): unmounting filesystem. [ 3512.119566][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3513.409716][ T7039] loop0: detected capacity change from 0 to 16 [ 3513.416371][ T7039] erofs: (device loop0): mounted with root inode @ nid 36. [ 3513.424393][ T7039] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3513.466450][ T7039] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3513.475558][ T7039] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3513.542755][ T7044] netlink: 25 bytes leftover after parsing attributes in process `syz.3.8786'. [ 3514.034191][ T7047] loop1: detected capacity change from 0 to 16 [ 3514.163520][ T7039] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3514.188885][ T7039] syz.0.8790: attempt to access beyond end of device [ 3514.188885][ T7039] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3514.198526][ T7047] erofs: (device loop1): mounted with root inode @ nid 36. [ 3514.202967][ T7039] syz.0.8790: attempt to access beyond end of device [ 3514.202967][ T7039] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3514.236869][ T7047] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3514.245910][ T7047] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3514.254831][ T7047] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3514.262227][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 3514.263692][ T7047] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3514.286068][ T7047] syz.1.8791: attempt to access beyond end of device [ 3514.286068][ T7047] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3514.300481][ T7047] syz.1.8791: attempt to access beyond end of device [ 3514.300481][ T7047] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3514.362117][T15360] udevd[15360]: symlink '../../loop1' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:1' failed: Read-only file system [ 3514.396077][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:0' failed: Read-only file system [ 3514.508871][ T7059] loop3: detected capacity change from 0 to 256 [ 3514.523792][ T7058] input: syz0 as /devices/virtual/input/input198 [ 3514.563528][ T7059] exfat: Bad value for 'uid' [ 3514.601515][ T7064] loop1: detected capacity change from 0 to 512 [ 3514.613158][T15360] udevd[15360]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 3514.810186][ T7064] EXT4-fs (loop1): Test dummy encryption mode enabled [ 3514.882928][ T7055] loop4: detected capacity change from 0 to 40427 [ 3514.897446][T15473] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3514.899250][ T7055] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 768) [ 3514.920674][ T7064] EXT4-fs error (device loop1): __ext4_iget:5057: inode #11: block 1: comm syz.1.8798: invalid block [ 3514.923706][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3514.937791][ T7055] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3514.953086][ T7064] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.8798: couldn't read orphan inode 11 (err -117) [ 3514.953252][ T7055] F2FS-fs (loop4): fault_injection options not supported [ 3514.972599][ T7055] F2FS-fs (loop4): invalid crc value [ 3514.975169][ T7064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3514.993764][T15473] udevd[15473]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 3515.006872][ T7055] F2FS-fs (loop4): Found nat_bits in checkpoint [ 3515.058979][ T7070] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3515.076127][ T7055] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 3515.083124][ T7055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 3515.102113][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 3516.339234][ T7076] loop2: detected capacity change from 0 to 512 [ 3516.361009][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3516.399640][ T7076] EXT4-fs (loop2): Test dummy encryption mode enabled [ 3516.408125][ T7076] EXT4-fs error (device loop2): __ext4_iget:5057: inode #11: block 1: comm syz.2.8799: invalid block [ 3516.419474][ T7076] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.8799: couldn't read orphan inode 11 (err -117) [ 3516.432314][ T7076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3516.498028][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3516.511899][T27402] syz-executor: attempt to access beyond end of device [ 3516.511899][T27402] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3516.812922][ T7087] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3516.987411][T25840] EXT4-fs (loop1): unmounting filesystem. [ 3517.002536][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 3517.246569][ T7095] loop4: detected capacity change from 0 to 16 [ 3517.257487][ T7095] erofs: (device loop4): mounted with root inode @ nid 36. [ 3517.452750][ T7095] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3517.463145][ T7095] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3517.473181][ T7095] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3517.483521][ T7095] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3517.494201][ T7095] syz.4.8802: attempt to access beyond end of device [ 3517.494201][ T7095] loop4: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3517.509282][ T7095] syz.4.8802: attempt to access beyond end of device [ 3517.509282][ T7095] loop4: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3517.741348][ T7099] loop0: detected capacity change from 0 to 16 [ 3517.755136][ T7099] erofs: (device loop0): mounted with root inode @ nid 36. [ 3517.763081][ T7099] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3517.765875][T27454] EXT4-fs (loop2): unmounting filesystem. [ 3517.772049][ T7099] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3517.786624][ T7099] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3517.795587][ T7099] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3517.804437][ T7099] syz.0.8804: attempt to access beyond end of device [ 3517.804437][ T7099] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3517.818017][ T7099] syz.0.8804: attempt to access beyond end of device [ 3517.818017][ T7099] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 3517.913223][ T7089] loop1: detected capacity change from 0 to 40427 [ 3517.935805][ T7089] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 768) [ 3517.958450][ T7089] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3517.968274][ T7089] F2FS-fs (loop1): fault_injection options not supported [ 3518.037427][ T7089] F2FS-fs (loop1): invalid crc value [ 3518.060492][ T7089] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3518.330332][ T7089] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3518.347633][ T7102] loop2: detected capacity change from 0 to 40427 [ 3518.354511][ T7089] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3518.366848][ T7102] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 768) [ 3518.388964][ T7102] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3518.397668][ T7102] F2FS-fs (loop2): fault_injection options not supported [ 3518.405607][ T7102] F2FS-fs (loop2): invalid crc value [ 3518.439980][ T7102] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3518.538634][ T7118] loop3: detected capacity change from 0 to 16 [ 3518.579988][ T7118] erofs: (device loop3): mounted with root inode @ nid 36. [ 3518.629516][ T7118] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 3518.639724][ T7118] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 3518.650413][ T7118] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 3518.661007][ T7118] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 3518.671763][ T7118] syz.3.8807: attempt to access beyond end of device [ 3518.671763][ T7118] loop3: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 3520.622752][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 3520.660171][T25840] bio_check_eod: 1 callbacks suppressed [ 3520.660193][T25840] syz-executor: attempt to access beyond end of device [ 3520.660193][T25840] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 3520.678870][ T7102] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 3520.706088][ T7102] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3520.718667][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3521.253715][ T7130] input: syz0 as /devices/virtual/input/input199 [ 3521.535846][T15360] udevd[15360]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 3521.659620][ T7136] loop3: detected capacity change from 0 to 512 [ 3521.671127][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3521.710487][ T7136] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3521.745083][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8814'. [ 3521.891832][ T7136] EXT4-fs error (device loop3): __ext4_iget:5057: inode #11: block 1: comm syz.3.8815: invalid block [ 3521.918530][ T7136] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.8815: couldn't read orphan inode 11 (err -117) [ 3521.926773][ T7145] loop0: detected capacity change from 0 to 1024 [ 3521.930628][ T7136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3522.475529][ T7145] EXT4-fs: Ignoring removed nobh option [ 3522.494582][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 3522.494600][ T28] audit: type=1326 audit(1736846249.936:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3522.499856][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3522.500763][ T28] audit: type=1326 audit(1736846249.936:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3522.531985][T15360] udevd[15360]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 3522.535515][ T28] audit: type=1326 audit(1736846249.936:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3522.561235][ T7145] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3522.569531][ T28] audit: type=1326 audit(1736846249.936:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3522.600501][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3522.617865][ T28] audit: type=1326 audit(1736846249.936:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3522.660696][ T7152] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3522.678472][ T28] audit: type=1326 audit(1736846249.936:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3522.701984][ T28] audit: type=1326 audit(1736846249.936:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3522.726297][ T28] audit: type=1326 audit(1736846249.936:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3522.749945][ T28] audit: type=1326 audit(1736846249.936:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3522.773790][ T28] audit: type=1326 audit(1736846249.936:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fd8f85d29 code=0x7fc00000 [ 3523.403891][ T7165] loop2: detected capacity change from 0 to 16 [ 3523.706607][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3524.089822][ T7165] erofs: (device loop2): mounted with root inode @ nid 36. [ 3524.101978][T26366] EXT4-fs (loop0): unmounting filesystem. [ 3524.190185][ T7169] input: syz0 as /devices/virtual/input/input200 [ 3524.510588][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3524.587797][ T7185] netlink: 'syz.2.8829': attribute type 4 has an invalid length. [ 3524.593844][ T7186] loop4: detected capacity change from 0 to 2048 [ 3524.728111][ T7191] loop2: detected capacity change from 0 to 512 [ 3524.762479][ T7191] EXT4-fs: dax option not supported [ 3524.765315][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3525.041132][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 3525.059706][ T7199] Unsupported ieee802154 address type: 0 [ 3525.105879][ T7186] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3526.445404][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3526.470468][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3526.481596][ T7218] loop4: detected capacity change from 0 to 512 [ 3526.513630][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8840'. [ 3526.515715][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3527.027718][ T5042] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 3527.062849][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3527.648679][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 3527.656750][ T28] audit: type=1400 audit(1736846255.096:4603): avc: denied { ioctl } for pid=7231 comm="syz.4.8843" path="socket:[128961]" dev="sockfs" ino=128961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3527.689835][ T5042] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3527.802202][ T28] audit: type=1400 audit(1736846255.176:4604): avc: denied { sqpoll } for pid=7231 comm="syz.4.8843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3527.829186][ T5042] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3527.838614][ T5042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3527.846601][ T28] audit: type=1400 audit(1736846255.216:4605): avc: denied { write } for pid=7228 comm="syz.1.8842" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3527.908238][ T5042] usb 1-1: config 0 descriptor?? [ 3527.953472][ T7242] loop4: detected capacity change from 0 to 16 [ 3527.969729][ T7242] erofs: (device loop4): mounted with root inode @ nid 36. [ 3528.803641][T15360] udevd[15360]: symlink '../../loop4' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:4' failed: Read-only file system [ 3528.821998][T26461] EXT4-fs (loop3): unmounting filesystem. [ 3529.338819][ T28] audit: type=1400 audit(1736846256.776:4606): avc: denied { bind } for pid=7248 comm="syz.1.8849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3529.794367][T28424] usb 1-1: USB disconnect, device number 86 [ 3529.821154][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3529.859108][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3529.894947][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3529.908973][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3529.918915][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3529.929330][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3529.943042][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3529.958874][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3529.964566][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3529.970497][ T7262] blackhole_netdev_xmit(): Dropping skb. [ 3530.166643][ T7287] loop3: detected capacity change from 0 to 16 [ 3530.182540][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 3530.183422][ T7287] erofs: (device loop3): mounted with root inode @ nid 36. [ 3530.204167][ T28] audit: type=1400 audit(1736846257.656:4607): avc: denied { mount } for pid=7286 comm="syz.3.8861" name="/" dev="loop3" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3530.228448][T15473] udevd[15473]: symlink '../../loop3' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:3' failed: Read-only file system [ 3530.247416][ T28] audit: type=1326 audit(1736846257.696:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7288 comm="syz.2.8862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa178785d29 code=0x0 [ 3530.833948][ T7296] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 3530.848847][ T7296] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -11 in[46, 4050] out[1851] [ 3530.859707][ T7296] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 3530.868066][ T7297] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 3530.877246][ T7297] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -11 in[46, 4050] out[1851] [ 3530.887910][ T7297] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 3531.158475][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3531.178684][ T7303] loop4: detected capacity change from 0 to 512 [ 3531.186949][ T7301] device bridge_slave_0 left promiscuous mode [ 3531.197671][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 3531.206234][ T7301] device bridge_slave_1 left promiscuous mode [ 3531.213070][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 3531.221169][ T28] audit: type=1400 audit(1736846258.676:4609): avc: denied { unmount } for pid=26461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3531.228340][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3531.252688][ T7303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 3531.268045][ T28] audit: type=1400 audit(1736846258.716:4610): avc: denied { audit_write } for pid=7300 comm="syz.1.8865" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3531.302845][ T7303] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.8864: bad orphan inode 131083 [ 3531.324201][ T7303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3531.355116][ T28] audit: type=1107 audit(1736846258.726:4611): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 3531.382243][T15473] udevd[15473]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 3531.397738][ T28] audit: type=1400 audit(1736846258.846:4612): avc: denied { ioctl } for pid=7299 comm="syz.4.8864" path="/594/bus/file1" dev="loop4" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3531.432870][T27402] EXT4-fs (loop4): unmounting filesystem. [ 3531.510585][ T7319] loop0: detected capacity change from 0 to 2048 [ 3531.542082][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3531.561543][ T7319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3531.576261][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3531.608886][ T5042] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 3531.798978][ T5042] usb 2-1: Using ep0 maxpacket: 32 [ 3531.806758][ T5042] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 3531.817843][ T7319] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 3531.832632][ T5042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3531.832875][ T7319] EXT4-fs (loop0): Remounting filesystem read-only [ 3531.841611][ T5042] usb 2-1: Product: syz [ 3531.854951][ T5042] usb 2-1: Manufacturer: syz [ 3531.859715][ T5042] usb 2-1: SerialNumber: syz [ 3531.867437][ T5042] usb 2-1: config 0 descriptor?? [ 3532.007051][ T5775] EXT4-fs (loop0): unmounting filesystem. [ 3532.225653][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 3532.232791][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 3532.240200][ T7332] device bridge_slave_0 entered promiscuous mode [ 3532.246958][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 3532.254033][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 3532.261461][ T7332] device bridge_slave_1 entered promiscuous mode [ 3532.492878][ T7344] Driver unsupported XDP return value 0 on prog (id 5055) dev N/A, expect packet loss! [ 3532.520629][ T5042] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 3532.694830][ T2196] usb 2-1: USB disconnect, device number 78 [ 3532.724917][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 3532.724968][ T28] audit: type=1400 audit(1736846260.176:4616): avc: denied { unmount } for pid=27454 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 3532.954995][ T7358] netlink: 'syz.2.8880': attribute type 12 has an invalid length. [ 3532.965316][T30816] device bridge_slave_1 left promiscuous mode [ 3532.972592][T30816] bridge0: port 2(bridge_slave_1) entered disabled state [ 3532.982522][T30816] device bridge_slave_0 left promiscuous mode [ 3533.005545][T30816] bridge0: port 1(bridge_slave_0) entered disabled state [ 3533.100173][T30816] device veth1_macvtap left promiscuous mode [ 3533.106189][T30816] device veth0_vlan left promiscuous mode [ 3533.238243][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3533.246831][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3533.262606][ T7385] loop1: detected capacity change from 0 to 256 [ 3533.314553][ T7332] device veth0_vlan entered promiscuous mode [ 3533.327709][ T7332] device veth1_macvtap entered promiscuous mode [ 3533.717783][ T28] audit: type=1400 audit(1736846261.166:4617): avc: denied { ioctl } for pid=7382 comm="syz.2.8882" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=130339 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3533.746127][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3533.865491][ T28] audit: type=1400 audit(1736846261.286:4618): avc: denied { mounton } for pid=7384 comm="syz.1.8883" path="/583/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=1049136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 3533.945079][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3533.953142][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3533.960651][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3533.968128][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3533.977257][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3533.985764][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3533.994153][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 3534.001042][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3534.014066][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3534.022777][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3534.051588][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 3534.058487][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3534.066770][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3534.532909][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3534.562868][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3534.598085][ T7401] syz.4.8885 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3535.198875][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3535.207673][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3535.216226][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3535.224659][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3535.233803][ T7409] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 3535.246019][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 3535.253032][ T7409] bridge0: port 1(bridge_slave_0) entered disabled state [ 3535.771528][ T7433] loop4: detected capacity change from 0 to 256 [ 3535.873125][ T7433] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 3536.066663][ T7438] loop0: detected capacity change from 0 to 512 [ 3536.085064][T15473] udevd[15473]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 3536.428054][ T28] audit: type=1400 audit(1736846263.876:4619): avc: denied { watch } for pid=7429 comm="syz.1.8896" path="/586/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 3536.568275][ T28] audit: type=1400 audit(1736846264.006:4620): avc: denied { connect } for pid=7446 comm="syz.2.8901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3536.808865][ T24] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 3536.821204][ T7453] loop2: detected capacity change from 0 to 16 [ 3536.831683][ T7453] erofs: (device loop2): mounted with root inode @ nid 36. [ 3536.836901][ T28] audit: type=1400 audit(1736846264.006:4621): avc: denied { setopt } for pid=7446 comm="syz.2.8901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3536.853986][T15473] udevd[15473]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system [ 3536.948576][ T28] audit: type=1400 audit(1736846264.006:4622): avc: denied { shutdown } for pid=7446 comm="syz.2.8901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3537.071690][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3537.127845][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3537.137034][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3537.147529][ T24] usb 4-1: Product: syz [ 3537.151766][ T24] usb 4-1: Manufacturer: syz [ 3537.158298][ T24] usb 4-1: SerialNumber: syz [ 3537.223263][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 3537.230207][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 3537.237815][ T7460] device bridge_slave_0 entered promiscuous mode [ 3537.245968][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 3537.253295][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 3537.260814][ T7460] device bridge_slave_1 entered promiscuous mode [ 3537.369554][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 3537.376422][ T7460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3537.383570][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 3537.390339][ T7460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3537.406801][ T7474] usb usb7: check_ctrlrecip: process 7474 (syz.2.8908) requesting ep 01 but needs 81 [ 3537.426339][ T7474] usb usb7: usbfs: process 7474 (syz.2.8908) did not claim interface 0 before use [ 3537.436181][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3537.444371][T26352] bridge0: port 1(bridge_slave_0) entered disabled state [ 3537.451790][T26352] bridge0: port 2(bridge_slave_1) entered disabled state [ 3537.472989][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3537.489426][T26352] bridge0: port 1(bridge_slave_0) entered blocking state [ 3537.496285][T26352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3537.504480][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3537.514852][T26352] bridge0: port 2(bridge_slave_1) entered blocking state [ 3537.521758][T26352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3537.524158][ T28] audit: type=1400 audit(1736846264.976:4623): avc: denied { getopt } for pid=7471 comm="syz.0.8907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3537.549735][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3537.558339][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3537.584032][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3537.599346][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3537.614143][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3537.627054][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3537.648882][ T7460] device veth0_vlan entered promiscuous mode [ 3537.659611][ T7479] loop2: detected capacity change from 0 to 512 [ 3537.681919][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3537.695247][ T7460] device veth1_macvtap entered promiscuous mode [ 3537.715601][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3537.740783][T26352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3537.753834][T15360] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3538.181459][ T28] audit: type=1400 audit(1736846265.636:4624): avc: denied { mounton } for pid=7493 comm="syz.4.8913" path="/proc/4/task" dev="proc" ino=131162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 3538.261723][ T7497] loop2: detected capacity change from 0 to 256 [ 3538.317349][ T7497] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 3538.530903][ T24] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3538.618759][ T24] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 3539.010296][ T5544] device bridge_slave_1 left promiscuous mode [ 3539.037235][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 3539.155105][ T5544] device bridge_slave_0 left promiscuous mode [ 3539.169086][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state [ 3539.176127][ T28] audit: type=1400 audit(1736846266.626:4625): avc: denied { bind } for pid=7511 comm="syz.2.8919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3539.210335][ T5544] device veth1_macvtap left promiscuous mode [ 3539.222501][ T5544] device veth0_vlan left promiscuous mode [ 3539.268780][T27372] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 3539.470523][T27372] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3539.488469][ T24] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3539.501597][T27372] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3539.524287][T27372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3539.543629][ T24] usb 4-1: USB disconnect, device number 86 [ 3539.571861][ T24] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 3539.583776][T27372] usb 1-1: Product: syz [ 3539.591727][T27372] usb 1-1: Manufacturer: syz [ 3539.644141][T27372] usb 1-1: SerialNumber: syz [ 3539.690489][T26570] ================================================================== [ 3539.698386][T26570] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 3539.705418][T26570] Read of size 8 at addr ffff8881125c8ce0 by task kworker/1:2/26570 [ 3539.713224][T26570] [ 3539.715392][T26570] CPU: 1 PID: 26570 Comm: kworker/1:2 Not tainted 6.1.118-syzkaller-00015-g770852bf7d99 #0 [ 3539.725197][T26570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3539.735093][T26570] Workqueue: 0x0 (events) [ 3539.739352][T26570] Call Trace: [ 3539.742473][T26570] [ 3539.745244][T26570] dump_stack_lvl+0x151/0x1b7 [ 3539.749760][T26570] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3539.755051][T26570] ? _printk+0xd1/0x111 [ 3539.759051][T26570] ? __virt_addr_valid+0x242/0x2f0 [ 3539.763993][T26570] print_report+0x158/0x4e0 [ 3539.768333][T26570] ? __virt_addr_valid+0x242/0x2f0 [ 3539.773278][T26570] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 3539.779371][T26570] ? worker_thread+0xa36/0x1260 [ 3539.784040][T26570] kasan_report+0x13c/0x170 [ 3539.788387][T26570] ? worker_thread+0xa36/0x1260 [ 3539.793070][T26570] __asan_report_load8_noabort+0x14/0x20 [ 3539.798537][T26570] worker_thread+0xa36/0x1260 [ 3539.803051][T26570] kthread+0x26d/0x300 [ 3539.806954][T26570] ? worker_clr_flags+0x1a0/0x1a0 [ 3539.811814][T26570] ? kthread_blkcg+0xd0/0xd0 [ 3539.816241][T26570] ret_from_fork+0x1f/0x30 [ 3539.820495][T26570] [ 3539.823360][T26570] [ 3539.825526][T26570] Allocated by task 24: [ 3539.829520][T26570] kasan_set_track+0x4b/0x70 [ 3539.833947][T26570] kasan_save_alloc_info+0x1f/0x30 [ 3539.838895][T26570] __kasan_kmalloc+0x9c/0xb0 [ 3539.843345][T26570] __kmalloc_node+0xb4/0x1e0 [ 3539.847752][T26570] kvmalloc_node+0x221/0x640 [ 3539.852174][T26570] alloc_netdev_mqs+0x8c/0xf90 [ 3539.856776][T26570] alloc_etherdev_mqs+0x36/0x40 [ 3539.861462][T26570] usbnet_probe+0x213/0x28a0 [ 3539.865888][T26570] usb_probe_interface+0x5b6/0xa90 [ 3539.870924][T26570] really_probe+0x2b8/0x920 [ 3539.875260][T26570] __driver_probe_device+0x1a0/0x310 [ 3539.880380][T26570] driver_probe_device+0x54/0x3d0 [ 3539.885242][T26570] __device_attach_driver+0x2e3/0x490 [ 3539.890467][T26570] bus_for_each_drv+0x183/0x200 [ 3539.895135][T26570] __device_attach+0x312/0x510 [ 3539.899738][T26570] device_initial_probe+0x1a/0x20 [ 3539.904597][T26570] bus_probe_device+0xbe/0x1e0 [ 3539.909196][T26570] device_add+0xb60/0xf10 [ 3539.913361][T26570] usb_set_configuration+0x190f/0x1e80 [ 3539.918657][T26570] usb_generic_driver_probe+0x8b/0x150 [ 3539.923950][T26570] usb_probe_device+0x144/0x260 [ 3539.928641][T26570] really_probe+0x2b8/0x920 [ 3539.932979][T26570] __driver_probe_device+0x1a0/0x310 [ 3539.938111][T26570] driver_probe_device+0x54/0x3d0 [ 3539.942960][T26570] __device_attach_driver+0x2e3/0x490 [ 3539.948172][T26570] bus_for_each_drv+0x183/0x200 [ 3539.952852][T26570] __device_attach+0x312/0x510 [ 3539.957460][T26570] device_initial_probe+0x1a/0x20 [ 3539.962314][T26570] bus_probe_device+0xbe/0x1e0 [ 3539.966915][T26570] device_add+0xb60/0xf10 [ 3539.971086][T26570] usb_new_device+0xf2f/0x1820 [ 3539.975681][T26570] hub_event+0x2db1/0x4830 [ 3539.979933][T26570] process_one_work+0x73d/0xcb0 [ 3539.984618][T26570] worker_thread+0xa60/0x1260 [ 3539.989133][T26570] kthread+0x26d/0x300 [ 3539.993039][T26570] ret_from_fork+0x1f/0x30 [ 3539.997315][T26570] [ 3539.999461][T26570] Freed by task 24: [ 3540.003108][T26570] kasan_set_track+0x4b/0x70 [ 3540.007534][T26570] kasan_save_free_info+0x2b/0x40 [ 3540.012394][T26570] ____kasan_slab_free+0x131/0x180 [ 3540.017340][T26570] __kasan_slab_free+0x11/0x20 [ 3540.021950][T26570] __kmem_cache_free+0x21d/0x410 [ 3540.026715][T26570] kfree+0x7a/0xf0 [ 3540.030274][T26570] kvfree+0x35/0x40 [ 3540.033919][T26570] netdev_freemem+0x3f/0x60 [ 3540.038261][T26570] netdev_release+0x7f/0xb0 [ 3540.042599][T26570] device_release+0x95/0x1c0 [ 3540.047024][T26570] kobject_put+0x178/0x260 [ 3540.051278][T26570] put_device+0x1f/0x30 [ 3540.055281][T26570] free_netdev+0x393/0x480 [ 3540.059525][T26570] usbnet_disconnect+0x25f/0x3b0 [ 3540.064316][T26570] usb_unbind_interface+0x1fa/0x8c0 [ 3540.069331][T26570] device_release_driver_internal+0x53e/0x870 [ 3540.075231][T26570] device_release_driver+0x19/0x20 [ 3540.080182][T26570] bus_remove_device+0x2fa/0x360 [ 3540.084956][T26570] device_del+0x663/0xe90 [ 3540.089119][T26570] usb_disable_device+0x380/0x720 [ 3540.093980][T26570] usb_disconnect+0x32a/0x890 [ 3540.098494][T26570] hub_event+0x1ed8/0x4830 [ 3540.102747][T26570] process_one_work+0x73d/0xcb0 [ 3540.107444][T26570] worker_thread+0xd71/0x1260 [ 3540.111947][T26570] kthread+0x26d/0x300 [ 3540.115872][T26570] ret_from_fork+0x1f/0x30 [ 3540.120106][T26570] [ 3540.122277][T26570] Last potentially related work creation: [ 3540.127859][T26570] kasan_save_stack+0x3b/0x60 [ 3540.132347][T26570] __kasan_record_aux_stack+0xb4/0xc0 [ 3540.137552][T26570] kasan_record_aux_stack_noalloc+0xb/0x10 [ 3540.143193][T26570] insert_work+0x56/0x310 [ 3540.147358][T26570] __queue_work+0x9b6/0xd70 [ 3540.151698][T26570] queue_work_on+0x105/0x170 [ 3540.156124][T26570] usbnet_link_change+0x182/0x1a0 [ 3540.160987][T26570] usbnet_probe+0x1e1e/0x28a0 [ 3540.165499][T26570] usb_probe_interface+0x5b6/0xa90 [ 3540.170446][T26570] really_probe+0x2b8/0x920 [ 3540.174787][T26570] __driver_probe_device+0x1a0/0x310 [ 3540.179906][T26570] driver_probe_device+0x54/0x3d0 [ 3540.184765][T26570] __device_attach_driver+0x2e3/0x490 [ 3540.189976][T26570] bus_for_each_drv+0x183/0x200 [ 3540.194661][T26570] __device_attach+0x312/0x510 [ 3540.199263][T26570] device_initial_probe+0x1a/0x20 [ 3540.204122][T26570] bus_probe_device+0xbe/0x1e0 [ 3540.208724][T26570] device_add+0xb60/0xf10 [ 3540.212887][T26570] usb_set_configuration+0x190f/0x1e80 [ 3540.218185][T26570] usb_generic_driver_probe+0x8b/0x150 [ 3540.223478][T26570] usb_probe_device+0x144/0x260 [ 3540.228164][T26570] really_probe+0x2b8/0x920 [ 3540.232505][T26570] __driver_probe_device+0x1a0/0x310 [ 3540.237624][T26570] driver_probe_device+0x54/0x3d0 [ 3540.242483][T26570] __device_attach_driver+0x2e3/0x490 [ 3540.247691][T26570] bus_for_each_drv+0x183/0x200 [ 3540.252397][T26570] __device_attach+0x312/0x510 [ 3540.256991][T26570] device_initial_probe+0x1a/0x20 [ 3540.261841][T26570] bus_probe_device+0xbe/0x1e0 [ 3540.266440][T26570] device_add+0xb60/0xf10 [ 3540.270604][T26570] usb_new_device+0xf2f/0x1820 [ 3540.275205][T26570] hub_event+0x2db1/0x4830 [ 3540.279459][T26570] process_one_work+0x73d/0xcb0 [ 3540.284145][T26570] worker_thread+0xa60/0x1260 [ 3540.288656][T26570] kthread+0x26d/0x300 [ 3540.292565][T26570] ret_from_fork+0x1f/0x30 [ 3540.296817][T26570] [ 3540.298986][T26570] The buggy address belongs to the object at ffff8881125c8000 [ 3540.298986][T26570] which belongs to the cache kmalloc-4k of size 4096 [ 3540.312987][T26570] The buggy address is located 3296 bytes inside of [ 3540.312987][T26570] 4096-byte region [ffff8881125c8000, ffff8881125c9000) [ 3540.326270][T26570] [ 3540.328418][T26570] The buggy address belongs to the physical page: [ 3540.334672][T26570] page:ffffea0004497200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1125c8 [ 3540.344737][T26570] head:ffffea0004497200 order:3 compound_mapcount:0 compound_pincount:0 [ 3540.352896][T26570] flags: 0x4000000000010200(slab|head|zone=1) [ 3540.358981][T26570] raw: 4000000000010200 ffffea0004366a00 dead000000000002 ffff888100043380 [ 3540.367396][T26570] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 3540.375938][T26570] page dumped because: kasan: bad access detected [ 3540.382203][T26570] page_owner tracks the page as allocated [ 3540.387748][T26570] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 12583, tgid 12582 (syz.4.2806), ts 1160345379440, free_ts 1159937206261 [ 3540.410661][T26570] post_alloc_hook+0x213/0x220 [ 3540.415258][T26570] prep_new_page+0x1b/0x110 [ 3540.419595][T26570] get_page_from_freelist+0x2f41/0x2fc0 [ 3540.424973][T26570] __alloc_pages+0x234/0x610 [ 3540.429399][T26570] alloc_slab_page+0x6c/0xf0 [ 3540.433825][T26570] new_slab+0x90/0x3e0 [ 3540.437730][T26570] ___slab_alloc+0x6f9/0xb80 [ 3540.442156][T26570] __slab_alloc+0x5d/0xa0 [ 3540.446325][T26570] __kmem_cache_alloc_node+0x207/0x2a0 [ 3540.451627][T26570] __kmalloc_node_track_caller+0xa2/0x1e0 [ 3540.457173][T26570] kmemdup+0x29/0x60 [ 3540.460909][T26570] __devinet_sysctl_register+0xac/0x2a0 [ 3540.466288][T26570] devinet_sysctl_register+0x16a/0x1e0 [ 3540.471582][T26570] inetdev_init+0x2bf/0x4f0 [ 3540.475924][T26570] inetdev_event+0x205/0x1110 [ 3540.480435][T26570] raw_notifier_call_chain+0x8c/0xf0 [ 3540.485565][T26570] page last free stack trace: [ 3540.490070][T26570] free_unref_page_prepare+0x83d/0x850 [ 3540.495482][T26570] free_unref_page+0xb2/0x5c0 [ 3540.499971][T26570] __free_pages+0x61/0xf0 [ 3540.504137][T26570] __free_slab+0xce/0x1a0 [ 3540.508305][T26570] __unfreeze_partials+0x165/0x1a0 [ 3540.513250][T26570] put_cpu_partial+0xa9/0x100 [ 3540.517764][T26570] __slab_free+0x1c8/0x280 [ 3540.522037][T26570] ___cache_free+0xc6/0xd0 [ 3540.526272][T26570] qlist_free_all+0xc5/0x140 [ 3540.530723][T26570] kasan_quarantine_reduce+0x15a/0x180 [ 3540.535991][T26570] __kasan_slab_alloc+0x24/0x80 [ 3540.540676][T26570] slab_post_alloc_hook+0x53/0x2c0 [ 3540.545622][T26570] kmem_cache_alloc+0x175/0x320 [ 3540.550334][T26570] getname_flags+0xba/0x520 [ 3540.554651][T26570] __se_sys_newfstatat+0xe2/0x7b0 [ 3540.559515][T26570] __x64_sys_newfstatat+0x9b/0xb0 [ 3540.564374][T26570] [ 3540.566542][T26570] Memory state around the buggy address: [ 3540.572015][T26570] ffff8881125c8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3540.579914][T26570] ffff8881125c8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3540.587812][T26570] >ffff8881125c8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3540.595704][T26570] ^ [ 3540.602742][T26570] ffff8881125c8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3540.610640][T26570] ffff8881125c8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3540.618532][T26570] ================================================================== [ 3540.626432][T26570] Disabling lock debugging due to kernel taint [ 3540.918807][ T2196] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 3541.109809][ T2196] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3541.128785][ T2196] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3541.137722][ T2196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3541.148609][ T2196] usb 3-1: config 0 descriptor?? [ 3541.362879][T32170] usb 3-1: USB disconnect, device number 86 [ 3541.733706][T27372] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3541.838766][T32170] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3541.940275][T27372] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3541.954314][T27372] usb 1-1: USB disconnect, device number 87 [ 3541.960492][T27372] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 3542.019991][T32170] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3542.030084][T32170] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3542.039031][T32170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3542.047286][T32170] usb 3-1: config 0 descriptor?? [ 3543.263242][ T2196] usb 3-1: USB disconnect, device number 87