last executing test programs: 14m5.31556452s ago: executing program 1 (id=2256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r1) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4) 14m5.263818722s ago: executing program 1 (id=2257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) 14m5.255859092s ago: executing program 1 (id=2258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x1001, r1, 0x4}, 0x38) 14m5.224439273s ago: executing program 1 (id=2259): socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 14m5.091705957s ago: executing program 1 (id=2260): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m5.091572747s ago: executing program 1 (id=2261): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003040), 0x0, 0xc044) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x1a0}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80203, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m5.060903968s ago: executing program 32 (id=2261): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003040), 0x0, 0xc044) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x1a0}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x80203, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x9, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x2, 0x5, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.560092489s ago: executing program 5 (id=4983): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)=0x3f) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)=0xb7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x82}}, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x25, 0x0, @void}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 16.62930673s ago: executing program 5 (id=4985): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x881, 0x1a, "0062ba7d820700000d0000efffffffff086304"}) r5 = syz_open_pts(r4, 0x80) dup3(r5, r4, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b405000000611004d914737a1d3149000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000040)) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16.489261414s ago: executing program 3 (id=4987): syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0x80020, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902fcff000000ac0009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0xee01, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x1, r0}) setregid(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x4) truncate(&(0x7f0000000900)='./file1\x00', 0x9) 14.210931099s ago: executing program 5 (id=4990): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x881, 0x1a, "0062ba7d820700000d0000efffffffff086304"}) r5 = syz_open_pts(r4, 0x80) dup3(r5, r4, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b405000000611004d914737a1d3149000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000040)) 14.109149903s ago: executing program 0 (id=4991): r0 = syz_io_uring_setup(0x141c, &(0x7f00000003c0)={0x0, 0x42ba, 0x1, 0x101, 0x1ed}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 12.003282793s ago: executing program 5 (id=4992): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') userfaultfd(0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") rename(0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) unshare(0x2c020400) 11.986871713s ago: executing program 3 (id=4994): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000001c0)=0x3f) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000180)=0xb7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x82}}, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x25, 0x0, @void}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 11.737008172s ago: executing program 2 (id=4995): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000140)={0x20071026, r1}, &(0x7f00000002c0)={0x10, 0xe1bd, 0x3, 0x2, 0xfffffffe, 0x800}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x4000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001e015dd6b94395a44900000007000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000aaaaaae7e622a6ce09e17df332dde6cc6878c5aa86dd6001044a00183afffe880000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe80"], 0x0) r10 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f0000000000)='silent\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x100000000000000) write$uinput_user_dev(r9, &(0x7f0000001340)={'syz0\x00', {0x1, 0x7ff, 0x7}, 0x16, [0xd, 0x5, 0x4, 0x975a9b7, 0x4074, 0x8, 0xf, 0x0, 0x2126, 0xbc, 0x0, 0x3b, 0x6, 0xeb, 0x6, 0x7988, 0x80, 0xce, 0x9, 0x9b9, 0x2, 0x8, 0x8, 0x6, 0x5431, 0x0, 0x8, 0x2, 0x1, 0x7, 0x1, 0xf, 0xb, 0xfffffffe, 0xe, 0xb2, 0x9, 0xa, 0x6, 0x10, 0x3cb, 0x1, 0x2, 0xff, 0x8, 0xfffffffb, 0xf26, 0x1, 0x9, 0x6, 0x5, 0x68, 0x80000001, 0x9, 0x8, 0x9, 0x4aaf, 0x69, 0xffff2107, 0x81, 0x4ca1026c, 0x0, 0x40, 0xffff], [0x1000, 0x7ff, 0x8, 0x2, 0x7f, 0x5, 0x2400, 0x3, 0x28b, 0x6, 0x800, 0x8, 0x0, 0x0, 0x7, 0x4, 0x9, 0xc, 0x4, 0x2, 0x400, 0xe326, 0x8, 0x5, 0xb, 0x8, 0xb9d, 0x90af, 0x7f, 0xec07, 0x6, 0x0, 0x8, 0xfffffff1, 0x5, 0x0, 0x4, 0x7c9, 0xe, 0x390, 0x8, 0x9, 0x1, 0x1ff, 0x8, 0x5, 0x1, 0x3, 0x2, 0x4, 0x8, 0x0, 0x4f, 0x5, 0x5, 0x2400, 0x348c, 0x1, 0x553d7da0, 0xfffffda9, 0x200, 0xc00, 0xd70f, 0x4], [0x9, 0x5, 0x7, 0x8, 0x20, 0xf4, 0xfffeffff, 0x100, 0x9, 0x2, 0xa, 0x1, 0x2, 0x3, 0xff, 0x1, 0x1, 0x1, 0x4, 0x3, 0x10000, 0x0, 0xd, 0x3, 0x2, 0x2, 0x6, 0xfffffffd, 0x3, 0x1000, 0x4, 0x7e9b2b7f, 0x68, 0x80000000, 0x3, 0x2, 0x10, 0x8, 0x1, 0x1, 0x7fffffff, 0x7, 0xa5, 0xa, 0xd5b6, 0x8, 0x176, 0x8, 0xfffffff9, 0xffffffff, 0x12, 0x9, 0xc16, 0x4, 0x1, 0x6, 0xc4e0, 0x6, 0x101, 0xa22, 0x3, 0x7, 0x7, 0x49], [0x6518, 0x2, 0x2, 0x2, 0xcf16, 0x1, 0x8001, 0x401, 0x4, 0x1, 0x4, 0x1, 0x2, 0xc00000, 0xe7f8, 0x4, 0x5, 0x7, 0x0, 0x200, 0x1, 0x1, 0x400, 0x1, 0x2, 0xffff, 0xffff7fff, 0xff, 0x2, 0x7, 0x5, 0x7d7, 0xfffffff9, 0x2, 0x35, 0x0, 0x3, 0x0, 0x983, 0x4, 0x9222, 0x7ff, 0x4c12, 0x3ff, 0x0, 0x1, 0x400, 0x7, 0x0, 0x3a3, 0x58, 0x9, 0x5, 0x5, 0xffffffff, 0x100, 0x2, 0x2, 0x2, 0x2020, 0x6, 0xd4f, 0x2, 0x8]}, 0x45c) 10.484361583s ago: executing program 0 (id=4996): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x1) fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x1, 0x6, 0xb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 10.478411683s ago: executing program 3 (id=4997): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000140)={0x20071026, r1}, &(0x7f00000002c0)={0x10, 0xe1bd, 0x3, 0x2, 0xfffffffe, 0x800}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x4000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001e015dd6b94395a44900000007000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000aaaaaae7e622a6ce09e17df332dde6cc6878c5aa86dd6001044a00183afffe880000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe80"], 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r10 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r10, 0x0, &(0x7f0000000000)='silent\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x100000000000000) write$uinput_user_dev(r9, &(0x7f0000001340)={'syz0\x00', {0x1, 0x7ff, 0x7}, 0x16, [0xd, 0x5, 0x4, 0x975a9b7, 0x4074, 0x8, 0xf, 0x0, 0x2126, 0xbc, 0x0, 0x3b, 0x6, 0xeb, 0x6, 0x7988, 0x80, 0xce, 0x9, 0x9b9, 0x2, 0x8, 0x8, 0x6, 0x5431, 0x0, 0x8, 0x2, 0x1, 0x7, 0x1, 0xf, 0xb, 0xfffffffe, 0xe, 0xb2, 0x9, 0xa, 0x6, 0x10, 0x3cb, 0x1, 0x2, 0xff, 0x8, 0xfffffffb, 0xf26, 0x1, 0x9, 0x6, 0x5, 0x68, 0x80000001, 0x9, 0x8, 0x9, 0x4aaf, 0x69, 0xffff2107, 0x81, 0x4ca1026c, 0x0, 0x40, 0xffff], [0x1000, 0x7ff, 0x8, 0x2, 0x7f, 0x5, 0x2400, 0x3, 0x28b, 0x6, 0x800, 0x8, 0x0, 0x0, 0x7, 0x4, 0x9, 0xc, 0x4, 0x2, 0x400, 0xe326, 0x8, 0x5, 0xb, 0x8, 0xb9d, 0x90af, 0x7f, 0xec07, 0x6, 0x0, 0x8, 0xfffffff1, 0x5, 0x0, 0x4, 0x7c9, 0xe, 0x390, 0x8, 0x9, 0x1, 0x1ff, 0x8, 0x5, 0x1, 0x3, 0x2, 0x4, 0x8, 0x0, 0x4f, 0x5, 0x5, 0x2400, 0x348c, 0x1, 0x553d7da0, 0xfffffda9, 0x200, 0xc00, 0xd70f, 0x4], [0x9, 0x5, 0x7, 0x8, 0x20, 0xf4, 0xfffeffff, 0x100, 0x9, 0x2, 0xa, 0x1, 0x2, 0x3, 0xff, 0x1, 0x1, 0x1, 0x4, 0x3, 0x10000, 0x0, 0xd, 0x3, 0x2, 0x2, 0x6, 0xfffffffd, 0x3, 0x1000, 0x4, 0x7e9b2b7f, 0x68, 0x80000000, 0x3, 0x2, 0x10, 0x8, 0x1, 0x1, 0x7fffffff, 0x7, 0xa5, 0xa, 0xd5b6, 0x8, 0x176, 0x8, 0xfffffff9, 0xffffffff, 0x12, 0x9, 0xc16, 0x4, 0x1, 0x6, 0xc4e0, 0x6, 0x101, 0xa22, 0x3, 0x7, 0x7, 0x49], [0x6518, 0x2, 0x2, 0x2, 0xcf16, 0x1, 0x8001, 0x401, 0x4, 0x1, 0x4, 0x1, 0x2, 0xc00000, 0xe7f8, 0x4, 0x5, 0x7, 0x0, 0x200, 0x1, 0x1, 0x400, 0x1, 0x2, 0xffff, 0xffff7fff, 0xff, 0x2, 0x7, 0x5, 0x7d7, 0xfffffff9, 0x2, 0x35, 0x0, 0x3, 0x0, 0x983, 0x4, 0x9222, 0x7ff, 0x4c12, 0x3ff, 0x0, 0x1, 0x400, 0x7, 0x0, 0x3a3, 0x58, 0x9, 0x5, 0x5, 0xffffffff, 0x100, 0x2, 0x2, 0x2, 0x2020, 0x6, 0xd4f, 0x2, 0x8]}, 0x45c) 9.702901129s ago: executing program 4 (id=4998): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x3f) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000180)=0xb7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x82}}, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x0, @void}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 8.847799457s ago: executing program 2 (id=4999): r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f00000000000000b604000001ede0ff2500000017ffff17cc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) capset(&(0x7f0000000600)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000640)={0x9, 0xd0c8, 0x3, 0xcb, 0x24, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_read_part_table(0x5e4, &(0x7f0000000000)="$eJzs2z9olGcYAPDnLl4iOrg4OalDu7goQhdv0HB3VRTSq4HiVEGx0utygvSEg4AW9AYlN4ijSwjckj9TLjdkSkgg0C2EDCmBDJlKuhRCIV9J8qVNMpQ2SQPC7wff9/B+7/O8z/cM3/gFn7Rs/JokSSYikp7/Xt3fKhRvX+y7Wb4fkYmfImL2i+++2trZOrE7Mn+dejmtWE7XQx/PdN789mWutfT17599O93IpvsD6XV2uN1/LAPyvxrJz5x7+apaelvLP10s1VdfL8zfG10vlNt3G82xO7neR2nebHRvx1Pp+lnU4kUu4mFUohKPo/r3kX8cpf+H1srVzQul1sSTGxvFzrupa9tZY717SjaTJDni1Hv7f76v//NLgw+a9VtXxs+/v16bnCuvde3kVQ7xdQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPJG8jPnXr6qlt7W8k8XS/XV1wvz90bXC+X23UZz7E6u91GaN7sTTu/WPYtavIjv42FUohKPo/qvO2b/sf+H1srVzQul1sSTGxvFzrupa2le327BD91HG/iAg/2fXxp80KzfujJ+/v312uRcea1r55UrPcfaFgAAAAAAAAAAAAAAAAAAAPYpFG9f7LtZvh/RlT6ZOrV1311l0ng5jcvpf/BDH8903mQjYmn8x5+/mW780hMxmEQMnI4YiIizw+3+Ex6FQ/gzAAD//zn3mNo=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000002c0)={0xa0000013}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000000)=0xfffffffd, 0x4) 8.847047697s ago: executing program 3 (id=5000): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}}, 0x0, 0x4a}, 0x28) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_io_uring_setup(0x3af6, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000f000f00"}}}]}, 0x48}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') preadv(r2, 0x0, 0x0, 0x33, 0x0) syz_open_dev$mouse(&(0x7f0000000300), 0x7ffeffffffffffff, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x2, 0x2, 0x1) ioctl$TCFLSH(r3, 0x5608, 0x0) 6.63794304s ago: executing program 5 (id=5001): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r1, 0x0, 0x0, 0xfffff, 0x0, 0x0) ftruncate(r0, 0x8008974) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r2 = userfaultfd(0x801) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, 0x0, &(0x7f0000000040)) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) 6.63730855s ago: executing program 3 (id=5002): syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0x80020, 0x0, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902fcff000000ac000904000000"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0xee01, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x1, r0}) setregid(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x4) truncate(&(0x7f0000000900)='./file1\x00', 0x9) 6.636696s ago: executing program 4 (id=5003): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 6.565736453s ago: executing program 0 (id=5004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000500c00000000000000950000000000000018100000c802829e72d5ab27b9d269b65967de753ff28b6ccce45646b711b58a3a39307d596ab545f2c4f528d7bd5ba9f3", @ANYRES32, @ANYBLOB="000000000000000095000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r5, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 6.552250193s ago: executing program 2 (id=5005): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x881, 0x1a, "0062ba7d820700000d0000efffffffff086304"}) r5 = syz_open_pts(r4, 0x80) dup3(r5, r4, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b405000000611004d914737a1d3149000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.73022886s ago: executing program 4 (id=5006): r0 = syz_io_uring_setup(0x141c, &(0x7f00000003c0)={0x0, 0x42ba, 0x1, 0x101, 0x1ed}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 5.587005265s ago: executing program 0 (id=5007): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}}, 0x0, 0x4a}, 0x28) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_io_uring_setup(0x3af6, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000f000f00"}}}]}, 0x48}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') preadv(r3, 0x0, 0x0, 0x33, 0x0) syz_open_dev$mouse(&(0x7f0000000300), 0x7ffeffffffffffff, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x2, 0x2, 0x1) ioctl$TCFLSH(r4, 0x5608, 0x0) 5.586501085s ago: executing program 2 (id=5008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) ioctl$FIGETBSZ(r4, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000500c00000000000000950000000000000018100000c802829e72d5ab27b9d269b65967de753ff28b6ccce45646b711b58a3a39307d596ab545f2c4f528d7bd5ba9f3", @ANYRES32, @ANYBLOB="000000000000000095000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r5, 0xffffffffffffffff, 0x200000000000000) creat(&(0x7f0000000280)='./file0\x00', 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000008700)='./file0\x00', 0x0, 0x4000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x1b4, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2b}, @in=@multicast2, 0x0, 0xfffd, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x0, 0x1000080000}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}, @algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x60, "5871e474cce4b8a5b7f9de4eb9bd174e1d"}}]}, 0x1b4}}, 0x20004000) 5.489146888s ago: executing program 2 (id=5009): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902fcff000000ac0009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0xee01, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x1, r0}) setregid(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 5.458530889s ago: executing program 5 (id=5010): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fsopen(0x0, 0x1) fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x1, 0x6, 0xb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 5.393685031s ago: executing program 4 (id=5011): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat(0xffffffffffffff9c, 0x0, 0x14b442, 0x82) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400026e, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400400000fbdbdf250000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000005400128009000100766c616e0000000044000280400003800c00010001000000080000000c00010c00010002000000090000000c00010003000000100000000c00010003000000aa0f800014000300766c616e3000"/103], 0x88}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000780)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@dioread_lock}, {@discard}, {@orlov}, {@errors_remount}, {@nomblk_io_submit}, {@dioread_nolock}, {@barrier}]}, 0x4, 0x5b5, &(0x7f0000000e40)="$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") copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') 5.275088235s ago: executing program 4 (id=5012): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x881, 0x1a, "0062ba7d820700000d0000efffffffff086304"}) r5 = syz_open_pts(r4, 0x80) dup3(r5, r4, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b405000000611004d914737a1d3149000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.70295846s ago: executing program 0 (id=5013): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe47d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0xfffff, 0xffffffffffffffff) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000300)=0xfffffff7) socket(0x10, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) read$FUSE(r3, 0x0, 0x0) inotify_add_watch(r3, 0x0, 0x41000006) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYBLOB="00000000000000002c0012800900010062"], 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r4, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0xe80, 0x0) ioctl$RTC_IRQP_READ(r5, 0x40187014, &(0x7f0000000000)) ioctl$RTC_PIE_OFF(r5, 0x7006) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000131) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[], 0x3, 0x246, &(0x7f0000000440)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.70240946s ago: executing program 4 (id=5014): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x881, 0x1a, "0062ba7d820700000d0000efffffffff086304"}) r5 = syz_open_pts(r4, 0x80) dup3(r5, r4, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.02355ms ago: executing program 3 (id=5015): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) fsopen(0x0, 0x1) fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x783, &(0x7f0000001f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x1, 0x6, 0xb}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) 318.06µs ago: executing program 0 (id=5016): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80801) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9d3, 0x100, 0x1000000, 0x35f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x80, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd289, 0x4800, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x1, 0xfffffffd, 0x0, r0}}], 0x1, &(0x7f0000001000)={0x2e, 0xa, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0xbcc, 0x0, 0x0}}, 0x0) 0s ago: executing program 2 (id=5017): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x881, 0x1a, "0062ba7d820700000d0000efffffffff086304"}) r5 = syz_open_pts(r4, 0x80) dup3(r5, r4, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000000101010200000000000000000a00ff7e140019800c000200"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b405000000611004d914737a1d3149000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): terface, different from the descriptor's value: 0 [ 848.304477][T14726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 848.313983][T14726] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.337927][ T647] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 848.351679][ T647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.360069][ T647] usb 4-1: Product: syz [ 848.364306][ T647] usb 4-1: Manufacturer: syz [ 848.374404][ T647] usb 4-1: SerialNumber: syz [ 848.379691][ T647] r8152-cfgselector 4-1: config 0 descriptor?? [ 848.883962][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 848.908931][T14740] loop2: detected capacity change from 0 to 256 [ 848.925363][T14740] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 848.991771][T14712] bridge0: port 3(vlan2) entered blocking state [ 848.998146][T14712] bridge0: port 3(vlan2) entered disabled state [ 849.046138][T14742] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2048) [ 849.053934][T14742] FAT-fs (loop3): Filesystem has been set read-only [ 849.067996][ T647] r8152-cfgselector 4-1: Unknown version 0x0000 [ 849.076406][ T647] r8152-cfgselector 4-1: bad CDC descriptors [ 849.084867][ T647] r8152-cfgselector 4-1: Unknown version 0x0000 [ 849.094845][ T647] r8152-cfgselector 4-1: USB disconnect, device number 24 [ 849.245091][ T1263] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 849.259820][T14745] loop4: detected capacity change from 0 to 1024 [ 849.266974][T14745] EXT4-fs: quotafile must be on filesystem root [ 849.334361][T14747] loop4: detected capacity change from 0 to 256 [ 849.341824][T14747] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 849.435055][ T1263] usb 3-1: Using ep0 maxpacket: 16 [ 849.441390][ T1263] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 849.450478][ T1263] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 849.458604][ T1263] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 849.468944][ T1263] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 849.478118][ T1263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.486157][ T1263] usb 3-1: Product: syz [ 849.490446][ T1263] usb 3-1: Manufacturer: syz [ 849.495082][ T1263] usb 3-1: SerialNumber: syz [ 849.500180][ T1263] r8152-cfgselector 3-1: config 0 descriptor?? [ 849.625274][ T9117] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 850.008783][T14753] loop5: detected capacity change from 0 to 256 [ 850.071765][T14753] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 850.178351][T14740] bridge0: port 3(vlan2) entered blocking state [ 850.184710][T14740] bridge0: port 3(vlan2) entered disabled state [ 850.209738][ T9117] usb 5-1: Using ep0 maxpacket: 16 [ 850.216276][ T9117] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 850.224715][ T9117] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 850.380219][T14740] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2048) [ 850.388204][T14740] FAT-fs (loop2): Filesystem has been set read-only [ 850.622240][T14760] loop0: detected capacity change from 0 to 256 [ 850.631007][T14760] FAT-fs (loop0): Unrecognized mount option "dFscard" or missing value [ 851.097710][ T9117] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 851.110218][ T1263] r8152-cfgselector 3-1: Unknown version 0x0000 [ 851.196750][ T314] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 851.224433][ T1263] r8152-cfgselector 3-1: bad CDC descriptors [ 851.231429][ T9117] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 851.311583][ T9117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.319869][ T1263] r8152-cfgselector 3-1: Unknown version 0x0000 [ 851.326306][ T9117] usb 5-1: Product: syz [ 851.330472][ T9117] usb 5-1: Manufacturer: syz [ 851.376567][ T1263] r8152-cfgselector 3-1: USB disconnect, device number 32 [ 851.389529][ T9117] usb 5-1: SerialNumber: syz [ 851.407758][ T9117] r8152-cfgselector 5-1: config 0 descriptor?? [ 852.146162][T14777] loop5: detected capacity change from 0 to 1024 [ 852.152966][T14777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 852.159963][T14777] EXT4-fs: Ignoring removed bh option [ 852.168957][T14747] bridge0: port 3(vlan2) entered blocking state [ 852.185120][T14747] bridge0: port 3(vlan2) entered disabled state [ 852.219177][T14783] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 852.231174][T14783] FAT-fs (loop4): Filesystem has been set read-only [ 852.251154][T14777] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 852.260153][ T9117] r8152-cfgselector 5-1: Unknown version 0x0000 [ 852.327124][T14769] __vm_enough_memory: pid: 14769, comm: syz.3.4560, no enough memory for the allocation [ 852.335069][ T9117] r8152-cfgselector 5-1: bad CDC descriptors [ 852.360042][ T9117] r8152-cfgselector 5-1: Unknown version 0x0000 [ 852.545223][T14794] loop2: detected capacity change from 0 to 512 [ 852.610367][T14789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 852.695977][ T9117] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 852.748172][T14794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 852.759713][T14794] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.752154][T14793] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4563'. [ 853.806274][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 853.812586][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 853.992330][T14800] loop2: detected capacity change from 0 to 1024 [ 853.999146][T14800] EXT4-fs: quotafile must be on filesystem root [ 854.046816][ T792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 854.152758][T14810] loop0: detected capacity change from 0 to 512 [ 854.210189][T14810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 854.219827][T14810] ext4 filesystem being mounted at /369/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 854.234802][T14810] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 855.537686][T14820] loop5: detected capacity change from 0 to 256 [ 855.583012][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 855.613811][T14820] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 855.691835][T14824] loop4: detected capacity change from 0 to 256 [ 855.707021][T14824] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 855.784798][T14826] loop0: detected capacity change from 0 to 512 [ 855.822440][T14826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 855.831721][T14826] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.185074][T14771] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 856.286517][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 856.454690][ T8757] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 856.568557][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 856.656701][T14771] usb 6-1: Using ep0 maxpacket: 16 [ 856.666667][T14771] usb 6-1: config index 0 descriptor too short (expected 65532, got 18) [ 856.675546][T14771] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 856.675617][ T8757] usb 5-1: Using ep0 maxpacket: 16 [ 856.689673][T14771] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 856.692485][ T8757] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 856.726897][T14840] loop3: detected capacity change from 0 to 512 [ 856.737616][T14771] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 856.747346][T14771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.752449][ T8757] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 856.771241][ T8757] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 856.793652][ T8757] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 856.806404][ T8757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.845686][T14846] loop0: detected capacity change from 0 to 512 [ 856.888424][T14840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 856.897543][T14840] ext4 filesystem being mounted at /289/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.111878][T14771] usb 6-1: Product: syz [ 857.117195][T14771] usb 6-1: Manufacturer: syz [ 857.123884][T14771] usb 6-1: SerialNumber: syz [ 857.171719][T14771] r8152-cfgselector 6-1: config 0 descriptor?? [ 857.180230][T14840] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 857.212240][ T8757] usb 5-1: Product: syz [ 857.216705][ T8757] usb 5-1: Manufacturer: syz [ 857.221934][T14846] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 857.230928][T14846] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.249628][ T8757] usb 5-1: SerialNumber: syz [ 857.257753][ T8757] r8152-cfgselector 5-1: config 0 descriptor?? [ 857.272626][T14850] loop2: detected capacity change from 0 to 1024 [ 857.279519][T14850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 857.286789][T14850] EXT4-fs: Ignoring removed bh option [ 857.296450][T14850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 857.442085][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 857.460521][T14854] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4579'. [ 857.810750][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 857.813179][T14820] bridge0: port 3(vlan0) entered blocking state [ 858.458127][T14820] bridge0: port 3(vlan0) entered disabled state [ 858.492896][ T8757] r8152-cfgselector 5-1: Unknown version 0x0000 [ 858.499302][ T8757] r8152-cfgselector 5-1: bad CDC descriptors [ 858.505815][ T8757] r8152-cfgselector 5-1: Unknown version 0x0000 [ 858.513930][ T8757] r8152-cfgselector 5-1: USB disconnect, device number 26 [ 858.966662][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 859.100123][T14771] r8152-cfgselector 6-1: Unknown version 0x0000 [ 859.108599][T14771] r8152-cfgselector 6-1: bad CDC descriptors [ 859.115137][T14771] r8152-cfgselector 6-1: Unknown version 0x0000 [ 859.125102][T14771] r8152-cfgselector 6-1: USB disconnect, device number 76 [ 859.174437][T14870] loop5: detected capacity change from 0 to 1024 [ 859.181217][T14870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 859.187992][T14870] EXT4-fs: Ignoring removed bh option [ 859.230482][T14870] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 860.331791][T14880] loop0: detected capacity change from 0 to 1024 [ 860.338665][T14880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 860.345355][T14880] EXT4-fs: Ignoring removed bh option [ 860.507285][T14883] loop2: detected capacity change from 0 to 512 [ 860.520055][T14880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 860.589467][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 860.665417][T14883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 861.638729][T14883] ext4 filesystem being mounted at /274/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.650158][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 862.399565][T14907] loop0: detected capacity change from 0 to 512 [ 862.425418][T14910] loop5: detected capacity change from 0 to 512 [ 862.559815][T14908] loop3: detected capacity change from 0 to 256 [ 862.613077][T14910] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 862.622560][T14910] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.635514][T14907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 862.644479][T14907] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.685368][T14908] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 862.718236][T14917] loop4: detected capacity change from 0 to 256 [ 862.794790][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 862.807726][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 862.814368][T14917] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 862.928324][T14920] loop0: detected capacity change from 0 to 1024 [ 862.935062][T14920] EXT4-fs: Ignoring removed nomblk_io_submit option [ 862.941785][T14920] EXT4-fs: Ignoring removed bh option [ 863.033880][T14926] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 863.048941][T14926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 863.195387][ T8757] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 863.214393][T14920] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 863.345028][ T1159] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 863.387513][T14927] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4594'. [ 863.455125][ T8757] usb 4-1: Using ep0 maxpacket: 16 [ 863.462769][ T8757] usb 4-1: config index 0 descriptor too short (expected 65532, got 18) [ 863.479449][ T8757] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 863.500926][ T8757] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 863.518203][ T8757] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 863.535026][ T1159] usb 5-1: Using ep0 maxpacket: 16 [ 863.535271][ T8757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.541294][ T1159] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 863.560797][ T8757] usb 4-1: Product: syz [ 863.570191][ T8757] usb 4-1: Manufacturer: syz [ 863.578568][ T8757] usb 4-1: SerialNumber: syz [ 863.583301][ T1159] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 863.588945][ T8757] r8152-cfgselector 4-1: config 0 descriptor?? [ 863.606200][ T1159] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 863.643633][ T1159] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 863.662087][ T1159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.678374][ T1159] usb 5-1: Product: syz [ 863.687558][ T1159] usb 5-1: Manufacturer: syz [ 863.715033][ T1159] usb 5-1: SerialNumber: syz [ 863.734771][ T1159] r8152-cfgselector 5-1: config 0 descriptor?? [ 863.882523][T14931] loop5: detected capacity change from 0 to 512 [ 864.015059][ T8757] r8152-cfgselector 4-1: Unknown version 0x0000 [ 864.037831][ T8757] r8152-cfgselector 4-1: bad CDC descriptors [ 864.086675][T14931] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 864.095962][T14931] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.141372][ T8757] r8152-cfgselector 4-1: Unknown version 0x0000 [ 864.151338][ T8757] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 864.174822][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 864.180793][T14917] bridge0: port 3(vlan2) entered blocking state [ 864.191266][T14917] bridge0: port 3(vlan2) entered disabled state [ 864.223951][T14936] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 864.254168][T14936] FAT-fs (loop4): Filesystem has been set read-only [ 864.300808][ T1159] r8152-cfgselector 5-1: Unknown version 0x0000 [ 864.307574][ T1159] r8152-cfgselector 5-1: bad CDC descriptors [ 864.365346][ T1159] r8152-cfgselector 5-1: Unknown version 0x0000 [ 864.379114][ T28] audit: type=1400 audit(1780456774.925:352): avc: denied { write } for pid=14937 comm="syz.2.4598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 864.576558][ T1159] r8152-cfgselector 5-1: USB disconnect, device number 27 [ 864.607218][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 864.642020][T14944] loop5: detected capacity change from 0 to 256 [ 864.662605][T14944] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 864.736258][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 865.140945][T14956] loop4: detected capacity change from 0 to 256 [ 865.148454][T14956] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 865.163483][T14956] bridge0: port 3(vlan2) entered blocking state [ 865.169917][T14956] bridge0: port 3(vlan2) entered disabled state [ 865.176412][ T9117] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 865.214477][T14958] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 865.240138][T14958] FAT-fs (loop4): Filesystem has been set read-only [ 865.365024][ T9117] usb 6-1: Using ep0 maxpacket: 16 [ 865.372724][ T9117] usb 6-1: config index 0 descriptor too short (expected 65532, got 18) [ 865.389336][ T9117] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 865.406159][ T9117] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 865.425812][ T9117] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 865.443494][ T9117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.459748][ T9117] usb 6-1: Product: syz [ 865.469108][ T9117] usb 6-1: Manufacturer: syz [ 865.478045][ T9117] usb 6-1: SerialNumber: syz [ 865.488711][ T9117] r8152-cfgselector 6-1: config 0 descriptor?? [ 865.807172][T14967] loop0: detected capacity change from 0 to 1024 [ 865.842289][T14967] EXT4-fs: quotafile must be on filesystem root [ 865.909422][T14944] bridge0: port 3(vlan0) entered blocking state [ 865.936921][T14944] bridge0: port 3(vlan0) entered disabled state [ 866.112322][T14973] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2048) [ 866.144488][T14973] FAT-fs (loop5): Filesystem has been set read-only [ 866.211782][ T9117] r8152-cfgselector 6-1: Unknown version 0x0000 [ 866.220850][ T9117] r8152-cfgselector 6-1: bad CDC descriptors [ 866.233455][ T9117] r8152-cfgselector 6-1: Unknown version 0x0000 [ 866.253240][ T9117] r8152-cfgselector 6-1: USB disconnect, device number 77 [ 866.707369][T14982] loop4: detected capacity change from 0 to 256 [ 866.735315][T14982] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 866.809619][T14984] FAT-fs (loop3): Unrecognized mount option "dFscard" or missing value [ 867.007743][ T792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 867.072220][T14986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 867.078932][T14986] EXT4-fs: Ignoring removed bh option [ 867.123880][T14986] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 867.616830][T14997] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4611'. [ 867.684254][ T1263] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 867.883762][T14999] set_capacity_and_notify: 2 callbacks suppressed [ 867.883793][T14999] loop2: detected capacity change from 0 to 1024 [ 867.897066][T14999] EXT4-fs: quotafile must be on filesystem root [ 868.093424][T15001] loop2: detected capacity change from 0 to 256 [ 868.133878][T15001] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 868.323397][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 868.345203][ T1263] usb 5-1: Using ep0 maxpacket: 16 [ 868.359844][ T1263] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 868.368483][ T1263] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 868.377375][ T1263] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 868.396548][ T1263] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 868.415099][ T1263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.423538][ T1263] usb 5-1: Product: syz [ 868.428740][ T1263] usb 5-1: Manufacturer: syz [ 868.482921][T15008] loop0: detected capacity change from 0 to 512 [ 868.505070][ T8757] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 868.509315][ T1263] usb 5-1: SerialNumber: syz [ 868.532032][T15008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 868.541080][T15008] ext4 filesystem being mounted at /379/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.556056][T15008] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 868.593221][ T1263] r8152-cfgselector 5-1: config 0 descriptor?? [ 868.685052][ T8757] usb 3-1: Using ep0 maxpacket: 16 [ 868.694385][ T8757] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 868.703181][ T8757] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 868.711440][ T8757] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 868.741326][ T8757] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 868.755237][ T8757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.763448][ T8757] usb 3-1: Product: syz [ 868.767936][ T8757] usb 3-1: Manufacturer: syz [ 868.772701][ T8757] usb 3-1: SerialNumber: syz [ 868.781736][ T8757] r8152-cfgselector 3-1: config 0 descriptor?? [ 869.028283][ T1263] r8152-cfgselector 5-1: Unknown version 0x0000 [ 869.046307][ T1263] r8152-cfgselector 5-1: bad CDC descriptors [ 869.064139][ T1263] r8152-cfgselector 5-1: Unknown version 0x0000 [ 869.085132][ T1263] r8152-cfgselector 5-1: USB disconnect, device number 28 [ 869.196254][T15001] bridge0: port 3(vlan2) entered blocking state [ 869.202567][T15001] bridge0: port 3(vlan2) entered disabled state [ 869.245991][T15015] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2048) [ 869.263149][T15015] FAT-fs (loop2): Filesystem has been set read-only [ 869.540574][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 869.595782][ T8757] r8152-cfgselector 3-1: Unknown version 0x0000 [ 869.604749][ T8757] r8152-cfgselector 3-1: bad CDC descriptors [ 869.637544][ T8757] r8152-cfgselector 3-1: Unknown version 0x0000 [ 869.679994][ T8757] r8152-cfgselector 3-1: USB disconnect, device number 33 [ 870.596819][T15046] loop2: detected capacity change from 0 to 256 [ 870.606683][T15046] FAT-fs (loop2): Unrecognized mount option "dFscard" or missing value [ 870.677941][ T792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 870.762636][T15048] loop4: detected capacity change from 0 to 1024 [ 870.769431][T15048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 870.776118][T15048] EXT4-fs: Ignoring removed bh option [ 870.852609][T15048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 870.928775][T15058] loop3: detected capacity change from 0 to 256 [ 870.982705][T15058] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 871.040758][T15063] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4627'. [ 872.407154][ T9031] EXT4-fs (loop4): unmounting filesystem. [ 872.715192][ T323] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 873.041193][T15080] loop4: detected capacity change from 0 to 2048 [ 873.164383][T15080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 873.201772][T15080] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 873.216651][T15080] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 873.229079][T15080] EXT4-fs (loop4): This should not happen!! Data will be lost [ 873.229079][T15080] [ 873.238841][T15080] EXT4-fs (loop4): Total free blocks count 0 [ 873.244861][T15080] EXT4-fs (loop4): Free/Dirty block details [ 873.250827][T15080] EXT4-fs (loop4): free_blocks=2415919504 [ 873.256864][T15080] EXT4-fs (loop4): dirty_blocks=48 [ 873.262101][T15080] EXT4-fs (loop4): Block reservation details [ 873.268172][T15080] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 873.455542][T15085] loop5: detected capacity change from 0 to 1024 [ 873.462258][T15085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 873.468923][T15085] EXT4-fs: Ignoring removed bh option [ 874.098936][T15085] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 874.123860][T15089] mmap: syz.3.4637 (15089) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 874.340286][T15095] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4636'. [ 876.096718][T15099] loop2: detected capacity change from 0 to 512 [ 876.287464][T14069] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 876.341439][T15099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 876.350612][T15099] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.382326][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 876.561034][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 876.622888][T15112] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 876.632416][T15112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 876.700240][T15116] loop2: detected capacity change from 0 to 1024 [ 876.707024][T15116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 876.713645][T15116] EXT4-fs: Ignoring removed bh option [ 876.787978][T15116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 877.003812][T15122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4643'. [ 877.013256][T15122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4643'. [ 877.822363][T15124] loop4: detected capacity change from 0 to 256 [ 878.017737][T15124] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 878.047639][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 878.086578][T15128] loop2: detected capacity change from 0 to 1024 [ 878.093429][T15128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 878.100120][T15128] EXT4-fs: Ignoring removed bh option [ 878.165966][T15128] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 878.221419][T15135] loop0: detected capacity change from 0 to 512 [ 878.261525][T15136] loop3: detected capacity change from 0 to 512 [ 878.325087][ T323] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 878.398258][T15135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 878.515369][ T323] usb 5-1: Using ep0 maxpacket: 16 [ 878.523529][ T323] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 878.588749][T15135] ext4 filesystem being mounted at /383/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.602293][ T323] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 878.616555][T15136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 878.625933][ T323] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 878.693191][ T323] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 878.746244][T15136] ext4 filesystem being mounted at /304/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.769639][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.990336][ T323] usb 5-1: Product: syz [ 878.994536][ T323] usb 5-1: Manufacturer: syz [ 879.022389][ T323] usb 5-1: SerialNumber: syz [ 879.050968][ T323] r8152-cfgselector 5-1: config 0 descriptor?? [ 879.099237][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 879.496503][T15124] bridge0: port 3(vlan2) entered blocking state [ 879.507631][T15124] bridge0: port 3(vlan2) entered disabled state [ 879.587182][ T323] r8152-cfgselector 5-1: Unknown version 0x0000 [ 879.593586][ T323] r8152-cfgselector 5-1: bad CDC descriptors [ 879.619768][ T323] r8152-cfgselector 5-1: Unknown version 0x0000 [ 879.646943][ T323] r8152-cfgselector 5-1: USB disconnect, device number 29 [ 880.003955][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 880.037675][T15153] loop5: detected capacity change from 0 to 512 [ 880.065087][T15153] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 880.088449][T15153] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 880.416260][T15153] EXT4-fs (loop5): 1 truncate cleaned up [ 880.421942][T15153] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 882.901629][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 882.997279][T15173] loop5: detected capacity change from 0 to 512 [ 883.016061][T15175] loop4: detected capacity change from 0 to 1024 [ 883.022830][T15175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 883.030099][T15175] EXT4-fs: Ignoring removed bh option [ 883.088148][T15173] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 883.098015][T15175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 883.157479][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 883.171600][T15173] EXT4-fs (loop5): 1 truncate cleaned up [ 883.194620][T15173] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 883.272425][T15188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4659'. [ 883.281573][T15188] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4659'. [ 885.247929][T15192] loop0: detected capacity change from 0 to 2048 [ 885.318303][ T9031] EXT4-fs (loop4): unmounting filesystem. [ 885.329303][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 885.409036][T15192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 885.444102][T15192] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 885.459342][T15192] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 885.471739][T15192] EXT4-fs (loop0): This should not happen!! Data will be lost [ 885.471739][T15192] [ 885.481512][T15192] EXT4-fs (loop0): Total free blocks count 0 [ 885.487532][T15192] EXT4-fs (loop0): Free/Dirty block details [ 885.493459][T15192] EXT4-fs (loop0): free_blocks=2415919504 [ 885.499223][T15192] EXT4-fs (loop0): dirty_blocks=48 [ 885.504372][T15192] EXT4-fs (loop0): Block reservation details [ 885.510584][T15192] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 886.231205][T15197] loop4: detected capacity change from 0 to 256 [ 886.325255][T15197] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 886.613692][T15206] loop2: detected capacity change from 0 to 256 [ 886.641016][T15206] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 886.714953][T14050] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 886.925055][ T19] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 887.016147][ T1159] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 887.345054][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 887.351423][ T19] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 887.365052][ T19] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 887.373346][ T19] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 887.388602][ T19] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 887.397904][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.406210][ T19] usb 5-1: Product: syz [ 887.410523][ T19] usb 5-1: Manufacturer: syz [ 887.420075][ T19] usb 5-1: SerialNumber: syz [ 887.432022][T15219] loop3: detected capacity change from 0 to 512 [ 887.438607][ T1159] usb 3-1: Using ep0 maxpacket: 16 [ 887.445687][ T1159] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 887.454368][ T19] r8152-cfgselector 5-1: config 0 descriptor?? [ 887.465673][T15219] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 887.476818][ T1159] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 887.485279][ T1159] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 887.499166][ T1159] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 887.512308][T15219] EXT4-fs (loop3): 1 truncate cleaned up [ 887.520118][ T1159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.528500][T15219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 887.541540][ T1159] usb 3-1: Product: syz [ 887.558052][ T1159] usb 3-1: Manufacturer: syz [ 887.564816][ T1159] usb 3-1: SerialNumber: syz [ 887.655503][ T1159] r8152-cfgselector 3-1: config 0 descriptor?? [ 888.810189][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 888.823460][T15206] bridge0: port 3(vlan2) entered blocking state [ 888.845606][T15206] bridge0: port 3(vlan2) entered disabled state [ 888.963604][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 888.970461][ T19] r8152-cfgselector 5-1: bad CDC descriptors [ 888.977315][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 888.993928][ T19] r8152-cfgselector 5-1: USB disconnect, device number 30 [ 889.033389][ T1159] r8152-cfgselector 3-1: Unknown version 0x0000 [ 889.050275][ T1159] r8152-cfgselector 3-1: bad CDC descriptors [ 889.056285][T15233] loop3: detected capacity change from 0 to 1024 [ 889.056594][T15233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 889.069520][T15233] EXT4-fs: Ignoring removed bh option [ 889.086260][ T1159] r8152-cfgselector 3-1: Unknown version 0x0000 [ 889.096472][ T1159] r8152-cfgselector 3-1: USB disconnect, device number 34 [ 889.104446][T15233] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 889.293650][T15239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4672'. [ 889.302827][T15239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4672'. [ 890.365343][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 892.416652][T15246] __vm_enough_memory: pid: 15246, comm: syz.2.4676, no enough memory for the allocation [ 892.731641][T15254] loop3: detected capacity change from 0 to 1024 [ 892.738380][T15254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 892.745088][T15254] EXT4-fs: Ignoring removed bh option [ 892.886654][T15254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 893.091495][T15265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4677'. [ 893.100585][T15265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4677'. [ 894.398194][T15273] loop0: detected capacity change from 0 to 256 [ 894.432636][T15273] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 896.352765][T15285] loop0: detected capacity change from 0 to 256 [ 896.362994][T15287] loop2: detected capacity change from 0 to 1024 [ 896.370293][T15287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 896.377135][T15287] EXT4-fs: Ignoring removed bh option [ 896.400115][T15287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 896.448511][T15285] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 896.507227][T15292] loop4: detected capacity change from 0 to 256 [ 896.568477][T15295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4687'. [ 896.577512][T15295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4687'. [ 896.613521][T15292] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 896.785074][ T401] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 896.965189][ T1263] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 896.995108][ T401] usb 1-1: Using ep0 maxpacket: 16 [ 897.002055][ T401] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 897.027641][ T401] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 897.055009][ T401] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 897.086647][ T401] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 897.116732][ T401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.125062][ T401] usb 1-1: Product: syz [ 897.129525][ T401] usb 1-1: Manufacturer: syz [ 897.134276][ T401] usb 1-1: SerialNumber: syz [ 897.155043][ T1263] usb 5-1: Using ep0 maxpacket: 16 [ 897.159411][ T401] r8152-cfgselector 1-1: config 0 descriptor?? [ 897.167995][ T1263] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 897.329056][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 897.547532][ T1263] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 897.555694][ T1263] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 897.556478][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 897.577998][T15285] bridge0: port 3(vlan0) entered blocking state [ 897.586288][T15285] bridge0: port 3(vlan0) entered disabled state [ 897.595183][ T1263] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 897.617400][ T1263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.626001][ T1263] usb 5-1: Product: syz [ 897.630169][ T1263] usb 5-1: Manufacturer: syz [ 897.634781][ T1263] usb 5-1: SerialNumber: syz [ 897.677263][T15304] loop2: detected capacity change from 0 to 256 [ 897.687192][ T1263] r8152-cfgselector 5-1: config 0 descriptor?? [ 897.703140][T15304] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 897.834874][ T401] r8152-cfgselector 1-1: Unknown version 0x0000 [ 897.835904][ T401] r8152-cfgselector 1-1: bad CDC descriptors [ 897.839763][ T401] r8152-cfgselector 1-1: Unknown version 0x0000 [ 897.846438][ T401] r8152-cfgselector 1-1: USB disconnect, device number 23 [ 899.313572][T15313] loop5: detected capacity change from 0 to 512 [ 899.392299][T15293] bridge0: port 3(vlan2) entered blocking state [ 899.498638][T15292] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 899.500395][T15293] bridge0: port 3(vlan2) entered disabled state [ 899.510900][T15292] FAT-fs (loop4): Filesystem has been set read-only [ 899.520680][T15313] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 899.530346][T15313] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.582412][ T1263] r8152-cfgselector 5-1: Unknown version 0x0000 [ 899.593072][ T1263] r8152-cfgselector 5-1: bad CDC descriptors [ 899.605038][ T1263] r8152-cfgselector 5-1: Unknown version 0x0000 [ 899.605172][T15323] loop3: detected capacity change from 0 to 512 [ 899.621684][ T1263] r8152-cfgselector 5-1: USB disconnect, device number 31 [ 899.668863][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 899.690130][T15323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 899.728840][T15327] loop0: detected capacity change from 0 to 256 [ 899.748039][T15329] loop5: detected capacity change from 0 to 1024 [ 899.748368][T15323] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.754824][T15329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 899.771527][T15329] EXT4-fs: Ignoring removed bh option [ 899.786506][T15327] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 899.804961][T15329] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 900.018687][T15333] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4696'. [ 900.027811][T15333] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4696'. [ 900.385116][ T401] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 900.915537][ T401] usb 1-1: Using ep0 maxpacket: 16 [ 900.923830][ T401] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 900.935043][ T401] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 900.943412][ T401] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 900.957946][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 900.960557][ T401] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 901.005144][ T401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.014781][ T401] usb 1-1: Product: syz [ 901.047606][ T401] usb 1-1: Manufacturer: syz [ 901.052460][ T401] usb 1-1: SerialNumber: syz [ 901.175543][ T401] r8152-cfgselector 1-1: config 0 descriptor?? [ 902.028800][T15347] loop5: detected capacity change from 0 to 2048 [ 903.146696][T15353] loop4: detected capacity change from 0 to 1024 [ 903.153453][T15353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 903.160108][T15353] EXT4-fs: Ignoring removed bh option [ 903.300526][T15347] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 903.338134][T15347] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 903.353492][T15347] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 903.366089][T15347] EXT4-fs (loop5): This should not happen!! Data will be lost [ 903.366089][T15347] [ 903.375781][T15347] EXT4-fs (loop5): Total free blocks count 0 [ 903.381807][T15347] EXT4-fs (loop5): Free/Dirty block details [ 903.387774][T15347] EXT4-fs (loop5): free_blocks=2415919504 [ 903.393516][T15347] EXT4-fs (loop5): dirty_blocks=48 [ 903.398665][T15347] EXT4-fs (loop5): Block reservation details [ 903.404669][T15347] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 903.459064][ T401] r8152-cfgselector 1-1: Unknown version 0x0000 [ 903.823417][T15353] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 904.019393][T15361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4701'. [ 904.028694][T15361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4701'. [ 904.706512][ T9031] EXT4-fs (loop4): unmounting filesystem. [ 904.713273][ T401] r8152-cfgselector 1-1: Unknown version 0x0000 [ 904.719738][T15363] loop0: detected capacity change from 0 to 256 [ 904.725102][ T401] r8152-cfgselector 1-1: bad CDC descriptors [ 904.735171][ T401] r8152-cfgselector 1-1: Unknown version 0x0000 [ 904.760229][ T401] r8152-cfgselector 1-1: USB disconnect, device number 24 [ 904.763002][T15363] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 904.919056][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 905.078761][T14057] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 905.143573][T15373] loop3: detected capacity change from 0 to 256 [ 905.150329][T15373] FAT-fs (loop3): Unrecognized mount option "dFscard" or missing value [ 905.188614][T15372] loop2: detected capacity change from 0 to 256 [ 905.201061][ T792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 905.233311][T15372] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 905.601781][T10039] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 905.675735][T15379] loop0: detected capacity change from 0 to 256 [ 905.710794][T15379] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 905.753867][T15379] bridge0: port 3(vlan0) entered blocking state [ 905.761762][T15379] bridge0: port 3(vlan0) entered disabled state [ 905.865233][T15382] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2048) [ 905.872829][T15382] FAT-fs (loop0): Filesystem has been set read-only [ 905.913333][T10039] usb 3-1: Using ep0 maxpacket: 16 [ 905.926125][T10039] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 905.944793][T10039] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 905.953437][T10039] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 905.976410][T10039] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 905.989131][T10039] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.061040][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 906.167919][T15386] loop5: detected capacity change from 0 to 512 [ 906.228837][T10039] usb 3-1: Product: syz [ 906.233042][T10039] usb 3-1: Manufacturer: syz [ 906.237732][T10039] usb 3-1: SerialNumber: syz [ 906.239495][T15386] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 906.246452][T10039] r8152-cfgselector 3-1: config 0 descriptor?? [ 906.266266][T15386] EXT4-fs (loop5): 1 truncate cleaned up [ 906.272812][T15386] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 906.305646][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 906.465863][T15372] bridge0: port 3(vlan0) entered blocking state [ 906.472170][T15372] bridge0: port 3(vlan0) entered disabled state [ 906.517998][T10039] r8152-cfgselector 3-1: Unknown version 0x0000 [ 906.527444][T10039] r8152-cfgselector 3-1: Unknown version 0x0000 [ 906.537936][T10039] r8152-cfgselector 3-1: bad CDC descriptors [ 906.551210][T10039] r8152-cfgselector 3-1: Unknown version 0x0000 [ 906.567775][T10039] r8152-cfgselector 3-1: USB disconnect, device number 35 [ 906.590384][T15397] loop0: detected capacity change from 0 to 512 [ 906.608910][T15397] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 906.658919][T15397] EXT4-fs (loop0): 1 truncate cleaned up [ 906.664646][T15397] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 906.737929][T15398] loop5: detected capacity change from 0 to 512 [ 908.586161][T15398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 908.595260][T15398] ext4 filesystem being mounted at /491/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.661018][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 908.767615][T15398] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 908.778327][T15412] loop3: detected capacity change from 0 to 1024 [ 908.785121][T15412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 908.791754][T15412] EXT4-fs: Ignoring removed bh option [ 910.998600][T15412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 911.123884][T15431] loop2: detected capacity change from 0 to 1024 [ 911.130805][T15431] EXT4-fs: quotafile must be on filesystem root [ 911.178122][ T792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 911.192544][T15432] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4714'. [ 911.201708][T15432] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4714'. [ 911.708168][T15437] loop2: detected capacity change from 0 to 512 [ 911.934531][T15437] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 911.943747][T15437] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.320135][T15444] loop0: detected capacity change from 0 to 512 [ 912.338822][T15444] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 912.376298][T15444] EXT4-fs (loop0): 1 truncate cleaned up [ 912.385587][T15444] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 912.492219][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 915.120658][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 915.127996][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 915.225486][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 915.285072][T15457] loop2: detected capacity change from 0 to 1024 [ 915.291887][T15457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 915.291924][T15457] EXT4-fs: Ignoring removed bh option [ 916.601480][T15467] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 917.511719][T15457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 917.713997][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4727'. [ 917.723165][T15480] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4727'. [ 918.586655][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 918.629980][T15483] loop3: detected capacity change from 0 to 512 [ 918.716355][T15487] loop0: detected capacity change from 0 to 512 [ 919.103535][T15490] loop2: detected capacity change from 0 to 1024 [ 919.110337][T15490] EXT4-fs: quotafile must be on filesystem root [ 919.199082][T15487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 919.208382][T15487] ext4 filesystem being mounted at /404/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.321418][ T792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 919.748136][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 919.756761][T15483] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 919.819762][T15483] ext4 filesystem being mounted at /318/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.140825][ T323] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 920.595843][T15502] loop2: detected capacity change from 0 to 2048 [ 920.714275][T15502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 920.749049][T15502] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 920.763865][T15502] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 920.776335][T15502] EXT4-fs (loop2): This should not happen!! Data will be lost [ 920.776335][T15502] [ 920.786168][T15502] EXT4-fs (loop2): Total free blocks count 0 [ 920.792182][T15502] EXT4-fs (loop2): Free/Dirty block details [ 920.798173][T15502] EXT4-fs (loop2): free_blocks=2415919504 [ 920.803925][T15502] EXT4-fs (loop2): dirty_blocks=48 [ 920.809077][T15502] EXT4-fs (loop2): Block reservation details [ 920.815090][T15502] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 921.363219][T15505] loop0: detected capacity change from 0 to 512 [ 921.375355][ T323] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.405047][ T323] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.424864][ T323] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 921.444335][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 921.454731][T15505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 921.460135][ T323] usb 5-1: SerialNumber: syz [ 921.468828][T15505] ext4 filesystem being mounted at /405/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.491772][ T323] usb 5-1: 0:2 : does not exist [ 921.693624][ T323] usb 5-1: USB disconnect, device number 32 [ 922.504634][T15514] loop5: detected capacity change from 0 to 2048 [ 922.520390][T13918] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 922.606655][T15514] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 922.643854][T15514] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 922.658649][T15514] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 922.671121][T15514] EXT4-fs (loop5): This should not happen!! Data will be lost [ 922.671121][T15514] [ 922.680805][T15514] EXT4-fs (loop5): Total free blocks count 0 [ 922.686821][T15514] EXT4-fs (loop5): Free/Dirty block details [ 922.692961][T15514] EXT4-fs (loop5): free_blocks=2415919504 [ 922.698770][T15514] EXT4-fs (loop5): dirty_blocks=48 [ 922.704112][T15514] EXT4-fs (loop5): Block reservation details [ 922.710193][T15514] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 923.833009][T15523] loop4: detected capacity change from 0 to 2048 [ 925.824830][T14052] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 925.875277][T15523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 925.911340][T15523] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 925.926120][T15523] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 925.938505][T15523] EXT4-fs (loop4): This should not happen!! Data will be lost [ 925.938505][T15523] [ 925.948180][T15523] EXT4-fs (loop4): Total free blocks count 0 [ 925.954391][T15523] EXT4-fs (loop4): Free/Dirty block details [ 925.960412][T15523] EXT4-fs (loop4): free_blocks=2415919504 [ 925.966177][T15523] EXT4-fs (loop4): dirty_blocks=48 [ 925.971320][T15523] EXT4-fs (loop4): Block reservation details [ 925.977472][T15523] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 927.099481][T15532] loop2: detected capacity change from 0 to 2048 [ 927.374261][T15532] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 927.641176][T15532] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 927.656138][T15532] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 927.668553][T15532] EXT4-fs (loop2): This should not happen!! Data will be lost [ 927.668553][T15532] [ 927.678377][T15532] EXT4-fs (loop2): Total free blocks count 0 [ 927.684385][T15532] EXT4-fs (loop2): Free/Dirty block details [ 927.690336][T15532] EXT4-fs (loop2): free_blocks=2415919504 [ 927.696104][T15532] EXT4-fs (loop2): dirty_blocks=48 [ 927.701239][T15532] EXT4-fs (loop2): Block reservation details [ 927.707291][T15532] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 927.764081][T14057] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 927.835755][T14052] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 927.985323][T15540] loop4: detected capacity change from 0 to 256 [ 928.019848][T15540] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 928.355086][ T8757] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 928.545248][ T8757] usb 5-1: Using ep0 maxpacket: 16 [ 928.556840][ T8757] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 928.725065][ T8757] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 928.733183][ T8757] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 928.751818][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 928.782392][ T8757] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 928.792772][ T8757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.998498][T15548] loop5: detected capacity change from 0 to 512 [ 929.066414][T15549] loop3: detected capacity change from 0 to 512 [ 929.072704][ T8757] usb 5-1: Product: syz [ 929.077765][ T8757] usb 5-1: Manufacturer: syz [ 929.082763][ T8757] usb 5-1: SerialNumber: syz [ 929.089730][ T8757] r8152-cfgselector 5-1: config 0 descriptor?? [ 929.219873][T15548] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 929.229282][T15548] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.286029][T15549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 929.295123][T15549] ext4 filesystem being mounted at /319/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.340544][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 929.396130][T15557] loop3: detected capacity change from 0 to 1024 [ 929.402944][T15557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 929.409639][T15557] EXT4-fs: Ignoring removed bh option [ 929.429125][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 929.441029][T15557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 929.478795][T15555] loop2: detected capacity change from 0 to 2048 [ 929.514530][T15540] bridge0: port 3(vlan2) entered blocking state [ 929.521185][T15540] bridge0: port 3(vlan2) entered disabled state [ 929.533552][T15563] loop0: detected capacity change from 0 to 256 [ 929.544403][T15555] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 929.544545][T15563] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 929.562943][T15565] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 929.566588][T15555] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 930.725569][T15555] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 930.738014][T15555] EXT4-fs (loop2): This should not happen!! Data will be lost [ 930.738014][T15555] [ 930.747701][T15555] EXT4-fs (loop2): Total free blocks count 0 [ 930.753713][T15555] EXT4-fs (loop2): Free/Dirty block details [ 930.759637][T15555] EXT4-fs (loop2): free_blocks=2415919504 [ 930.765385][T15555] EXT4-fs (loop2): dirty_blocks=48 [ 930.770508][T15555] EXT4-fs (loop2): Block reservation details [ 930.776511][T15555] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 930.810412][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 930.845057][T15565] FAT-fs (loop4): Filesystem has been set read-only [ 930.880397][ T8757] r8152-cfgselector 5-1: Unknown version 0x0000 [ 930.891282][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 930.910342][ T8757] r8152-cfgselector 5-1: bad CDC descriptors [ 930.917842][ T8757] r8152-cfgselector 5-1: Unknown version 0x0000 [ 930.934839][ T8757] r8152-cfgselector 5-1: USB disconnect, device number 33 [ 931.110150][T15574] loop5: detected capacity change from 0 to 256 [ 931.117309][T15574] FAT-fs (loop5): Unrecognized mount option "dFscard" or missing value [ 931.569863][ T314] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 931.725309][ T39] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 932.566417][T15580] loop5: detected capacity change from 0 to 512 [ 932.605482][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 932.762144][T15580] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 932.771436][T15580] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 932.848058][ T39] usb 1-1: device descriptor read/all, error -71 [ 932.961475][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 933.077917][T15594] loop0: detected capacity change from 0 to 256 [ 933.087035][T15594] FAT-fs (loop0): Unrecognized mount option "dFscard" or missing value [ 933.290492][ T792] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 934.443101][T15595] loop4: detected capacity change from 0 to 2048 [ 934.569787][T15597] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 934.584346][T15597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 934.647151][T13918] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 935.011412][T15595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 935.052514][T15595] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 935.067356][T15595] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 935.079750][T15595] EXT4-fs (loop4): This should not happen!! Data will be lost [ 935.079750][T15595] [ 935.089704][T15595] EXT4-fs (loop4): Total free blocks count 0 [ 935.095927][T15595] EXT4-fs (loop4): Free/Dirty block details [ 935.101878][T15595] EXT4-fs (loop4): free_blocks=2415919504 [ 935.107653][T15595] EXT4-fs (loop4): dirty_blocks=48 [ 935.112803][T15595] EXT4-fs (loop4): Block reservation details [ 935.118905][T15595] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 935.597587][T13918] EXT4-fs (loop2): This should not happen!! Data will be lost [ 935.597587][T13918] [ 935.614302][T15606] loop3: detected capacity change from 0 to 512 [ 935.903918][T15605] loop5: detected capacity change from 0 to 2048 [ 936.007048][T13918] EXT4-fs (loop2): Total free blocks count 0 [ 936.131530][T15605] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 936.169014][T15605] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 936.183888][T15605] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 936.196274][T15605] EXT4-fs (loop5): This should not happen!! Data will be lost [ 936.196274][T15605] [ 936.206047][T15605] EXT4-fs (loop5): Total free blocks count 0 [ 936.212090][T15605] EXT4-fs (loop5): Free/Dirty block details [ 936.218057][T15605] EXT4-fs (loop5): free_blocks=2415919504 [ 936.223800][T15605] EXT4-fs (loop5): dirty_blocks=48 [ 936.229019][T15605] EXT4-fs (loop5): Block reservation details [ 936.235040][T15605] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 936.303280][T13918] EXT4-fs (loop2): Free/Dirty block details [ 936.613447][T15606] EXT4-fs: failed to create workqueue [ 936.678595][T13918] EXT4-fs (loop2): free_blocks=2415919504 [ 936.744034][T15606] EXT4-fs (loop3): mount failed [ 936.765031][T13918] EXT4-fs (loop2): dirty_blocks=16 [ 936.770246][T13918] EXT4-fs (loop2): Block reservation details [ 936.776890][T14052] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 936.807665][T13918] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 937.434419][T15619] loop4: detected capacity change from 0 to 2048 [ 937.616250][T14052] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 937.717860][T15619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 938.004034][T15618] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 938.018763][T15618] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 938.031123][T15618] EXT4-fs (loop4): This should not happen!! Data will be lost [ 938.031123][T15618] [ 938.040820][T15618] EXT4-fs (loop4): Total free blocks count 0 [ 938.046817][T15618] EXT4-fs (loop4): Free/Dirty block details [ 938.052725][T15618] EXT4-fs (loop4): free_blocks=2415919504 [ 938.058492][T15618] EXT4-fs (loop4): dirty_blocks=48 [ 938.063613][T15618] EXT4-fs (loop4): Block reservation details [ 938.069627][T15618] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 939.011056][T13918] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 939.435831][T15634] loop4: detected capacity change from 0 to 256 [ 939.456101][T15634] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 939.577741][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 939.613461][T15637] loop2: detected capacity change from 0 to 256 [ 939.661651][T15640] loop0: detected capacity change from 0 to 1024 [ 939.686921][T15640] EXT4-fs: quotafile must be on filesystem root [ 939.706067][T15637] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 939.755093][ T39] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 939.955131][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 939.962213][ T39] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 939.998389][ T39] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 940.032494][ T39] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 940.073462][ T39] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 940.116331][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.149778][ T39] usb 5-1: Product: syz [ 940.170137][ T39] usb 5-1: Manufacturer: syz [ 940.190265][ T39] usb 5-1: SerialNumber: syz [ 940.236320][ T39] r8152-cfgselector 5-1: config 0 descriptor?? [ 940.745062][ T6] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 940.849809][T15634] bridge0: port 3(vlan2) entered blocking state [ 940.864911][T15634] bridge0: port 3(vlan2) entered disabled state [ 940.886279][T15652] loop5: detected capacity change from 0 to 256 [ 940.894265][T15652] FAT-fs (loop5): Unrecognized mount option "dFscard" or missing value [ 940.945082][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 940.952462][ T6] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 940.995769][T15654] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 941.033638][ T6] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 941.038695][T15654] FAT-fs (loop4): Filesystem has been set read-only [ 941.061251][ T39] r8152-cfgselector 5-1: Unknown version 0x0000 [ 941.065078][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 941.067657][ T39] r8152-cfgselector 5-1: bad CDC descriptors [ 941.095880][ T314] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 941.107191][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 941.139663][ T39] r8152-cfgselector 5-1: Unknown version 0x0000 [ 941.149277][ T39] r8152-cfgselector 5-1: USB disconnect, device number 34 [ 941.205079][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.221622][ T6] usb 3-1: Product: syz [ 941.226378][ T6] usb 3-1: Manufacturer: syz [ 941.230976][ T6] usb 3-1: SerialNumber: syz [ 941.245547][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 941.538974][T15664] loop3: detected capacity change from 0 to 256 [ 941.548214][T15664] FAT-fs (loop3): Unrecognized mount option "dFscard" or missing value [ 941.669203][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 941.678724][ T6] r8152-cfgselector 3-1: bad CDC descriptors [ 941.722261][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 941.804607][ T6] r8152-cfgselector 3-1: USB disconnect, device number 36 [ 942.172352][T15665] loop5: detected capacity change from 0 to 2048 [ 942.295377][ T314] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 942.310092][T15665] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 942.348977][T15665] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 942.363942][T15665] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 942.376325][T15665] EXT4-fs (loop5): This should not happen!! Data will be lost [ 942.376325][T15665] [ 942.385998][T15665] EXT4-fs (loop5): Total free blocks count 0 [ 942.392088][T15665] EXT4-fs (loop5): Free/Dirty block details [ 942.398185][T15665] EXT4-fs (loop5): free_blocks=2415919504 [ 942.403974][T15665] EXT4-fs (loop5): dirty_blocks=48 [ 942.409148][T15665] EXT4-fs (loop5): Block reservation details [ 942.415344][T15665] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 942.823167][T14052] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 942.914431][T15672] loop0: detected capacity change from 0 to 256 [ 943.024205][T15672] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 943.058772][T15672] bridge0: port 3(vlan0) entered blocking state [ 943.067440][T15672] bridge0: port 3(vlan0) entered disabled state [ 943.108931][T15679] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2048) [ 943.116845][T15679] FAT-fs (loop0): Filesystem has been set read-only [ 944.813372][T15683] loop2: detected capacity change from 0 to 2048 [ 945.009526][T15686] tty tty27: ldisc open failed (-12), clearing slot 26 [ 945.201660][T15683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 945.235515][T15683] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 945.250328][T15683] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 945.262698][T15683] EXT4-fs (loop2): This should not happen!! Data will be lost [ 945.262698][T15683] [ 945.272386][T15683] EXT4-fs (loop2): Total free blocks count 0 [ 945.278472][T15683] EXT4-fs (loop2): Free/Dirty block details [ 945.284413][T15683] EXT4-fs (loop2): free_blocks=2415919504 [ 945.290173][T15683] EXT4-fs (loop2): dirty_blocks=48 [ 945.295313][T15683] EXT4-fs (loop2): Block reservation details [ 945.301309][T15683] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 946.491141][T15702] loop0: detected capacity change from 0 to 2048 [ 946.695668][T14052] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 946.744385][T15702] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 947.323774][T15713] loop2: detected capacity change from 0 to 128 [ 950.290088][T15720] loop3: detected capacity change from 0 to 2048 [ 950.339278][T15721] tty tty31: ldisc open failed (-12), clearing slot 30 [ 950.566311][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 950.742282][T15720] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 951.561817][T15737] loop0: detected capacity change from 0 to 128 [ 952.499845][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 952.571114][T15740] loop3: detected capacity change from 0 to 1024 [ 952.578581][T15740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 952.585401][T15740] EXT4-fs: Ignoring removed bh option [ 952.705870][T15740] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 952.719511][T15744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 952.742912][T15746] loop2: detected capacity change from 0 to 256 [ 952.785527][T15746] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 952.934097][T15748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4782'. [ 952.943240][T15748] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4782'. [ 953.863198][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 954.177209][T15760] loop4: detected capacity change from 0 to 256 [ 954.191819][T15760] FAT-fs (loop4): Unrecognized mount option "dFscard" or missing value [ 956.323589][ T19] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 956.458088][T15762] loop3: detected capacity change from 0 to 2048 [ 956.616740][T15762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 956.659799][T15762] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 956.674787][T15762] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 956.687195][T15762] EXT4-fs (loop3): This should not happen!! Data will be lost [ 956.687195][T15762] [ 956.696970][T15762] EXT4-fs (loop3): Total free blocks count 0 [ 956.703025][T15762] EXT4-fs (loop3): Free/Dirty block details [ 956.708986][T15762] EXT4-fs (loop3): free_blocks=2415919504 [ 956.714758][T15762] EXT4-fs (loop3): dirty_blocks=48 [ 956.720063][T15762] EXT4-fs (loop3): Block reservation details [ 956.726151][T15762] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 958.945859][T15781] tty tty25: ldisc open failed (-12), clearing slot 24 [ 959.081119][T12922] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 960.336168][T15802] loop0: detected capacity change from 0 to 512 [ 960.742315][T15803] loop2: detected capacity change from 0 to 2048 [ 960.880603][T15802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 960.889857][T15802] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.957454][T15803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 961.110528][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 962.013495][T15816] loop5: detected capacity change from 0 to 512 [ 962.049764][T15816] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 962.110491][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 962.112138][T15816] EXT4-fs (loop5): 1 truncate cleaned up [ 962.128893][T15817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 962.305966][T15816] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 962.588196][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 963.067307][T15828] loop2: detected capacity change from 0 to 512 [ 964.538496][T15830] loop5: detected capacity change from 0 to 128 [ 965.543162][T15828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 965.553280][T15828] ext4 filesystem being mounted at /316/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.824902][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 966.036894][T15851] loop3: detected capacity change from 0 to 512 [ 966.057549][T15851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 966.066604][T15851] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.143551][T15855] loop2: detected capacity change from 0 to 512 [ 966.264292][T15855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 966.302949][T15855] ext4 filesystem being mounted at /317/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.041746][T15865] loop4: detected capacity change from 0 to 512 [ 967.130002][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 967.375893][T15865] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 967.378868][T15869] loop0: detected capacity change from 0 to 1024 [ 967.384882][T15865] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.391859][T15869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 967.408453][T15869] EXT4-fs: Ignoring removed bh option [ 967.445915][T15869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 967.546831][ T9031] EXT4-fs (loop4): unmounting filesystem. [ 967.679333][T15879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4810'. [ 967.688475][T15879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4810'. [ 968.655731][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 968.757269][T15885] loop3: detected capacity change from 0 to 512 [ 968.827061][T15887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 968.851557][T15885] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 968.860729][T15885] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 969.392850][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 969.733417][T15900] loop4: detected capacity change from 0 to 1024 [ 969.740188][T15900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 969.746854][T15900] EXT4-fs: Ignoring removed bh option [ 969.770177][T15900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 971.719089][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 971.825652][T15913] loop0: detected capacity change from 0 to 512 [ 971.870712][T15913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 971.879701][T15913] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 972.185138][T15921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4818'. [ 972.194184][T15921] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4818'. [ 975.999253][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 976.005753][ T9031] EXT4-fs (loop4): unmounting filesystem. [ 978.355807][T15944] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 983.257861][T15973] loop0: detected capacity change from 0 to 128 [ 984.399087][T15975] loop0: detected capacity change from 0 to 40427 [ 984.406330][T15975] F2FS-fs (loop0): Unrecognized mount option "" or missing value [ 984.416714][T15977] loop2: detected capacity change from 0 to 512 [ 984.445328][ T792] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 984.525530][T15977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 984.534480][T15977] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.795818][T15987] overlayfs: missing 'lowerdir' [ 984.810752][T15987] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 984.819553][T15987] overlayfs: missing 'lowerdir' [ 985.135434][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 988.119522][T16006] loop3: detected capacity change from 0 to 128 [ 988.957146][T16008] loop5: detected capacity change from 0 to 128 [ 995.592269][T16022] tty tty29: ldisc open failed (-12), clearing slot 28 [ 995.604502][T16018] tty tty27: ldisc open failed (-12), clearing slot 26 [ 995.777024][T16036] loop3: detected capacity change from 0 to 512 [ 995.948052][T16036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 995.957043][T16036] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.278168][T16035] loop5: detected capacity change from 0 to 2048 [ 996.401327][T16035] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 996.501007][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 997.521550][T16056] loop3: detected capacity change from 0 to 512 [ 997.593482][T16056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 997.612805][T16056] ext4 filesystem being mounted at /343/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 997.742579][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 998.358352][T16073] loop5: detected capacity change from 0 to 40427 [ 998.360808][T16074] loop0: detected capacity change from 0 to 256 [ 998.361308][T16074] FAT-fs (loop0): Unrecognized mount option "dFscard" or missing value [ 998.362315][T16073] F2FS-fs (loop5): Unrecognized mount option "" or missing value [ 999.457699][T16076] overlayfs: missing 'lowerdir' [ 999.463346][T16076] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 999.472077][T16076] overlayfs: missing 'lowerdir' [ 999.506420][T16039] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1000.626650][T16081] loop0: detected capacity change from 0 to 128 [ 1000.635140][T16084] loop2: detected capacity change from 0 to 128 [ 1001.815059][T16087] loop2: detected capacity change from 0 to 40427 [ 1001.824395][T16088] loop5: detected capacity change from 0 to 512 [ 1001.831820][T16087] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 1002.003822][T16088] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1002.012839][T16088] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1002.094354][T16099] overlayfs: missing 'lowerdir' [ 1002.115368][T16099] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1002.124122][T16099] overlayfs: missing 'lowerdir' [ 1002.978853][T16100] loop0: detected capacity change from 0 to 128 [ 1003.502920][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1003.563304][T16106] loop0: detected capacity change from 0 to 256 [ 1003.672959][T16106] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1003.684973][T16105] loop2: detected capacity change from 0 to 1024 [ 1003.691708][T16105] EXT4-fs: quotafile must be on filesystem root [ 1003.784951][T16113] loop5: detected capacity change from 0 to 128 [ 1003.985112][ T8757] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1004.225543][ T8757] usb 1-1: Using ep0 maxpacket: 16 [ 1004.233751][ T8757] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 1004.719835][T16115] loop4: detected capacity change from 0 to 256 [ 1004.726218][ T8757] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1004.734298][ T8757] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1004.774871][T16115] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1004.856160][ T8757] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1004.875056][ T8757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.884364][ T8757] usb 1-1: Product: syz [ 1004.889898][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 1004.965351][ T8757] usb 1-1: Manufacturer: syz [ 1004.970046][ T8757] usb 1-1: SerialNumber: syz [ 1006.147278][T16125] loop2: detected capacity change from 0 to 512 [ 1006.729963][ T8757] r8152-cfgselector 1-1: config 0 descriptor?? [ 1006.763167][T16129] bridge0: port 3(vlan0) entered blocking state [ 1006.814809][T16129] bridge0: port 3(vlan0) entered disabled state [ 1006.838171][T16125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1006.847224][T16125] ext4 filesystem being mounted at /331/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.949656][T16122] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1006.976159][ T315] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1008.055153][T16138] loop5: detected capacity change from 0 to 128 [ 1008.501433][T16139] loop3: detected capacity change from 0 to 2048 [ 1009.116498][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 1009.388900][T16139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1009.562864][T16145] loop5: detected capacity change from 0 to 128 [ 1010.610027][ T8757] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1012.556444][ T8757] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1012.563950][ T8757] r8152-cfgselector 1-1: bad CDC descriptors [ 1012.570621][ T8757] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1012.697578][ T8757] r8152-cfgselector 1-1: USB disconnect, device number 27 [ 1012.705256][T16154] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1012.714215][T16154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1012.721980][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 1012.792193][T16162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=16162 comm=syz.4.4875 [ 1012.812294][T16162] binder: 16146:16162 ioctl 4018620d 0 returned -22 [ 1012.894556][T16160] loop2: detected capacity change from 0 to 256 [ 1012.939951][T16160] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1013.161589][T16170] loop0: detected capacity change from 0 to 1024 [ 1013.168301][T16170] EXT4-fs: quotafile must be on filesystem root [ 1013.245116][T15525] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1013.434106][T16176] loop0: detected capacity change from 0 to 512 [ 1013.663145][T16176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1013.672711][T16176] ext4 filesystem being mounted at /440/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.335109][T15525] usb 3-1: Using ep0 maxpacket: 16 [ 1014.346335][T15525] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 1014.350456][T16183] loop4: detected capacity change from 0 to 512 [ 1014.368774][T15525] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1014.377361][T16176] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 1014.391778][T15525] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1014.457039][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 1014.468965][T16188] loop3: detected capacity change from 0 to 256 [ 1014.479728][T16183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1014.481433][T15525] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1014.488746][T16183] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.498494][T15525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.817799][T16194] loop5: detected capacity change from 0 to 128 [ 1016.876116][T15525] usb 3-1: Product: syz [ 1016.880346][T15525] usb 3-1: Manufacturer: syz [ 1016.884952][T15525] usb 3-1: SerialNumber: syz [ 1016.907606][T16188] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1017.069082][T16196] loop0: detected capacity change from 0 to 2048 [ 1017.144888][T15525] r8152-cfgselector 3-1: config 0 descriptor?? [ 1017.236613][T16196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1017.277539][T16196] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1017.292348][T16196] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1017.304845][T16196] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1017.304845][T16196] [ 1017.314562][T16196] EXT4-fs (loop0): Total free blocks count 0 [ 1017.320653][T16196] EXT4-fs (loop0): Free/Dirty block details [ 1017.326600][T16196] EXT4-fs (loop0): free_blocks=2415919504 [ 1017.332346][T16196] EXT4-fs (loop0): dirty_blocks=48 [ 1017.337530][T16196] EXT4-fs (loop0): Block reservation details [ 1017.343532][T16196] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 1017.489734][T15525] r8152-cfgselector 3-1: can't set config #0, error -71 [ 1017.497696][T15525] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1017.507113][T15525] r8152-cfgselector 3-1: USB disconnect, device number 38 [ 1017.532795][ T9031] EXT4-fs (loop4): unmounting filesystem. [ 1018.012708][T16203] loop2: detected capacity change from 0 to 256 [ 1018.063407][T16203] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1018.096212][T16206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1018.269979][T16213] loop3: detected capacity change from 0 to 40427 [ 1018.280420][T16213] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 1018.815359][ T9117] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1018.970143][T16218] overlayfs: missing 'lowerdir' [ 1018.979959][T16218] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1018.988804][T16218] overlayfs: missing 'lowerdir' [ 1019.166116][T13945] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1019.357903][T16220] loop0: detected capacity change from 0 to 1024 [ 1019.365541][ T9117] usb 5-1: Using ep0 maxpacket: 16 [ 1019.374078][T16220] EXT4-fs: quotafile must be on filesystem root [ 1019.380906][ T9117] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 1019.389776][ T9117] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1019.441493][T16228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=16228 comm=syz.3.4893 [ 1019.472100][T16228] binder: 16221:16228 ioctl 4018620d 0 returned -22 [ 1019.612124][ T9117] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1019.626288][ T9117] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1019.644070][ T9117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.646027][T16033] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1019.673576][ T9117] usb 5-1: Product: syz [ 1019.682146][ T9117] usb 5-1: Manufacturer: syz [ 1019.696855][ T9117] usb 5-1: SerialNumber: syz [ 1019.704342][ T9117] r8152-cfgselector 5-1: config 0 descriptor?? [ 1020.129562][T16235] loop0: detected capacity change from 0 to 512 [ 1020.143337][T16234] loop5: detected capacity change from 0 to 512 [ 1020.160405][T16234] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1020.160428][T16235] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1020.169426][T16234] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.189100][T16235] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.279471][T16241] loop3: detected capacity change from 0 to 40427 [ 1020.286968][T16241] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 1020.379591][ T9117] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1020.385956][ T9117] r8152-cfgselector 5-1: bad CDC descriptors [ 1020.392264][ T9117] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1020.401318][ T9117] r8152-cfgselector 5-1: USB disconnect, device number 36 [ 1020.497440][T16244] overlayfs: missing 'lowerdir' [ 1020.508096][T16244] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1020.516931][T16244] overlayfs: missing 'lowerdir' [ 1020.641017][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 1020.683518][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1020.702706][T16250] loop5: detected capacity change from 0 to 512 [ 1020.720100][T16250] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1020.731869][T16250] EXT4-fs (loop5): 1 truncate cleaned up [ 1020.738116][T16250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1022.361474][T16254] loop0: detected capacity change from 0 to 128 [ 1023.034888][T16257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1024.120106][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1024.710931][T16271] loop2: detected capacity change from 0 to 40427 [ 1024.844805][T16271] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 1025.237876][T16274] loop5: detected capacity change from 0 to 512 [ 1025.873774][T16276] overlayfs: missing 'lowerdir' [ 1025.885125][T16276] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1025.893905][T16276] overlayfs: missing 'lowerdir' [ 1026.101919][T16274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1026.110941][T16274] ext4 filesystem being mounted at /534/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.312180][T16291] loop4: detected capacity change from 0 to 512 [ 1027.324816][T16292] loop2: detected capacity change from 0 to 512 [ 1027.368451][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1027.406184][T16291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1027.415259][T16291] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.420880][T16292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1027.434659][T16292] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.464886][T16300] loop5: detected capacity change from 0 to 512 [ 1027.496719][T16300] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1027.528621][T16300] EXT4-fs (loop5): 1 truncate cleaned up [ 1027.534556][T16300] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1027.581637][ T9031] EXT4-fs (loop4): unmounting filesystem. [ 1027.593301][T16302] loop0: detected capacity change from 0 to 40427 [ 1027.603599][T16302] F2FS-fs (loop0): Unrecognized mount option "" or missing value [ 1027.685051][T15525] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1027.722682][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 1027.752327][T16308] loop2: detected capacity change from 0 to 256 [ 1027.761610][T16308] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1027.902263][T16313] overlayfs: missing 'lowerdir' [ 1027.929258][T16313] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1027.938108][T16313] overlayfs: missing 'lowerdir' [ 1028.160441][T16313] binder: 16301:16313 ioctl c0306201 200000000080 returned -14 [ 1028.247406][T15525] usb 4-1: Using ep0 maxpacket: 16 [ 1028.352836][T15525] usb 4-1: config index 0 descriptor too short (expected 65532, got 18) [ 1028.361751][T15525] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1028.370019][T15525] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1028.382080][T15525] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1028.401410][T15525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.429813][T15525] usb 4-1: Product: syz [ 1028.441221][T15525] usb 4-1: Manufacturer: syz [ 1028.462400][T15525] usb 4-1: SerialNumber: syz [ 1028.476069][T15525] r8152-cfgselector 4-1: config 0 descriptor?? [ 1028.666633][T16321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1028.997059][T15525] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1029.005938][T15525] r8152-cfgselector 4-1: bad CDC descriptors [ 1029.019282][T15525] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1029.036019][T15525] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 1029.068038][T16328] loop4: detected capacity change from 0 to 512 [ 1029.098587][T16328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1029.107714][T16328] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.563392][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1029.697368][T16338] loop5: detected capacity change from 0 to 40427 [ 1029.712191][T16340] loop3: detected capacity change from 0 to 2048 [ 1029.719993][T16338] F2FS-fs (loop5): Unrecognized mount option "" or missing value [ 1029.912206][T16340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1030.046937][T16340] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1030.062094][T16340] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1030.074528][T16340] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1030.074528][T16340] [ 1030.084284][T16340] EXT4-fs (loop3): Total free blocks count 0 [ 1030.090534][T16340] EXT4-fs (loop3): Free/Dirty block details [ 1030.096549][T16340] EXT4-fs (loop3): free_blocks=2415919504 [ 1030.102326][T16340] EXT4-fs (loop3): dirty_blocks=48 [ 1030.107903][T16340] EXT4-fs (loop3): Block reservation details [ 1030.114024][T16340] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 1030.131161][ T9031] EXT4-fs (loop4): unmounting filesystem. [ 1030.926242][T16346] loop0: detected capacity change from 0 to 40427 [ 1031.088971][T14008] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1031.109262][T16350] loop2: detected capacity change from 0 to 512 [ 1031.116257][T16346] F2FS-fs (loop0): Unrecognized mount option "" or missing value [ 1031.146007][T16350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1031.154966][T16350] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.221817][T16351] overlayfs: missing 'lowerdir' [ 1031.228092][T16351] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1031.236920][T16351] overlayfs: missing 'lowerdir' [ 1031.252890][T16358] loop3: detected capacity change from 0 to 512 [ 1031.267725][T16358] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1031.276867][T16358] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.646350][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 1031.683473][T16356] overlayfs: missing 'lowerdir' [ 1031.689211][T16356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1031.695760][T16363] loop5: detected capacity change from 0 to 512 [ 1031.698553][T16356] overlayfs: missing 'lowerdir' [ 1031.708047][T16363] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1031.727101][T16356] binder: 16345:16356 ioctl c0306201 200000000080 returned -14 [ 1031.755592][ T9079] EXT4-fs (loop2): unmounting filesystem. [ 1031.781947][T16363] EXT4-fs (loop5): 1 truncate cleaned up [ 1031.788482][T16363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1031.844227][T16365] loop4: detected capacity change from 0 to 40427 [ 1031.854102][T16365] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 1036.130818][T16376] loop2: detected capacity change from 0 to 128 [ 1036.139342][T16033] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1036.193783][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1036.445097][T16391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=16391 comm=syz.3.4932 [ 1036.481834][T16391] binder: 16379:16391 ioctl 4018620d 0 returned -22 [ 1037.048956][ T28] audit: type=1400 audit(1780456947.105:353): avc: denied { mount } for pid=16379 comm="syz.3.4932" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1037.160572][T16392] loop5: detected capacity change from 0 to 512 [ 1037.358101][T16389] loop4: detected capacity change from 0 to 2048 [ 1037.560392][T16399] loop2: detected capacity change from 0 to 40427 [ 1037.567990][T16399] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 1037.588408][T16392] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1037.597397][T16392] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.716123][T16389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1037.733702][T16389] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1037.748560][T16389] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1037.760947][T16389] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1037.760947][T16389] [ 1037.770660][T16389] EXT4-fs (loop4): Total free blocks count 0 [ 1037.776724][T16389] EXT4-fs (loop4): Free/Dirty block details [ 1037.782910][T16389] EXT4-fs (loop4): free_blocks=2415919504 [ 1037.788788][T16389] EXT4-fs (loop4): dirty_blocks=48 [ 1037.793932][T16389] EXT4-fs (loop4): Block reservation details [ 1037.800060][T16389] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 1037.885899][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1039.054939][T16412] overlayfs: missing 'lowerdir' [ 1039.060652][T16412] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1039.069386][T16412] overlayfs: missing 'lowerdir' [ 1039.075813][T16412] binder: 16397:16412 ioctl c0306201 200000000080 returned -14 [ 1039.097255][T16401] loop3: detected capacity change from 0 to 40427 [ 1039.108133][T16401] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 1039.136230][T16417] loop0: detected capacity change from 0 to 512 [ 1039.186109][T16417] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1039.195167][T16417] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1039.220627][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 1039.263886][T13984] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1039.316625][T16404] overlayfs: missing 'lowerdir' [ 1039.480525][T16428] loop4: detected capacity change from 0 to 40427 [ 1039.745124][T16428] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 1039.953629][T16433] overlayfs: missing 'lowerdir' [ 1039.965031][T16433] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1039.973791][T16433] overlayfs: missing 'lowerdir' [ 1041.727768][T16437] loop2: detected capacity change from 0 to 128 [ 1041.868995][T16439] loop5: detected capacity change from 0 to 256 [ 1041.885755][T16439] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1041.886038][T16443] loop0: detected capacity change from 0 to 256 [ 1041.925522][T16443] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1041.995090][T16441] loop4: detected capacity change from 0 to 40427 [ 1042.002142][T16441] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 1042.235628][T16449] overlayfs: missing 'lowerdir' [ 1042.244498][T16449] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1042.253503][T16449] overlayfs: missing 'lowerdir' [ 1042.268925][T16449] binder: 16440:16449 ioctl c0306201 200000000080 returned -14 [ 1044.078118][ T315] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1044.087623][ T9117] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1044.233923][T16453] loop2: detected capacity change from 0 to 40427 [ 1044.242647][T16453] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 1044.285102][ T9117] usb 6-1: Using ep0 maxpacket: 16 [ 1044.290436][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 1044.299358][ T9117] usb 6-1: config index 0 descriptor too short (expected 65532, got 18) [ 1044.309020][ T315] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 1044.327785][ T9117] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1044.336256][ T315] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1044.344341][ T315] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1044.361137][ T9117] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1044.377678][ T9117] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1044.386942][ T9117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.395257][ T315] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1044.404763][ T9117] usb 6-1: Product: syz [ 1044.409615][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.417973][ T9117] usb 6-1: Manufacturer: syz [ 1044.422586][ T9117] usb 6-1: SerialNumber: syz [ 1044.463037][ T315] usb 1-1: Product: syz [ 1044.471806][ T9117] r8152-cfgselector 6-1: config 0 descriptor?? [ 1044.478183][ T315] usb 1-1: Manufacturer: syz [ 1044.482786][ T315] usb 1-1: SerialNumber: syz [ 1044.492852][ T315] r8152-cfgselector 1-1: config 0 descriptor?? [ 1044.576275][T16464] overlayfs: missing 'lowerdir' [ 1044.584619][T16464] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1044.593440][T16464] overlayfs: missing 'lowerdir' [ 1044.906422][T16439] bridge0: port 3(vlan0) entered blocking state [ 1044.922167][T16439] bridge0: port 3(vlan0) entered disabled state [ 1044.933519][T16443] bridge0: port 3(vlan0) entered blocking state [ 1044.940734][T16443] bridge0: port 3(vlan0) entered disabled state [ 1044.963343][ T9117] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1044.975098][ T9117] r8152-cfgselector 6-1: bad CDC descriptors [ 1044.985786][ T9117] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1045.001580][ T9117] r8152-cfgselector 6-1: USB disconnect, device number 78 [ 1045.018347][ T315] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1045.030483][ T315] r8152-cfgselector 1-1: bad CDC descriptors [ 1045.045928][ T315] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1045.063252][ T315] r8152-cfgselector 1-1: USB disconnect, device number 28 [ 1045.646267][T16470] loop2: detected capacity change from 0 to 2048 [ 1045.752393][T16470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1045.797800][T16470] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1045.812604][T16470] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1045.825022][T16470] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1045.825022][T16470] [ 1045.834688][T16470] EXT4-fs (loop2): Total free blocks count 0 [ 1045.840716][T16470] EXT4-fs (loop2): Free/Dirty block details [ 1045.846660][T16470] EXT4-fs (loop2): free_blocks=2415919504 [ 1045.852550][T16470] EXT4-fs (loop2): dirty_blocks=48 [ 1045.857743][T16470] EXT4-fs (loop2): Block reservation details [ 1045.863760][T16470] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 1046.480263][T16488] loop4: detected capacity change from 0 to 256 [ 1046.494787][T16488] FAT-fs (loop4): Unrecognized mount option "dFscard" or missing value [ 1046.906232][T16489] loop3: detected capacity change from 0 to 128 [ 1048.866789][T16485] loop5: detected capacity change from 0 to 512 [ 1049.311269][T16490] loop0: detected capacity change from 0 to 2048 [ 1049.391188][T13932] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1049.413472][T16490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1049.569744][T16485] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1049.578714][T16485] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.058581][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1050.292331][T16500] loop4: detected capacity change from 0 to 40427 [ 1050.299922][T16500] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 1050.676698][T16505] overlayfs: missing 'lowerdir' [ 1050.768019][T16506] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1050.777130][T16506] overlayfs: missing 'lowerdir' [ 1050.887242][T16507] binder: 16499:16507 ioctl c0306201 200000000080 returned -14 [ 1051.471186][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1051.480232][T16504] netlink: 'syz.3.4960': attribute type 2 has an invalid length. [ 1051.809375][T16519] loop3: detected capacity change from 0 to 512 [ 1052.290622][T16520] loop4: detected capacity change from 0 to 128 [ 1053.915400][ T7846] EXT4-fs (loop0): unmounting filesystem. [ 1054.018728][T16516] loop2: detected capacity change from 0 to 40427 [ 1054.030392][T16516] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 1054.069593][T16521] loop5: detected capacity change from 0 to 2048 [ 1054.103778][T16527] loop0: detected capacity change from 0 to 256 [ 1054.131310][T16519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1054.140296][T16519] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1054.164543][T16521] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1054.257208][T16527] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1054.292907][T16530] loop4: detected capacity change from 0 to 40427 [ 1054.702887][T16532] overlayfs: missing 'lowerdir' [ 1054.729646][T16530] F2FS-fs (loop4): Unrecognized mount option "" or missing value [ 1054.755315][T16531] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1054.756670][ T8497] EXT4-fs (loop3): unmounting filesystem. [ 1054.764192][T16531] overlayfs: missing 'lowerdir' [ 1054.775794][T16039] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1054.810900][T16534] loop3: detected capacity change from 0 to 256 [ 1054.819556][T16531] binder: 16515:16531 ioctl c0306201 200000000080 returned -14 [ 1054.840129][T16534] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1055.027770][T16538] overlayfs: missing 'lowerdir' [ 1055.274699][ T315] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1055.301649][T16535] binder: 16526:16535 ioctl c0306201 200000000080 returned -14 [ 1055.348826][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1055.425072][T15525] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1055.455036][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 1055.463100][ T315] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 1057.164000][T16544] loop5: detected capacity change from 0 to 128 [ 1057.532117][T16546] loop4: detected capacity change from 0 to 128 [ 1058.135788][T16547] bridge0: port 3(vlan2) entered blocking state [ 1058.230720][T16547] bridge0: port 3(vlan2) entered disabled state [ 1058.367236][T16552] loop0: detected capacity change from 0 to 40427 [ 1058.374608][T16552] F2FS-fs (loop0): Unrecognized mount option "7" or missing value [ 1058.396899][T16555] loop5: detected capacity change from 0 to 128 [ 1058.585154][ T315] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1058.593266][ T315] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1058.603113][ T315] usb 1-1: string descriptor 0 read error: -71 [ 1058.609356][ T315] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1059.288754][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.339720][T15525] usb 4-1: Using ep0 maxpacket: 16 [ 1059.346411][ T315] r8152-cfgselector 1-1: config 0 descriptor?? [ 1059.356867][ T315] r8152-cfgselector 1-1: can't set config #0, error -71 [ 1059.423828][T15525] usb 4-1: device descriptor read/all, error -71 [ 1059.436221][ T315] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1059.447385][ T315] r8152-cfgselector 1-1: USB disconnect, device number 29 [ 1059.541170][T16560] loop5: detected capacity change from 0 to 40427 [ 1059.551967][T16560] F2FS-fs (loop5): Unrecognized mount option "" or missing value [ 1059.688509][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4975'. [ 1059.697433][T16573] netlink: 'syz.4.4975': attribute type 2 has an invalid length. [ 1059.734875][T16574] loop2: detected capacity change from 0 to 128 [ 1060.738098][T16578] overlayfs: missing 'lowerdir' [ 1060.796646][T16579] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1060.805440][T16579] overlayfs: missing 'lowerdir' [ 1060.853172][T16578] binder: 16551:16578 ioctl c0306201 200000000080 returned -14 [ 1060.992075][T16581] loop3: detected capacity change from 0 to 256 [ 1061.006910][T16581] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1061.029617][T16583] loop4: detected capacity change from 0 to 256 [ 1061.047587][T16583] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1061.084954][T16588] loop0: detected capacity change from 0 to 256 [ 1061.119309][T16588] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1061.322549][T16590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=16590 comm=syz.2.4978 [ 1061.344676][T16590] binder: 16584:16590 ioctl 4018620d 0 returned -22 [ 1061.792723][T16560] overlayfs: missing 'lowerdir' [ 1061.798285][T16560] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1061.807010][T16560] overlayfs: missing 'lowerdir' [ 1061.812947][T16560] binder: 16558:16560 ioctl c0306201 200000000080 returned -14 [ 1061.963502][ T315] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1061.971188][T15525] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1061.982304][T16599] loop5: detected capacity change from 0 to 256 [ 1061.990959][T16599] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1062.107028][T16601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'. [ 1062.116182][T16601] netlink: 'syz.2.4984': attribute type 2 has an invalid length. [ 1062.795542][T15525] usb 5-1: Using ep0 maxpacket: 16 [ 1062.806910][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 1062.883287][ T315] usb 1-1: config index 0 descriptor too short (expected 65532, got 18) [ 1062.894333][T15525] usb 5-1: config index 0 descriptor too short (expected 65532, got 18) [ 1062.908442][T16609] loop3: detected capacity change from 0 to 256 [ 1062.914897][T15525] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1062.923902][ T315] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1062.932510][T16609] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1062.943120][T15525] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1062.952174][ T315] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1063.033258][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4985'. [ 1063.042422][T16612] netlink: 'syz.5.4985': attribute type 2 has an invalid length. [ 1065.306570][T15525] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1065.323312][ T315] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1065.344918][T15525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.355051][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.685779][T16625] loop2: detected capacity change from 0 to 128 [ 1066.054488][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4990'. [ 1066.065172][T16626] netlink: 'syz.5.4990': attribute type 2 has an invalid length. [ 1067.422260][T15525] r8152-cfgselector 5-1: config 0 descriptor?? [ 1067.430074][ T315] r8152-cfgselector 1-1: config 0 descriptor?? [ 1067.507656][T15525] r8152-cfgselector 5-1: can't set config #0, error -71 [ 1067.516957][ T315] r8152-cfgselector 1-1: can't set config #0, error -71 [ 1067.524279][T15525] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1067.535877][ T315] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1067.542833][T15525] r8152-cfgselector 5-1: USB disconnect, device number 37 [ 1067.545042][T12228] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1067.553173][ T315] r8152-cfgselector 1-1: USB disconnect, device number 30 [ 1067.576145][T16635] loop3: detected capacity change from 0 to 256 [ 1067.675969][T16635] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1068.027881][T16644] loop4: detected capacity change from 0 to 2048 [ 1068.167955][T16644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1068.388133][T16638] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1068.402939][T16638] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1068.415407][T16638] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1068.415407][T16638] [ 1068.425278][T16638] EXT4-fs (loop4): Total free blocks count 0 [ 1068.431321][T16638] EXT4-fs (loop4): Free/Dirty block details [ 1068.437274][T16638] EXT4-fs (loop4): free_blocks=2415919504 [ 1068.443014][T16638] EXT4-fs (loop4): dirty_blocks=48 [ 1068.448155][T16638] EXT4-fs (loop4): Block reservation details [ 1068.454150][T16638] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 1068.839726][T16642] loop5: detected capacity change from 0 to 512 [ 1069.056127][T16642] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1069.080375][T16642] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.134385][T16660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=16660 comm=syz.2.4995 [ 1069.147861][T16660] binder: 16641:16660 ioctl 4018620d 0 returned -22 [ 1069.566571][T16661] loop0: detected capacity change from 0 to 2048 [ 1069.606342][T16663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=16663 comm=syz.3.4997 [ 1069.619849][T16663] binder: 16656:16663 ioctl 4018620d 0 returned -22 [ 1069.794364][T14005] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1069.838108][T16661] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1069.868792][T16661] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1069.883685][T16661] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1069.896086][T16661] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1069.896086][T16661] [ 1069.905782][T16661] EXT4-fs (loop0): Total free blocks count 0 [ 1069.911810][T16661] EXT4-fs (loop0): Free/Dirty block details [ 1069.917781][T16661] EXT4-fs (loop0): free_blocks=2415919504 [ 1069.923545][T16661] EXT4-fs (loop0): dirty_blocks=48 [ 1069.928767][T16661] EXT4-fs (loop0): Block reservation details [ 1069.934892][T16661] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 1071.620643][T16677] loop2: detected capacity change from 0 to 2048 [ 1072.841407][ T6315] EXT4-fs (loop5): unmounting filesystem. [ 1072.866299][T16681] loop3: detected capacity change from 0 to 256 [ 1072.894054][T16681] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1072.947615][T14005] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1073.703558][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1073.712495][T16691] netlink: 'syz.2.5005': attribute type 2 has an invalid length. [ 1073.989547][T12228] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1074.036419][T16701] loop2: detected capacity change from 0 to 256 [ 1074.065452][T16701] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1074.128568][T16703] loop4: detected capacity change from 0 to 1024 [ 1074.135281][T16703] EXT4-fs: quotafile must be on filesystem root [ 1074.266521][T12228] usb 4-1: Using ep0 maxpacket: 16 [ 1074.305689][T12228] usb 4-1: config index 0 descriptor too short (expected 65532, got 18) [ 1074.317206][T12228] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1074.326389][T12228] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1074.358498][T12228] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1074.369559][T12228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.424876][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5012'. [ 1074.434027][T16712] netlink: 'syz.4.5012': attribute type 2 has an invalid length. [ 1075.908630][T16708] loop5: detected capacity change from 0 to 2048 [ 1076.517542][ T1159] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1076.809253][ T1159] usb 3-1: Using ep0 maxpacket: 16 [ 1076.809976][T12228] usb 4-1: Product: syz [ 1076.815975][ T1159] usb 3-1: config index 0 descriptor too short (expected 65532, got 18) [ 1076.819030][T12228] usb 4-1: Manufacturer: syz [ 1076.845354][T16708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1077.081447][T16722] loop0: detected capacity change from 0 to 128 [ 1077.355723][T16708] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1077.372980][T16708] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 1077.405189][T16708] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1077.405189][T16708] [ 1077.415254][T16708] EXT4-fs (loop5): Total free blocks count 0 [ 1077.421400][T16708] EXT4-fs (loop5): Free/Dirty block details [ 1077.427386][T16708] EXT4-fs (loop5): free_blocks=2415919504 [ 1077.433156][T16708] EXT4-fs (loop5): dirty_blocks=48 [ 1077.438372][T16708] EXT4-fs (loop5): Block reservation details [ 1077.444604][T16708] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 1077.510825][ T1159] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1078.959508][ T1159] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1079.494243][ T1159] usb 3-1: string descriptor 0 read error: -71 [ 1079.512870][T12228] usb 4-1: SerialNumber: syz [ 1079.517748][ T1159] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1079.527868][T12228] r8152-cfgselector 4-1: config 0 descriptor?? [ 1079.537915][T12228] r8152-cfgselector 4-1: can't set config #0, error -71 [ 1079.547645][T12228] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1079.548217][ T1159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.555473][T12228] r8152-cfgselector 4-1: USB disconnect, device number 31 [ 1079.580604][ T1159] r8152-cfgselector 3-1: config 0 descriptor?? [ 1079.700223][T16734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5014'. [ 1079.709727][T16734] netlink: 'syz.4.5014': attribute type 2 has an invalid length. [ 1079.956803][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5017'. [ 1079.966484][T16733] netlink: 'syz.2.5017': attribute type 2 has an invalid length. [ 1179.614995][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1179.622009][ C1] (detected by 1, t=10002 jiffies, g=92657, q=302 ncpus=2) [ 1179.629300][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295055178-4295045176), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1179.642663][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g92657 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1179.653867][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1179.663841][ C1] rcu: RCU grace-period kthread stack dump: [ 1179.669725][ C1] task:rcu_preempt state:R running task stack:28288 pid:14 ppid:2 flags:0x00004000 [ 1179.680523][ C1] Call Trace: [ 1179.683802][ C1] [ 1179.686731][ C1] __schedule+0xba6/0x1500 [ 1179.691335][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1179.697327][ C1] schedule+0xbd/0x170 [ 1179.701397][ C1] schedule_timeout+0x159/0x340 [ 1179.706248][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 1179.711621][ C1] ? __cfi_process_timeout+0x10/0x10 [ 1179.716976][ C1] ? prepare_to_swait_event+0x308/0x320 [ 1179.722611][ C1] rcu_gp_fqs_loop+0x2e9/0x10c0 [ 1179.727529][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 1179.732774][ C1] ? rcu_gp_init+0xf30/0xf30 [ 1179.737373][ C1] rcu_gp_kthread+0x99/0x390 [ 1179.741964][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 1179.747159][ C1] ? __kasan_check_read+0x11/0x20 [ 1179.752268][ C1] ? __kthread_parkme+0x142/0x180 [ 1179.757297][ C1] kthread+0x281/0x320 [ 1179.761370][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 1179.766565][ C1] ? __cfi_kthread+0x10/0x10 [ 1179.771154][ C1] ret_from_fork+0x1f/0x30 [ 1179.775578][ C1] [ 1179.778593][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1179.784912][ C1] CPU: 1 PID: 16731 Comm: syz.2.5017 Not tainted syzkaller #0 [ 1179.792364][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1179.802418][ C1] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 1179.808238][ C1] Code: 74 12 48 89 fb 48 c7 c7 00 d5 0d 87 e8 21 b6 b4 fc 48 89 df 48 83 3d 66 6a 0b 02 00 74 26 e8 13 0d 00 00 90 fb bf 01 00 00 00 a3 3b 4a fc 65 8b 05 14 03 00 7b 85 c0 74 03 5b 5d c3 e8 14 12 [ 1179.827844][ C1] RSP: 0018:ffffc90000de7bb0 EFLAGS: 00000246 [ 1179.833974][ C1] RAX: 0000000000000001 RBX: 0000000000000021 RCX: dffffc0000000000 [ 1179.841954][ C1] RDX: ffffc90003f14000 RSI: 000000000007ffff RDI: 0000000000000001 [ 1179.849972][ C1] RBP: ffffc90000de7bb8 R08: ffffc90000de7dff R09: 1ffff920001bcfbf [ 1179.857953][ C1] R10: dffffc0000000000 R11: fffff520001bcfc0 R12: dffffc0000000000 [ 1179.865927][ C1] R13: 1ffff110228b8b74 R14: 000000001c000004 R15: ffff8881145c5ba0 [ 1179.873896][ C1] FS: 00007fdafe7f96c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1179.882854][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1179.889441][ C1] CR2: 0000001b3441bff8 CR3: 000000011e26a000 CR4: 00000000003506a0 [ 1179.897414][ C1] Call Trace: [ 1179.900687][ C1] [ 1179.903619][ C1] get_signal+0x12a4/0x1520 [ 1179.908137][ C1] arch_do_signal_or_restart+0xd1/0x1140 [ 1179.913776][ C1] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 1179.919680][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1179.925839][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 1179.931139][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 1179.936862][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 1179.942373][ C1] do_syscall_64+0x58/0xa0 [ 1179.946856][ C1] ? clear_bhb_loop+0x30/0x80 [ 1179.951542][ C1] ? clear_bhb_loop+0x30/0x80 [ 1179.956247][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.962165][ C1] RIP: 0033:0x7fdafd99ce59 [ 1179.966594][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.986200][ C1] RSP: 002b:00007fdafe7f9028 EFLAGS: 00000246 [ 1179.992272][ C1] RAX: 000000000000000b RBX: 00007fdafdc15fa0 RCX: 00007fdafd99ce59 [ 1180.000244][ C1] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006 [ 1180.008217][ C1] RBP: 00007fdafda32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1180.016196][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.024176][ C1] R13: 00007fdafdc16038 R14: 00007fdafdc15fa0 R15: 00007ffe78e16ff8 [ 1180.032155][ C1] [ 1288.955011][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 209s! [ 1288.963969][ C0] Showing busy workqueues and worker pools: [ 1288.969873][ C0] workqueue events: flags=0x0 [ 1288.974542][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=13/256 refcnt=14 [ 1288.974586][ C0] pending: bpf_prog_free_deferred, psi_avgs_work, key_garbage_collector, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 1289.009542][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 1289.009591][ C0] pending: vmstat_shepherd, kfree_rcu_monitor [ 1289.009854][ C0] workqueue events_long: flags=0x0 [ 1289.029049][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=11/256 refcnt=12 [ 1289.029103][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work [ 1289.029429][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 1289.029469][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 1289.029534][ C0] workqueue events_unbound: flags=0x2 [ 1289.081145][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=5/512 refcnt=7 [ 1289.081189][ C0] in-flight: 14008:fsnotify_connector_destroy_workfn fsnotify_connector_destroy_workfn [ 1289.081356][ C0] pending: fsnotify_mark_destroy_workfn, toggle_allocation_gate, flush_memcg_stats_dwork [ 1289.081467][ C0] workqueue events_power_efficient: flags=0x80 [ 1289.114932][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 1289.114980][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_managed_work, neigh_managed_work, neigh_periodic_work, gc_worker [ 1289.136622][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.136670][ C0] pending: check_lifetime [ 1289.136774][ C0] workqueue rcu_gp: flags=0x8 [ 1289.153731][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.153774][ C0] pending: process_srcu [ 1289.153873][ C0] workqueue netns: flags=0xe000a [ 1289.170932][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 [ 1289.170969][ C0] in-flight: 13985:cleanup_net [ 1289.171114][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1289.188429][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.188475][ C0] pending: vmstat_update [ 1289.188514][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.188549][ C0] pending: vmstat_update [ 1289.188581][ C0] workqueue writeback: flags=0x4a [ 1289.218096][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 1289.218137][ C0] pending: wb_workfn, wb_workfn, wb_workfn [ 1289.218270][ C0] workqueue kblockd: flags=0x18 [ 1289.236439][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=4/256 refcnt=5 [ 1289.236482][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 1289.236674][ C0] workqueue usb_hub_wq: flags=0x4 [ 1289.260055][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 1289.260098][ C0] in-flight: 12228:hub_event hub_event [ 1289.260222][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 1289.260257][ C0] in-flight: 1159:hub_event hub_event [ 1289.260310][ C0] workqueue dm_bufio_cache: flags=0x8 [ 1289.292426][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.292474][ C0] pending: work_fn [ 1289.292572][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 1289.309888][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 1289.309942][ C0] pending: addrconf_verify_work [ 1289.310029][ C0] inactive: addrconf_verify_work [ 1289.310050][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 1289.310087][ C0] pending: addrconf_verify_work [ 1289.310108][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 1289.310167][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.354897][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1289.354948][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 1289.371286][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.376317][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1289.376353][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 1289.376409][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1289.397803][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1289.397841][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 1289.397906][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1289.419378][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.419423][ C0] pending: wg_packet_encrypt_worker [ 1289.419464][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.419499][ C0] pending: wg_packet_encrypt_worker [ 1289.419530][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1289.450854][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.450901][ C0] pending: wg_packet_handshake_send_worker [ 1289.450936][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1289.469630][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.469677][ C0] pending: wg_packet_encrypt_worker [ 1289.469716][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.469751][ C0] pending: wg_packet_encrypt_worker [ 1289.469782][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1289.501103][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.501145][ C0] pending: wg_packet_handshake_send_worker [ 1289.501179][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1289.519883][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.519938][ C0] pending: wg_packet_encrypt_worker [ 1289.519978][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.520015][ C0] pending: wg_packet_encrypt_worker [ 1289.520049][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1289.551381][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.551424][ C0] pending: wg_packet_handshake_send_worker [ 1289.551459][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1289.570064][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.570106][ C0] pending: wg_packet_encrypt_worker [ 1289.570147][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.570180][ C0] pending: wg_packet_encrypt_worker [ 1289.570213][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1289.601782][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.601829][ C0] pending: wg_packet_encrypt_worker [ 1289.601867][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.601908][ C0] pending: wg_packet_encrypt_worker [ 1289.601941][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1289.633547][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.633592][ C0] pending: wg_packet_encrypt_worker [ 1289.633631][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.633668][ C0] pending: wg_packet_encrypt_worker [ 1289.633701][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1289.665295][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.665338][ C0] pending: wg_packet_encrypt_worker [ 1289.665379][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.665412][ C0] pending: wg_packet_encrypt_worker [ 1289.665444][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1289.697096][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.697147][ C0] pending: wg_packet_encrypt_worker [ 1289.697190][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.697226][ C0] pending: wg_packet_encrypt_worker [ 1289.697262][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1289.728976][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.729028][ C0] pending: wg_packet_encrypt_worker [ 1289.729069][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.729106][ C0] pending: wg_packet_encrypt_worker [ 1289.729141][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1289.760830][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.760880][ C0] pending: wg_packet_encrypt_worker [ 1289.760921][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.760955][ C0] pending: wg_packet_encrypt_worker [ 1289.760987][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1289.792558][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.792602][ C0] pending: wg_packet_encrypt_worker [ 1289.792639][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.792674][ C0] pending: wg_packet_encrypt_worker [ 1289.792703][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1289.824114][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1289.824156][ C0] pending: wg_packet_handshake_send_worker [ 1289.824191][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1289.842879][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1289.842920][ C0] pending: wg_packet_encrypt_worker [ 1289.842959][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=210s workers=11 idle: 15525 10039 322 9117 315 6 19 15763 1263 489 [ 1289.843064][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=209s workers=9 idle: 8757 24 39 16593 323 60 647 401 [ 1289.843142][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=210s workers=229 idle: 13913 13111 14010 13932 13931 14005 13919 13487 13924 14069 8 14035 13945 14057 13933 1183 13923 14059 12931 14093 13995 13999 14020 13980 13422 14034 43 14063 13979 13927 13965 14048 13944 13912 14014 14098 12934 13957 13952 14032 13971 13920 14074 14062 13915 14091 14043 14052 13935 12921 14105 14046 13976 14018 13998 13916 13977 13981 12927 14053 13975 14040 13968 12924 13914 14100 13988 14087 13490 14067 14011 12937 14016 13992 13991 14104 13936 308 13983 14109 13959 14075 14077 13950 13483 13953 13989 13963 13930 2424 11382 10 14061 13939 14095 14044 14518 14002 14025 14055 13423 13928 11241 12929 14028 14015 13978 14058 12932 13492 13482 14088 14096 14001 13946 14070 12933 14066 14107 14073 14004 14000 13938 12928 13951 14089 13994 14036 14009 2422 13322 13982 14094 13925 14086 14037 14047 14103 13937 14031 13955 14026 12925 12926 14021 14023 14050 13956 13942 14108 13940 12922 14051 14017 [ 1289.844029][ C0] 12920 13987 14085 320 14084 12930 14006 14092 14049 14029 13922 14064 13984 14082 13949 14038 13964 14078 12923 13926 14027 14090 14039 14045 2423 13961 13929 13973 13970 14076 14690 14080 13941 13419 13921 13943 13918 13969 14071 13993 14007 14042 13934 14054 13966 13917 13996 14079 12935 13948 14003 14081 13484 14097 14065 13972 13990 11305 14060 13947 13958 14056 14072 14033 14013 14041 14019 14024 13954 13986 14106 13974 13997