last executing test programs: 46.557392859s ago: executing program 0 (id=1006): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 43.614011197s ago: executing program 0 (id=1014): removexattr(0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioperm(0x1, 0x7, 0x3ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2000000, 0x2}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000680)={[{@usrquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f45"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x26, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r4 = dup(r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) 43.323725931s ago: executing program 0 (id=1015): removexattr(0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioperm(0x1, 0x7, 0x3ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2000000, 0x2}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000680)={[{@usrquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f45"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x26, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r4 = dup(r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) 41.840761561s ago: executing program 0 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 41.777845774s ago: executing program 0 (id=1019): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='7', 0x1) write(r0, &(0x7f0000000300)='bfq', 0x3) lseek(0xffffffffffffffff, 0x0, 0x1) 41.517651697s ago: executing program 0 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timerfd_create(0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fstat(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) 25.890908746s ago: executing program 32 (id=1021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timerfd_create(0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) fstat(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) 11.447834749s ago: executing program 1 (id=1080): creat(&(0x7f0000000180)='./file0\x00', 0x18b) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x18b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x200, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x2f9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a2e, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 11.447097579s ago: executing program 2 (id=1081): removexattr(0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioperm(0x1, 0x7, 0x3ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2000000, 0x2}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000680)={[{@usrquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f45"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x26, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)="fb", 0x1, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r4 = dup(r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) 11.446234569s ago: executing program 4 (id=1083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1481, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x80, 0x42, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001400)={0x3, 0x0, [{0xd, 0x8, 0x5, 0x2, 0x90, 0x2, 0x7}, {0x80000008, 0x401, 0x1, 0x0, 0xb, 0x7fff, 0x9}, {0x7, 0x79e0, 0x1, 0x10001, 0x6e13fce9, 0x6, 0x7fff}]}) 9.869025164s ago: executing program 1 (id=1084): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000003c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)=""/187, 0xbb) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/igmp6\x00') read$FUSE(r3, &(0x7f0000002a80)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) openat$cgroup(r5, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r6, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) 9.859040354s ago: executing program 2 (id=1085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000000900000500000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b7000000180000008500000050000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @sk_skb}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000240)={0xfff, 0x9, 0x1, 0x1}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000d80)={{0xeeef0000, 0x200000, 0x4, 0x8d, 0xe6, 0x1, 0xf0, 0x9, 0x3, 0xfb, 0x3c, 0x1}, {0xd000, 0xc000, 0x0, 0x1, 0x7, 0x2, 0x7, 0x3, 0x7, 0x8, 0x7, 0x9}, {0x4000, 0x54000, 0xa, 0xe0, 0x20, 0xbf, 0xfe, 0xf6, 0x2, 0xe3, 0x3, 0xd}, {0x0, 0xf000, 0xc, 0x0, 0x10, 0x4, 0x6, 0x7, 0x5, 0x1, 0x3, 0x6}, {0xd000, 0xffff1000, 0x3, 0x9, 0x7f, 0x8, 0x6, 0x0, 0x1, 0x3, 0xe, 0xd}, {0xd000, 0x100000, 0xa, 0x0, 0xc8, 0x10, 0x7, 0x6, 0xfd, 0x6, 0xf3, 0x3}, {0x4, 0x8080000, 0xb, 0x9, 0x0, 0x7, 0x10, 0x7, 0x6, 0x2, 0x3, 0x9}, {0xdddd1000, 0x8000000, 0xf, 0x32, 0x8, 0x8, 0x1, 0x80, 0x8, 0x81, 0xd6}, {0x8017000, 0x38}, {0x41000, 0x8}, 0xa0000008, 0x0, 0xa000, 0x100020, 0x2, 0xc00, 0x0, 0x0, [0x8]}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0100000000000000000000000000507b8ed70000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) eventfd(0x3) 9.841463975s ago: executing program 3 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000ebff001800000018000000080000000000000000000002100000000000"], 0x0, 0x38}, 0x28) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0), 0x7, 0x623, &(0x7f0000000840)="$eJzs3c9rHGUfAPDvzCZ5kzSvaaWILYoBDy1I0yQWq16s9WAPBQv2IOKhoUlq6PYHTQq2FkxBQUFBxKtIL/4D3qV3byKoN89CFakoqGRldmfb7WY33abZ3Tbz+cAm8zwzk+f5zuyz88xMnp0ACmsi+5FG7IpYPZFEjDfMG4vazIl8uZu/XzmZvZKoVF7/LYkkz6svn+S/t+WJ4Yj47nDEo6W15S5dunx6tlypeS9i//KZ8/uXLl3et3hm9tT8qfmz0zPPHzg49cL0gelNiXNb/vvI0dee+OT9t59b+L68L4lDcXzw3bloimOzTMRErOYhNuYPRMTBbKLFdnnYbIEQCq2Uvx8HI+KxGI9SNVUzHosf97VyQFdVShEVoKAS7R8Kqt4PqJ/bd3YefLzLvZLeufFy7QRobfwDtWsjMVw9Nxq9mTScGdWubWzfhPKzMv69svuL7BV3XIf469beGdiEctpZuRoRj7eKP6nWbXs10iz+9I56JCsRUxExlNfvlfuoQ9Iw3Y3rMOvZaPxpRBzKf2f5hzdY/kRTutfxA1BM17P+T3YgX8lSt49/Wd+j3v+JFv2fsRbHro3o9/Gvff+vfrwfrl4jT5v6YVmf5VjrPznYnPHzR0c+a1d+Y/8ve2Xl1/uCvXDjasTupvg/zILN+z9Z/Enz/h+ubY8Thzor49Uffj3Sbl6/469ci9jT8vzndq80m1rn/uT+hcXy/FTtZ8syvvn2ra/ald/v+LP9P9om/ob9nzavl22T8x2W8fWxa2fazRtrGf9Kw9lp+stQUjvfHMrXeWd2efnCdMRQcrSWkTbkz6xfl/oy9b+Rxb/36dbtv/H937wBRuofmR04/8bpm+3mbWT/N9xMXq10WId2svjn7r7/13z+Z3mfdljGn29efLLdvPXiH7mfwAAAAAAAAKCA0uo92CSdvDWdppOTtfGyO2M0LZ9bWn5m4dzFs3MRe6v/DzmY1u90j9fSSZaezv8ftp6eaUo/GxE7IuLz0kg1PXnyXHmu38EDAAAAAAAAAAAAAAAAAADAA2JbPv6//pzqP0q18f9AQXTzAXPAg037h2Iq1dv/mkc8AUXg+A/Fpf1DcWn/UFzaPxSX9g/Fpf1DcWn/UFzaPwAAAABsSTueuv5TEhErL45UX5mhfJ4RQbC1Dfa7AkDflPpdAaBvbt3619mHwumo//93/uWA3a8O0AdJq8xq56CyfuO/3nJNAAAAAAAAAAAAAKAL9uxqP/7f2GDY2gz7g+K6j/H/vjoAHnIb/+r/oU2tB9B7bc/xd34wM9fbqgB9crdR/MPtZhj/DwAAAAAAAAAAAAA9M1Z9JelkPhZ4LNJ0cjLi/xGxPQaThcXy/FREPBIRP5YG/5elp/tdaQAAAAAAAAAAAAAAAAAAANhili5dPj1bLs9faJz4Z03O1p6oPwV1vWVG4+7LdDDxUtzjWpH0frOMRESvylqt9Hp3DzTkJBEr2V59MN6HS9GQM7A5u2Akf9/e8+p9+kACAAAAAAAAAAAAAAAAAIACaxh73NruL3tcIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovdvP/+/eRL9jBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8FAAD//+yLQbE=") syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 9.840622375s ago: executing program 4 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) setreuid(0xffffffffffffffff, 0xee01) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.218552972s ago: executing program 2 (id=1088): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) listxattr(0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x1) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x431]}, 0x8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r5, &(0x7f0000006680)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r6 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000009c00000018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000030850000008a000000bca900000000000035090100000000009500500000000006bf9800000000000036080000020000008500000007000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 8.217711642s ago: executing program 3 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000ebff001800000018000000080000000000000000000002100000000000000e41ad99a206ffa9305f5f006100000000d0381b8fbd1a9418950e4493d5af9b7d804b8341f6a69899cb18e8e480"], 0x0, 0x38}, 0x28) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000640)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x63}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 8.214840162s ago: executing program 4 (id=1095): removexattr(0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioperm(0x1, 0x7, 0x3ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2000000, 0x2}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000680)={[{@usrquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x1) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) openat(0xffffffffffffff9c, 0x0, 0x2141, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="7f45"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x26, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)="fb", 0x1, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r4 = dup(r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) 6.290332053s ago: executing program 1 (id=1090): r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=0xffffffffffffffff, 0x24, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setownex(r1, 0xf, &(0x7f0000000540)={0x2, r2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x4}, 0x3}) write(0xffffffffffffffff, &(0x7f0000000480)="1c0000001a009b8a14000000", 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000440)=[{0x6, 0x7c, 0x0, 0x7fff0000}]}) waitid(0x1, 0x0, 0x0, 0x40000008, 0xfffffffffffffffd) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000580)={[{@uuid_null}, {@xino_off}], [{@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x39, 0x35, 0x36, 0x63, 0x36, 0x37, 0x63], 0x2d, [0x62, 0x64, 0x62, 0x33], 0x2d, [0x39, 0x38, 0x36, 0x61], 0x2d, [0x65, 0x30, 0xe9dd0efb27b5a2dd, 0x36], 0x2d, [0x30, 0x2, 0x63, 0x68, 0x36, 0x34, 0x31, 0x33]}}}]}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {0x1, 0x3}, [{0x2, 0xf}], {}, [], {0x10, 0x2}, {0x20, 0x3}}, 0x2c, 0x3) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b0000000000", 0x12) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 6.270861393s ago: executing program 3 (id=1091): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x7}, [], {0x4, 0x1}, [{0x8, 0x1}], {0x10, 0x4}, {0x20, 0x4}}, 0x2c, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x85) 4.260211089s ago: executing program 1 (id=1092): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2200400, &(0x7f0000001040)=ANY=[@ANYRES8=0x0], 0xfe, 0x15a, &(0x7f0000000200)="$eJzs0L9rGmEcx/H3c/f0FKrYUgtSaBU61FYKrYVupXilUqH2oKVLJ8Fef4BiiJC4JRKyZRCyOuTHGgKZMmp0CAk65Z/I4hbIaLg7ExPif5Dva7vP9/l+nuP5/GGYVkx9qlXn5t163f2d+u4U8z9OO52cl1vQ2LsxD853c/APTVfDqAle3I/Cn/8V1yjXKt73KAchwL4/yanGLu+z45qmhrcE++nn0HvsnzO4le1f/ecTDXYs6HsDjDfhhQX2wyDz+s4AkzDKmiw9NVktZJKPFDTamd2d42+Do8LrVx/dtWy+9TKSMDNLsIWtwof9vyfmZGs4KH51is7wXTb7/tpLsdxCf4kswC8F2usz8PssEs/0T1hRsO7fNTpQUaC3ce5UQ9OCRTMFKtkulxL3tkvxBwZmWnuTMTP4E8KzRkIIIYQQQgghhBBCCCGEEEIIIe66iwAAAP//aPdRFg==") chdir(&(0x7f0000000140)='./file0\x00') 4.23839265s ago: executing program 2 (id=1093): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x3}, 0x2c, 0x2, 0x0, 0x0, "77cdd5ec2fbc7a9ec4a453d493b56c7c14329ec7276f956b67944c3c74fa4e7197ca171b8de8de55252f560ae405bcfa7cf6dfdd4e660583b714a00b39113edb"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x400}) socket$can_bcm(0x1d, 0x2, 0x2) listen(0xffffffffffffffff, 0x89) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000500)={0x2e, 0x29, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3ad}}}, &(0x7f0000000300)=0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x8000, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2000, 0x3, 0xd8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8720, 0x1, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0x4, 0xfffefff7}}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x2000000, 0x0) 4.23450192s ago: executing program 3 (id=1094): creat(&(0x7f0000000180)='./file0\x00', 0x18b) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x18b) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x200, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x2f9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a2e, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.202444162s ago: executing program 4 (id=1096): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}, {@cache_mmap}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) 2.193002237s ago: executing program 1 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000000900000500000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b7000000180000008500000050000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @sk_skb}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000240)={0xfff, 0x9, 0x1, 0x1}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000d80)={{0xeeef0000, 0x200000, 0x4, 0x8d, 0xe6, 0x1, 0xf0, 0x9, 0x3, 0xfb, 0x3c, 0x1}, {0xd000, 0xc000, 0x0, 0x1, 0x7, 0x2, 0x7, 0x3, 0x7, 0x8, 0x7, 0x9}, {0x4000, 0x54000, 0xa, 0xe0, 0x20, 0xbf, 0xfe, 0xf6, 0x2, 0xe3, 0x3, 0xd}, {0x0, 0xf000, 0xc, 0x0, 0x10, 0x4, 0x6, 0x7, 0x5, 0x1, 0x3, 0x6}, {0xd000, 0xffff1000, 0x3, 0x9, 0x7f, 0x8, 0x6, 0x0, 0x1, 0x3, 0xe, 0xd}, {0xd000, 0x100000, 0xa, 0x0, 0xc8, 0x10, 0x7, 0x6, 0xfd, 0x6, 0xf3, 0x3}, {0x4, 0x8080000, 0xb, 0x9, 0x0, 0x7, 0x10, 0x7, 0x6, 0x2, 0x3, 0x9}, {0xdddd1000, 0x8000000, 0xf, 0x32, 0x8, 0x8, 0x1, 0x80, 0x8, 0x81, 0xd6}, {0x8017000, 0x38}, {0x41000, 0x8}, 0xa0000008, 0x0, 0xa000, 0x100020, 0x2, 0xc00, 0x0, 0x0, [0x8]}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0100000000000000000000000000507b8ed70000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) eventfd(0x3) 2.192275287s ago: executing program 2 (id=1098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.179645717s ago: executing program 3 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000ebff001800000018000000080000000000000000000002100000000000"], 0x0, 0x38}, 0x28) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0), 0x7, 0x623, &(0x7f0000000840)="$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") syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2.169605208s ago: executing program 4 (id=1100): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f00000003c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)=""/187, 0xbb) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/igmp6\x00') read$FUSE(r3, &(0x7f0000002a80)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x8) openat$cgroup(r5, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r6, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) 30.210549ms ago: executing program 1 (id=1101): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000013c0)=ANY=[@ANYBLOB='active_logs=4,nocheckpoint_merge,nodiscard,fsync_mode=posix,background_gc=sync,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000303444,\x00', @ANYRESDEC=0x0], 0x1, 0x5514, &(0x7f0000005880)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, &(0x7f00000001c0)=0x800) 15.29436ms ago: executing program 2 (id=1102): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="90f7ffff880a1c42e015bce1bae2ffffffff7af02cf23009970cc96916b530ab76e40da522aeaf", @ANYRES16=r1, @ANYBLOB="020028bd7000fbdbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) openat(r2, 0x0, 0x440002, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) r3 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89fe, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) epoll_create1(0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x210060, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x8000000000000000}}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x35, 0x37, 0x38, 0x64, 0x38, 0x38, 0x62], 0x2d, [0x65, 0x33, 0x65, 0x32], 0x2d, [0x32, 0x65, 0x36, 0x31], 0x2d, [0x65, 0x36, 0x30, 0x64], 0x2d, [0x33, 0x33, 0xf, 0x32, 0x33, 0x38, 0x30, 0x39]}}}, {@dont_measure}]}}, 0x1, 0x0, &(0x7f00000006c0)="c8d3803b5ce06c19db00ab3143e0fc5fcdd5b19a0b0f9f3c3a71643a1034d63f46b4a6f98daeaa37354a6e4f7d2f5b3b11e98172ec99dd3f3518095e5e210dc54a479f17336f15b10e97beed75b0ce4d829157c18db3fb4d96b13a3f4a70c977fd627cb53c") r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) mkdirat(r5, &(0x7f0000000740)='./file0\x00', 0x163) socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f0000000040)='encrypted\x00', 0x0, &(0x7f0000000200)="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"/472, 0x1d8, 0xffffffffffffffff) 10.25455ms ago: executing program 3 (id=1103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000000900000500000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000d80)={{0xeeef0000, 0x200000, 0x4, 0x8d, 0xe6, 0x1, 0xf0, 0x9, 0x3, 0xfb, 0x3c, 0x1}, {0xd000, 0xc000, 0x0, 0x1, 0x7, 0x2, 0x7, 0x3, 0x7, 0x8, 0x7, 0x9}, {0x4000, 0x54000, 0xa, 0xe0, 0x20, 0xbf, 0xfe, 0xf6, 0x2, 0xe3, 0x3, 0xd}, {0x0, 0xf000, 0xc, 0x0, 0x10, 0x4, 0x6, 0x7, 0x5, 0x1, 0x3, 0x6}, {0xd000, 0xffff1000, 0x3, 0x9, 0x7f, 0x8, 0x6, 0x0, 0x1, 0x3, 0xe, 0xd}, {0xd000, 0x100000, 0xa, 0x0, 0xc8, 0x10, 0x7, 0x6, 0xfd, 0x6, 0xf3, 0x3}, {0x4, 0x8080000, 0xb, 0x9, 0x0, 0x7, 0x10, 0x7, 0x6, 0x2, 0x3, 0x9}, {0xdddd1000, 0x8000000, 0xf, 0x32, 0x8, 0x8, 0x1, 0x80, 0x8, 0x81, 0xd6}, {0x8017000, 0x38}, {0x41000, 0x8}, 0xa0000008, 0x0, 0xa000, 0x100020, 0x2, 0xc00, 0x0, 0x0, [0x8]}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0100000000000000000000000000507b8ed70000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000340), &(0x7f0000000440)=r5}, 0x20) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 0s ago: executing program 4 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x100801, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x4, 0x8, 0x9}, 0x50) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r3, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000009a42ffffff7f0000000057a02c6bb4a8afdd55b057d1b81536fbdd13d4c4fc4e6e3223649035442a47fccedbea15ad2fcd7e0cb1215da7e6012a7c9db853055d6476ec60e8", 0x57) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) kernel console output (not intermixed with test programs): 02: inode #14: block 1886221359: comm syz.2.335: invalid block [ 240.943895][ T5640] EXT4-fs (loop2): Remounting filesystem read-only [ 240.956212][ T5640] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.335: couldn't read orphan inode 14 (err -117) [ 241.069914][ T5640] EXT4-fs (loop2): Remounting filesystem read-only [ 241.076523][ T5640] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 242.140134][ T5640] netlink: 96 bytes leftover after parsing attributes in process `syz.2.335'. [ 242.540223][ T5640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.335'. [ 243.198793][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 243.404035][ T5674] fuse: Unknown parameter 'group_id00000000000000000000' [ 243.637818][ T5667] loop1: detected capacity change from 0 to 4096 [ 243.789366][ T5667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 243.942318][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 244.177434][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 244.461800][ T7] usb 3-1: device not accepting address 7, error -71 [ 245.186341][ T5686] overlayfs: failed to resolve './file0': -2 [ 246.289502][ T5695] loop3: detected capacity change from 0 to 512 [ 246.521527][ T5695] Quota error (device loop3): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 246.538945][ T5695] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 246.604136][ T5705] fuse: Bad value for 'fd' [ 246.617738][ T5705] loop4: detected capacity change from 0 to 1024 [ 246.680466][ T5695] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.350: Failed to acquire dquot type 1 [ 247.114300][ T5705] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 1: comm syz.4.351: lblock 1 mapped to illegal pblock 1 (length 1) [ 247.129000][ T5705] Quota error (device loop4): write_blk: dquota write failed [ 247.136432][ T5705] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 247.146563][ T5705] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.351: Failed to acquire dquot type 0 [ 247.339418][ T5705] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.351: Freeing blocks not in datazone - block = 0, count = 4096 [ 247.359757][ T5705] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.351: Invalid inode bitmap blk 0 in block_group 0 [ 247.372717][ T5705] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 247.381868][ T5705] EXT4-fs (loop4): 1 orphan inode deleted [ 247.387685][ T5705] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 247.450665][ T4779] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 247.599688][ T5695] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.350: corrupted inode contents [ 247.618949][ T4779] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 247.627459][ T4779] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 0 [ 247.726475][ T5695] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #16: comm syz.3.350: mark_inode_dirty error [ 247.741139][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 247.786818][ T5695] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.350: corrupted inode contents [ 247.876852][ T5695] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.350: mark_inode_dirty error [ 247.949595][ T5695] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.350: corrupted inode contents [ 248.007139][ T5695] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 248.090405][ T5695] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #16: comm syz.3.350: corrupted inode contents [ 248.153219][ T5695] EXT4-fs error (device loop3): ext4_truncate:4325: inode #16: comm syz.3.350: mark_inode_dirty error [ 248.179614][ T5695] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 248.303388][ T5695] EXT4-fs (loop3): 1 truncate cleaned up [ 248.326636][ T5695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 248.374759][ T5695] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.464101][ T5695] EXT4-fs (loop3): unmounting filesystem. [ 248.997050][ T5723] loop4: detected capacity change from 0 to 512 [ 249.095446][ T5723] EXT4-fs error (device loop4): __ext4_iget:5102: inode #14: block 1886221359: comm syz.4.359: invalid block [ 249.285167][ T5729] Bluetooth: MGMT ver 1.22 [ 249.462719][ T5723] EXT4-fs (loop4): Remounting filesystem read-only [ 249.536752][ T5723] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.359: couldn't read orphan inode 14 (err -117) [ 249.825074][ T5723] EXT4-fs (loop4): Remounting filesystem read-only [ 249.857417][ T5723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 250.260033][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 250.995971][ T5742] fuse: Bad value for 'fd' [ 252.012159][ T5752] loop4: detected capacity change from 0 to 4096 [ 252.107280][ T5752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 252.222536][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 252.285586][ T5758] FAULT_INJECTION: forcing a failure. [ 252.285586][ T5758] name failslab, interval 1, probability 0, space 0, times 0 [ 252.300374][ T5757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 252.350783][ T5758] CPU: 1 PID: 5758 Comm: syz.2.368 Not tainted syzkaller #0 [ 252.358142][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 252.368245][ T5758] Call Trace: [ 252.371554][ T5758] [ 252.374536][ T5758] dump_stack_lvl+0x188/0x24e [ 252.379245][ T5758] ? show_regs_print_info+0x12/0x12 [ 252.384472][ T5758] ? load_image+0x410/0x410 [ 252.389040][ T5758] ? __might_sleep+0xd0/0xd0 [ 252.393654][ T5758] ? __lock_acquire+0x7c40/0x7c40 [ 252.398709][ T5758] ? __lock_acquire+0x1465/0x7c40 [ 252.403772][ T5758] should_fail_ex+0x390/0x4c0 [ 252.408511][ T5758] should_failslab+0x5/0x20 [ 252.413083][ T5758] slab_pre_alloc_hook+0x59/0x300 [ 252.418173][ T5758] ? __lock_acquire+0x1465/0x7c40 [ 252.423291][ T5758] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 252.429065][ T5758] __kmem_cache_alloc_node+0x4f/0x270 [ 252.434480][ T5758] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 252.440243][ T5758] __kmalloc+0xa3/0x240 [ 252.444446][ T5758] tomoyo_realpath_from_path+0xe2/0x5c0 [ 252.450053][ T5758] tomoyo_check_open_permission+0x212/0x440 [ 252.456022][ T5758] ? tomoyo_check_open_permission+0x1bf/0x440 [ 252.462178][ T5758] ? tomoyo_check_path_number_acl+0x280/0x280 [ 252.468332][ T5758] ? __lock_acquire+0x7c40/0x7c40 [ 252.473415][ T5758] ? __rwlock_init+0x140/0x140 [ 252.478208][ T5758] ? do_raw_spin_lock+0x128/0x2f0 [ 252.483265][ T5758] ? tomoyo_file_open+0xe9/0x170 [ 252.488263][ T5758] security_file_open+0x5e/0xa0 [ 252.493151][ T5758] do_dentry_open+0x2fd/0x10b0 [ 252.497959][ T5758] ? memcpy+0x3c/0x60 [ 252.501984][ T5758] path_openat+0x2674/0x2f10 [ 252.506632][ T5758] ? verify_lock_unused+0x140/0x140 [ 252.511875][ T5758] ? do_filp_open+0x420/0x420 [ 252.516614][ T5758] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.522650][ T5758] do_filp_open+0x1ee/0x420 [ 252.527200][ T5758] ? vfs_tmpfile+0x470/0x470 [ 252.531855][ T5758] ? _raw_spin_unlock+0x24/0x40 [ 252.536754][ T5758] ? alloc_fd+0x590/0x640 [ 252.541144][ T5758] do_sys_openat2+0x14b/0x4f0 [ 252.545876][ T5758] ? do_sys_open+0xe0/0xe0 [ 252.550339][ T5758] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.556365][ T5758] ? lock_chain_count+0x20/0x20 [ 252.561267][ T5758] __x64_sys_openat+0x135/0x160 [ 252.566166][ T5758] do_syscall_64+0x4c/0xa0 [ 252.570632][ T5758] ? clear_bhb_loop+0x60/0xb0 [ 252.575347][ T5758] ? clear_bhb_loop+0x60/0xb0 [ 252.580063][ T5758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.586000][ T5758] RIP: 0033:0x7fec5f19e159 [ 252.590446][ T5758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.610085][ T5758] RSP: 002b:00007fec5ffcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.618553][ T5758] RAX: ffffffffffffffda RBX: 00007fec5f425fa0 RCX: 00007fec5f19e159 [ 252.626564][ T5758] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 252.634568][ T5758] RBP: 00007fec5f23506b R08: 0000000000000000 R09: 0000000000000000 [ 252.642571][ T5758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.650580][ T5758] R13: 00007fec5f426038 R14: 00007fec5f425fa0 R15: 00007ffcfde03fa8 [ 252.658599][ T5758] [ 252.708436][ T5758] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.130269][ T5775] loop1: detected capacity change from 0 to 512 [ 254.027531][ T4330] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 254.100498][ T5775] EXT4-fs error (device loop1): __ext4_iget:5102: inode #14: block 1886221359: comm syz.1.374: invalid block [ 254.155168][ T5775] EXT4-fs (loop1): Remounting filesystem read-only [ 254.208839][ T5775] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.374: couldn't read orphan inode 14 (err -117) [ 254.268816][ T4330] usb 4-1: Using ep0 maxpacket: 16 [ 254.275991][ T4330] usb 4-1: unable to get BOS descriptor or descriptor too short [ 254.299085][ T5775] EXT4-fs (loop1): Remounting filesystem read-only [ 254.305656][ T5775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 254.329826][ T4330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.358791][ T4330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.404517][ T4330] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 254.448760][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.482839][ T4330] usb 4-1: Product: syz [ 254.487071][ T4330] usb 4-1: Manufacturer: syz [ 254.503428][ T4330] usb 4-1: SerialNumber: syz [ 254.519589][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 254.606803][ T5791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.380'. [ 254.650894][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 255.020731][ T4330] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 255.031948][ T4330] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 255.057472][ T5352] udevd[5352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.165162][ T4330] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 255.180551][ T4330] usb 4-1: USB disconnect, device number 7 [ 256.257862][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.264218][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.436693][ T5804] loop4: detected capacity change from 0 to 4096 [ 256.466991][ T5804] EXT4-fs: inline encryption not supported [ 256.467042][ T5804] EXT4-fs: inline encryption not supported [ 256.494972][ T5804] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 256.785986][ T5809] netlink: 68 bytes leftover after parsing attributes in process `syz.4.384'. [ 257.551171][ T5814] fuse: Bad value for 'fd' [ 257.564860][ T5814] loop2: detected capacity change from 0 to 1024 [ 258.941392][ T5814] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.377: lblock 1 mapped to illegal pblock 1 (length 1) [ 258.957203][ T5814] Quota error (device loop2): write_blk: dquota write failed [ 258.965409][ T5814] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 258.977276][ T5814] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.377: Failed to acquire dquot type 0 [ 258.988908][ T5814] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.377: Freeing blocks not in datazone - block = 0, count = 4096 [ 259.002663][ T5814] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.377: Invalid inode bitmap blk 0 in block_group 0 [ 259.016133][ T5236] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 259.021555][ T5819] loop3: detected capacity change from 0 to 128 [ 259.037619][ T5814] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 259.046995][ T5814] EXT4-fs (loop2): 1 orphan inode deleted [ 259.052891][ T5814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.078323][ T5819] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 259.087177][ T5819] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.142065][ T5236] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 259.283349][ T5236] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:22: Failed to release dquot type 0 [ 259.415519][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 259.424713][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 261.862479][ T5842] usb usb7: usbfs: process 5842 (syz.4.393) did not claim interface 0 before use [ 261.901778][ T5842] loop4: detected capacity change from 0 to 512 [ 264.416782][ T5842] EXT4-fs: failed to create workqueue [ 264.422363][ T5842] EXT4-fs (loop4): mount failed [ 265.426305][ T5853] loop2: detected capacity change from 0 to 128 [ 265.560010][ T5853] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 265.609262][ T5853] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.381919][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 269.522736][ T5884] fuse: Bad value for 'fd' [ 270.158782][ T4373] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 270.214752][ T5888] loop2: detected capacity change from 0 to 512 [ 270.271220][ T5888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 270.328946][ T5888] System zones: 1-12 [ 270.348750][ T4373] usb 5-1: Using ep0 maxpacket: 16 [ 270.355599][ T4373] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 270.369079][ T5888] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.407: missing EA_INODE flag [ 270.374447][ T4373] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.400947][ T4373] usb 5-1: config 0 has no interface number 0 [ 270.430413][ T4373] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 270.452278][ T5888] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.407: error while reading EA inode 12 err=-117 [ 270.458781][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.494124][ T4373] usb 5-1: Product: syz [ 270.498331][ T4373] usb 5-1: Manufacturer: syz [ 270.508557][ T5888] EXT4-fs (loop2): 1 orphan inode deleted [ 270.576933][ T4373] usb 5-1: SerialNumber: syz [ 270.585463][ T5888] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 270.681293][ T4373] usb 5-1: config 0 descriptor?? [ 270.719763][ T4373] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 270.726271][ T4373] usb 5-1: No valid video chain found. [ 270.736702][ T5901] loop1: detected capacity change from 0 to 128 [ 271.774282][ T4373] usb 5-1: USB disconnect, device number 7 [ 272.223001][ T5901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.331807][ T5901] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.552624][ T5923] fuse: Bad value for 'fd' [ 273.636999][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 273.693998][ T5924] loop4: detected capacity change from 0 to 1024 [ 273.856744][ T5924] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 1: comm syz.4.414: lblock 1 mapped to illegal pblock 1 (length 1) [ 273.882956][ T5924] Quota error (device loop4): write_blk: dquota write failed [ 273.893084][ T5924] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 273.907342][ T5924] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.414: Failed to acquire dquot type 0 [ 273.934348][ T5924] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.414: Freeing blocks not in datazone - block = 0, count = 4096 [ 273.949331][ T5924] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.414: Invalid inode bitmap blk 0 in block_group 0 [ 274.008942][ T5924] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 274.025374][ T5924] EXT4-fs (loop4): 1 orphan inode deleted [ 274.045764][ T5924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 274.098998][ T4621] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 274.138287][ T4621] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 274.147280][ T4621] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 0 [ 274.219104][ T5931] fuse: Bad value for 'fd' [ 274.321426][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 275.709356][ T5947] usb usb7: usbfs: process 5947 (syz.2.421) did not claim interface 0 before use [ 275.722504][ T5947] loop2: detected capacity change from 0 to 512 [ 275.794536][ T5947] EXT4-fs (loop2): orphan cleanup on readonly fs [ 275.809743][ T5947] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.421: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 275.908535][ T5947] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.421: ea_inode dec ref err=-117 [ 275.921559][ T5947] EXT4-fs (loop2): 1 orphan inode deleted [ 275.927335][ T5947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 277.072686][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 277.968299][ T5974] fuse: Bad value for 'fd' [ 278.028275][ T5975] loop2: detected capacity change from 0 to 128 [ 278.095300][ T5975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 278.549327][ T5975] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.723828][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 279.783758][ T5989] usb usb7: usbfs: process 5989 (syz.3.435) did not claim interface 0 before use [ 280.191715][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 280.751815][ T6003] loop3: detected capacity change from 0 to 512 [ 280.820060][ T6003] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 280.861271][ T6003] System zones: 1-12 [ 280.925658][ T6003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.441: missing EA_INODE flag [ 280.986048][ T6003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.441: error while reading EA inode 12 err=-117 [ 281.039091][ T6003] EXT4-fs (loop3): 1 orphan inode deleted [ 281.044912][ T6003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 281.239966][ T6014] netlink: 'syz.1.442': attribute type 4 has an invalid length. [ 281.374125][ T6017] loop4: detected capacity change from 0 to 512 [ 281.381237][ T6017] EXT4-fs: Ignoring removed nobh option [ 281.481143][ T6021] netlink: 'syz.1.442': attribute type 4 has an invalid length. [ 281.578841][ T6017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 281.587910][ T6017] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.607675][ T6017] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.443: corrupted inode contents [ 281.620009][ T6017] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.443: mark_inode_dirty error [ 281.635564][ T6017] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.443: corrupted inode contents [ 281.647780][ T6017] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.443: mark_inode_dirty error [ 281.906630][ T6014] device lo entered promiscuous mode [ 281.916345][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 281.947772][ T6014] device tunl0 entered promiscuous mode [ 282.009200][ T6014] device gre0 entered promiscuous mode [ 282.278423][ T6014] device gretap0 entered promiscuous mode [ 282.287769][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 282.366047][ T6014] device erspan0 entered promiscuous mode [ 282.448050][ T6014] device ip_vti0 entered promiscuous mode [ 283.690255][ T6053] usb usb7: usbfs: process 6053 (syz.4.453) did not claim interface 0 before use [ 284.111179][ T6056] loop1: detected capacity change from 0 to 256 [ 284.137497][ T6056] exfat: Unknown parameter 'fmas{' [ 284.742359][ T6061] loop4: detected capacity change from 0 to 512 [ 284.749819][ T6061] EXT4-fs: Ignoring removed nobh option [ 284.817954][ T6061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 284.827052][ T6061] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.841408][ T6061] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.458: corrupted inode contents [ 284.853462][ T6061] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.458: mark_inode_dirty error [ 284.865287][ T6061] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.458: corrupted inode contents [ 284.878056][ T6061] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.458: mark_inode_dirty error [ 284.939331][ T6065] loop2: detected capacity change from 0 to 512 [ 285.256680][ T6065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 285.438836][ T6065] System zones: 1-12 [ 285.459852][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 285.493434][ T6065] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.457: missing EA_INODE flag [ 285.674401][ T6065] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.457: error while reading EA inode 12 err=-117 [ 285.933040][ T6065] EXT4-fs (loop2): 1 orphan inode deleted [ 286.117157][ T6065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 286.170206][ T6079] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 287.843161][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 290.022556][ T6099] loop1: detected capacity change from 0 to 128 [ 290.114742][ T6099] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 290.133554][ T6099] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.654355][ T6109] usb usb7: usbfs: process 6109 (syz.4.470) did not claim interface 0 before use [ 290.707989][ T6110] loop4: detected capacity change from 0 to 512 [ 290.884656][ T6110] EXT4-fs (loop4): orphan cleanup on readonly fs [ 290.891328][ T6110] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.470: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 290.906577][ T6110] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.4.470: ea_inode dec ref err=-117 [ 290.919868][ T6110] EXT4-fs (loop4): 1 orphan inode deleted [ 290.925617][ T6110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 291.309438][ T6116] loop3: detected capacity change from 0 to 512 [ 291.316279][ T6116] EXT4-fs: Ignoring removed nobh option [ 291.359312][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 291.426400][ T6116] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 291.435477][ T6116] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.450622][ T6116] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.471: corrupted inode contents [ 291.465595][ T6116] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.471: mark_inode_dirty error [ 291.477672][ T6116] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.471: corrupted inode contents [ 291.489703][ T6116] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.471: mark_inode_dirty error [ 291.711708][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 292.789805][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 298.131571][ T6154] loop3: detected capacity change from 0 to 128 [ 298.249541][ T6154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 298.330384][ T6154] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.103710][ T6161] loop1: detected capacity change from 0 to 128 [ 299.186027][ T6161] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 299.224116][ T6161] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.910530][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 300.249451][ T6172] usb usb7: usbfs: process 6172 (syz.2.484) did not claim interface 0 before use [ 300.264706][ T6172] loop2: detected capacity change from 0 to 512 [ 301.510516][ T6172] EXT4-fs (loop2): orphan cleanup on readonly fs [ 301.517359][ T6172] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.484: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 301.532888][ T6172] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.484: ea_inode dec ref err=-117 [ 301.545827][ T6172] EXT4-fs (loop2): 1 orphan inode deleted [ 301.552417][ T6172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 302.463375][ T6176] FAULT_INJECTION: forcing a failure. [ 302.463375][ T6176] name fail_futex, interval 1, probability 0, space 0, times 0 [ 302.547680][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 302.599568][ T6176] CPU: 0 PID: 6176 Comm: syz.3.485 Not tainted syzkaller #0 [ 302.606925][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 302.617043][ T6176] Call Trace: [ 302.620361][ T6176] [ 302.623319][ T6176] dump_stack_lvl+0x188/0x24e [ 302.628041][ T6176] ? show_regs_print_info+0x12/0x12 [ 302.633278][ T6176] ? load_image+0x410/0x410 [ 302.637829][ T6176] ? key_instantiate_and_link+0x4b0/0x4b0 [ 302.643592][ T6176] should_fail_ex+0x390/0x4c0 [ 302.648324][ T6176] get_futex_key+0x1b1/0x1000 [ 302.653032][ T6176] ? key_payload_reserve+0x3b0/0x3b0 [ 302.658362][ T6176] ? futex_setup_timer+0xc0/0xc0 [ 302.663342][ T6176] futex_wake+0x123/0x4f0 [ 302.667708][ T6176] ? futex_wake_mark+0x150/0x150 [ 302.672694][ T6176] ? __se_sys_keyctl+0x162/0x870 [ 302.677673][ T6176] do_futex+0x2e2/0x320 [ 302.681873][ T6176] ? __ia32_sys_get_robust_list+0x100/0x100 [ 302.687809][ T6176] __se_sys_futex+0x381/0x410 [ 302.692528][ T6176] ? __x64_sys_futex+0xf0/0xf0 [ 302.697349][ T6176] ? __x64_sys_futex+0x1d/0xf0 [ 302.702156][ T6176] do_syscall_64+0x4c/0xa0 [ 302.706608][ T6176] ? clear_bhb_loop+0x60/0xb0 [ 302.711317][ T6176] ? clear_bhb_loop+0x60/0xb0 [ 302.716022][ T6176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.721967][ T6176] RIP: 0033:0x7fdf5f19e159 [ 302.726401][ T6176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.746034][ T6176] RSP: 002b:00007fdf5fff40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 302.754482][ T6176] RAX: ffffffffffffffda RBX: 00007fdf5f425fa8 RCX: 00007fdf5f19e159 [ 302.762509][ T6176] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf5f425fac [ 302.770511][ T6176] RBP: 00007fdf5f425fa0 R08: 0018ebfdf991a2d8 R09: 0000000000000000 [ 302.778509][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.786508][ T6176] R13: 00007fdf5f426038 R14: 00007ffd56b27300 R15: 00007ffd56b273e8 [ 302.794525][ T6176] [ 304.169710][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 306.530817][ T6201] loop2: detected capacity change from 0 to 128 [ 307.199553][ T6201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 307.298875][ T6201] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 307.680281][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 309.038506][ T6223] loop2: detected capacity change from 0 to 512 [ 309.048425][ T6223] EXT4-fs: Ignoring removed nobh option [ 309.136333][ T6218] loop3: detected capacity change from 0 to 128 [ 310.505228][ T6218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.462010][ T6223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 311.471330][ T6223] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.489504][ T6218] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 311.663338][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 311.682621][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 311.883067][ T6230] loop1: detected capacity change from 0 to 128 [ 312.441713][ T6230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 312.609669][ T6230] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.644183][ T6245] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 316.067425][ T6257] FAULT_INJECTION: forcing a failure. [ 316.067425][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 316.205275][ T6257] CPU: 0 PID: 6257 Comm: syz.2.505 Not tainted syzkaller #0 [ 316.212629][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 316.222719][ T6257] Call Trace: [ 316.226024][ T6257] [ 316.228974][ T6257] dump_stack_lvl+0x188/0x24e [ 316.233682][ T6257] ? show_regs_print_info+0x12/0x12 [ 316.238902][ T6257] ? load_image+0x410/0x410 [ 316.243426][ T6257] ? __lock_acquire+0x7c40/0x7c40 [ 316.248480][ T6257] should_fail_ex+0x390/0x4c0 [ 316.253220][ T6257] should_failslab+0x5/0x20 [ 316.257741][ T6257] slab_pre_alloc_hook+0x59/0x300 [ 316.262821][ T6257] kmem_cache_alloc+0x56/0x2f0 [ 316.267607][ T6257] ? key_alloc+0x302/0x1030 [ 316.272127][ T6257] key_alloc+0x302/0x1030 [ 316.276479][ T6257] keyring_alloc+0x41/0xa0 [ 316.280910][ T6257] install_process_keyring_to_cred+0x96/0x120 [ 316.286998][ T6257] keyctl_set_reqkey_keyring+0x10d/0x1b0 [ 316.292645][ T6257] __se_sys_keyctl+0x162/0x870 [ 316.297426][ T6257] ? __x64_sys_keyctl+0xc0/0xc0 [ 316.302323][ T6257] ? do_futex+0x310/0x320 [ 316.306668][ T6257] ? __ia32_sys_get_robust_list+0x100/0x100 [ 316.312583][ T6257] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 316.318587][ T6257] ? lock_chain_count+0x20/0x20 [ 316.323478][ T6257] ? lockdep_hardirqs_on+0x94/0x140 [ 316.328710][ T6257] ? __x64_sys_keyctl+0x1c/0xc0 [ 316.333592][ T6257] do_syscall_64+0x4c/0xa0 [ 316.338023][ T6257] ? clear_bhb_loop+0x60/0xb0 [ 316.342719][ T6257] ? clear_bhb_loop+0x60/0xb0 [ 316.347408][ T6257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.353322][ T6257] RIP: 0033:0x7fec5f19e159 [ 316.357761][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.377394][ T6257] RSP: 002b:00007fec5ffcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 316.385826][ T6257] RAX: ffffffffffffffda RBX: 00007fec5f425fa0 RCX: 00007fec5f19e159 [ 316.393814][ T6257] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 316.401807][ T6257] RBP: 00007fec5f23506b R08: 0000000000000000 R09: 0000000000000000 [ 316.409806][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.417786][ T6257] R13: 00007fec5f426038 R14: 00007fec5f425fa0 R15: 00007ffcfde03fa8 [ 316.425779][ T6257] [ 316.913027][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.919489][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.702885][ T6265] loop2: detected capacity change from 0 to 128 [ 317.843559][ T6265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 317.943946][ T6265] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.957057][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 319.419177][ T6276] loop1: detected capacity change from 0 to 512 [ 319.487295][ T6276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 319.529415][ T6276] System zones: 1-12 [ 319.605808][ T6276] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.509: missing EA_INODE flag [ 319.639174][ T6276] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.509: error while reading EA inode 12 err=-117 [ 319.703854][ T6276] EXT4-fs (loop1): 1 orphan inode deleted [ 319.738052][ T6276] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 320.883521][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 321.670138][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 323.559017][ T6295] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 325.444752][ T6313] loop2: detected capacity change from 0 to 128 [ 325.575649][ T6313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 325.585227][ T6313] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 325.882395][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 326.090641][ T6320] loop2: detected capacity change from 0 to 256 [ 326.149968][ T6320] exfat: Unknown parameter 'fmas{' [ 326.379439][ T6323] ip_tables: iptables: counters copy to user failed while replacing table [ 329.313666][ T6333] loop1: detected capacity change from 0 to 128 [ 329.354310][ T6333] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 329.419265][ T6333] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.274023][ T6345] loop2: detected capacity change from 0 to 512 [ 331.289738][ T6345] ext4: Unknown parameter 'fowner' [ 331.297032][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 332.993894][ T6355] FAULT_INJECTION: forcing a failure. [ 332.993894][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 333.076996][ T6358] loop4: detected capacity change from 0 to 128 [ 333.262924][ T6358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 333.272400][ T6358] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.298873][ T6355] CPU: 0 PID: 6355 Comm: syz.2.533 Not tainted syzkaller #0 [ 333.306210][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 333.316288][ T6355] Call Trace: [ 333.319587][ T6355] [ 333.322540][ T6355] dump_stack_lvl+0x188/0x24e [ 333.327256][ T6355] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 333.332956][ T6355] ? show_regs_print_info+0x12/0x12 [ 333.338185][ T6355] ? load_image+0x410/0x410 [ 333.342834][ T6355] should_fail_ex+0x390/0x4c0 [ 333.347551][ T6355] should_failslab+0x5/0x20 [ 333.352079][ T6355] slab_pre_alloc_hook+0x59/0x300 [ 333.357144][ T6355] ? key_alloc+0x346/0x1030 [ 333.361683][ T6355] __kmem_cache_alloc_node+0x4f/0x270 [ 333.367090][ T6355] ? key_alloc+0x346/0x1030 [ 333.371638][ T6355] __kmalloc_node_track_caller+0xa0/0x240 [ 333.377405][ T6355] kmemdup+0x27/0x60 [ 333.381334][ T6355] key_alloc+0x346/0x1030 [ 333.385700][ T6355] keyring_alloc+0x41/0xa0 [ 333.390142][ T6355] install_process_keyring_to_cred+0x96/0x120 [ 333.396254][ T6355] keyctl_set_reqkey_keyring+0x10d/0x1b0 [ 333.401924][ T6355] __se_sys_keyctl+0x162/0x870 [ 333.406738][ T6355] ? __x64_sys_keyctl+0xc0/0xc0 [ 333.411631][ T6355] ? do_futex+0x2e2/0x320 [ 333.415999][ T6355] ? __ia32_sys_get_robust_list+0x100/0x100 [ 333.421927][ T6355] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 333.427939][ T6355] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 333.433597][ T6355] ? lock_chain_count+0x20/0x20 [ 333.438496][ T6355] ? lockdep_hardirqs_on+0x94/0x140 [ 333.443721][ T6355] ? __x64_sys_keyctl+0x1c/0xc0 [ 333.448601][ T6355] do_syscall_64+0x4c/0xa0 [ 333.453048][ T6355] ? clear_bhb_loop+0x60/0xb0 [ 333.457748][ T6355] ? clear_bhb_loop+0x60/0xb0 [ 333.462462][ T6355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.468409][ T6355] RIP: 0033:0x7fec5f19e159 [ 333.472858][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.492491][ T6355] RSP: 002b:00007fec5ffcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 333.500917][ T6355] RAX: ffffffffffffffda RBX: 00007fec5f425fa0 RCX: 00007fec5f19e159 [ 333.508896][ T6355] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000e [ 333.516902][ T6355] RBP: 00007fec5f23506b R08: 0000000000000000 R09: 0000000000000000 [ 333.524896][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.532909][ T6355] R13: 00007fec5f426038 R14: 00007fec5f425fa0 R15: 00007ffcfde03fa8 [ 333.540932][ T6355] [ 333.736431][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 335.442709][ T6376] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 338.907216][ T6398] loop1: detected capacity change from 0 to 128 [ 338.942702][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 338.954834][ T6398] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.070893][ T6413] loop4: detected capacity change from 0 to 256 [ 341.143886][ T6413] exfat: Unknown parameter 'fmas{' [ 341.298865][ T4330] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 341.500523][ T4330] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 65132, setting to 64 [ 341.556451][ T4330] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.702505][ T4330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.799922][ T4330] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 341.887260][ T4330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.978703][ T4330] usb 3-1: config 0 descriptor?? [ 342.020101][ T6411] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.564611][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 342.642691][ T4330] usbhid 3-1:0.0: can't add hid device: -71 [ 342.666059][ T4330] usbhid: probe of 3-1:0.0 failed with error -71 [ 342.702121][ T4330] usb 3-1: USB disconnect, device number 9 [ 344.775026][ T6434] loop3: detected capacity change from 0 to 512 [ 344.782123][ T6434] EXT4-fs: Ignoring removed nobh option [ 346.569814][ T6434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 346.578861][ T6434] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.598611][ T6430] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.554: corrupted inode contents [ 346.615607][ T6430] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.554: mark_inode_dirty error [ 346.629309][ T6430] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.554: corrupted inode contents [ 346.641340][ T6430] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.554: mark_inode_dirty error [ 348.100137][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 349.484690][ T6452] ip_tables: iptables: counters copy to user failed while replacing table [ 350.223993][ T6457] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 350.369123][ T6454] fuse: Bad value for 'fd' [ 350.478333][ T6454] loop3: detected capacity change from 0 to 1024 [ 350.735552][ T6454] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.559: lblock 1 mapped to illegal pblock 1 (length 1) [ 350.840919][ T6454] Quota error (device loop3): write_blk: dquota write failed [ 350.848431][ T6454] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 350.858940][ T6454] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.559: Failed to acquire dquot type 0 [ 350.870975][ T6454] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.559: Freeing blocks not in datazone - block = 0, count = 4096 [ 350.884742][ T6454] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.559: Invalid inode bitmap blk 0 in block_group 0 [ 350.908202][ T6454] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 350.919568][ T6454] EXT4-fs (loop3): 1 orphan inode deleted [ 350.925350][ T6454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 350.958952][ T47] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 351.023041][ T47] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 351.102649][ T47] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 351.192751][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 355.474248][ T6490] usb usb7: usbfs: process 6490 (syz.1.573) did not claim interface 0 before use [ 355.489141][ T6490] loop1: detected capacity change from 0 to 512 [ 355.540058][ T6490] EXT4-fs (loop1): orphan cleanup on readonly fs [ 355.547178][ T6490] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.573: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 355.562881][ T6490] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.573: ea_inode dec ref err=-117 [ 355.575774][ T6490] EXT4-fs (loop1): 1 orphan inode deleted [ 355.581692][ T6490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 356.870954][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 358.939695][ T6501] fuse: Bad value for 'fd' [ 359.450621][ T6521] loop3: detected capacity change from 0 to 1024 [ 359.723451][ T4354] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 361.065892][ T6521] EXT4-fs: failed to create workqueue [ 361.159320][ T6521] EXT4-fs (loop3): mount failed [ 361.329008][ T4354] usb 2-1: device not accepting address 4, error -71 [ 362.250815][ T6547] usb usb7: usbfs: process 6547 (syz.1.587) did not claim interface 0 before use [ 362.265632][ T6547] loop1: detected capacity change from 0 to 512 [ 362.309559][ T6547] EXT4-fs (loop1): orphan cleanup on readonly fs [ 362.318798][ T6547] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:984: inode #11: comm syz.1.587: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 362.334273][ T6547] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.1.587: ea_inode dec ref err=-117 [ 362.347238][ T6547] EXT4-fs (loop1): 1 orphan inode deleted [ 362.353090][ T6547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 364.348365][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 367.675964][ T6571] ip_tables: iptables: counters copy to user failed while replacing table [ 368.362597][ T6585] fuse: Bad value for 'fd' [ 370.478812][ T22] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 370.720930][ T22] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 65132, setting to 64 [ 370.781102][ T22] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.896422][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 370.933815][ T22] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 371.004425][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.384282][ T22] usb 5-1: config 0 descriptor?? [ 372.430106][ T6606] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.515590][ T6614] ip_tables: iptables: counters copy to user failed while replacing table [ 372.941377][ T6623] fuse: Bad value for 'fd' [ 373.027346][ T6623] loop1: detected capacity change from 0 to 1024 [ 373.088774][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 373.094801][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 374.020099][ T22] usb 5-1: USB disconnect, device number 8 [ 374.051937][ T6623] EXT4-fs: failed to create workqueue [ 374.057360][ T6623] EXT4-fs (loop1): mount failed [ 374.271711][ T6637] fuse: Bad value for 'fd' [ 374.428006][ T6639] loop2: detected capacity change from 0 to 256 [ 374.480822][ T6639] exfat: Unknown parameter 'fmas{' [ 374.826192][ T6642] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 375.670931][ T6657] ip_tables: iptables: counters copy to user failed while replacing table [ 377.053830][ T6677] loop1: detected capacity change from 0 to 128 [ 377.261342][ T6677] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 377.281350][ T6677] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 377.725519][ T6682] usb usb7: usbfs: process 6682 (syz.4.630) did not claim interface 0 before use [ 377.740472][ T6682] loop4: detected capacity change from 0 to 512 [ 377.770005][ T6682] EXT4-fs (loop4): orphan cleanup on readonly fs [ 377.776829][ T6682] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.630: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 377.800939][ T6682] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.4.630: ea_inode dec ref err=-117 [ 377.813848][ T6682] EXT4-fs (loop4): 1 orphan inode deleted [ 377.819641][ T6682] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 377.873130][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 378.016690][ T6693] FAULT_INJECTION: forcing a failure. [ 378.016690][ T6693] name fail_futex, interval 1, probability 0, space 0, times 0 [ 378.113823][ T6693] CPU: 0 PID: 6693 Comm: syz.2.634 Not tainted syzkaller #0 [ 378.121180][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 378.131268][ T6693] Call Trace: [ 378.134637][ T6693] [ 378.137662][ T6693] dump_stack_lvl+0x188/0x24e [ 378.142467][ T6693] ? show_regs_print_info+0x12/0x12 [ 378.147698][ T6693] ? load_image+0x410/0x410 [ 378.152333][ T6693] ? key_instantiate_and_link+0x4b0/0x4b0 [ 378.158141][ T6693] should_fail_ex+0x390/0x4c0 [ 378.162921][ T6693] get_futex_key+0x1b1/0x1000 [ 378.167667][ T6693] ? key_payload_reserve+0x3b0/0x3b0 [ 378.172993][ T6693] ? futex_setup_timer+0xc0/0xc0 [ 378.177963][ T6693] futex_wake+0x123/0x4f0 [ 378.182327][ T6693] ? futex_wake_mark+0x150/0x150 [ 378.187297][ T6693] ? __se_sys_keyctl+0x162/0x870 [ 378.192304][ T6693] do_futex+0x2e2/0x320 [ 378.196518][ T6693] ? __ia32_sys_get_robust_list+0x100/0x100 [ 378.202469][ T6693] __se_sys_futex+0x381/0x410 [ 378.207194][ T6693] ? __x64_sys_futex+0xf0/0xf0 [ 378.211994][ T6693] ? __x64_sys_futex+0x1d/0xf0 [ 378.216794][ T6693] do_syscall_64+0x4c/0xa0 [ 378.221247][ T6693] ? clear_bhb_loop+0x60/0xb0 [ 378.226020][ T6693] ? clear_bhb_loop+0x60/0xb0 [ 378.230726][ T6693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.236703][ T6693] RIP: 0033:0x7fec5f19e159 [ 378.241621][ T6693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.261325][ T6693] RSP: 002b:00007fec5ffcc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 378.269774][ T6693] RAX: ffffffffffffffda RBX: 00007fec5f425fa8 RCX: 00007fec5f19e159 [ 378.277781][ T6693] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fec5f425fac [ 378.285779][ T6693] RBP: 00007fec5f425fa0 R08: 0039b458f01f1f2a R09: 0000000000000000 [ 378.293784][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.301792][ T6693] R13: 00007fec5f426038 R14: 00007ffcfde03ec0 R15: 00007ffcfde03fa8 [ 378.309806][ T6693] [ 378.352713][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.359058][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.366952][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 378.467155][ T6694] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 378.679861][ T6702] ip_tables: iptables: counters copy to user failed while replacing table [ 378.712382][ T6703] overlayfs: failed to clone upperpath [ 378.863571][ T6703] fuse: Bad value for 'fd' [ 378.972913][ T6710] loop4: detected capacity change from 0 to 128 [ 379.031882][ T6710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 379.138781][ T6710] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.554255][ T6723] loop1: detected capacity change from 0 to 256 [ 380.615858][ T6723] exfat: Unknown parameter 'fmas{' [ 381.003494][ T6728] loop2: detected capacity change from 0 to 128 [ 381.175120][ T6728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 381.189730][ T6728] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 381.370065][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 381.487955][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 381.663151][ T6736] usb usb7: usbfs: process 6736 (syz.4.646) did not claim interface 0 before use [ 382.225428][ T6741] FAULT_INJECTION: forcing a failure. [ 382.225428][ T6741] name fail_futex, interval 1, probability 0, space 0, times 0 [ 382.247183][ T6741] CPU: 1 PID: 6741 Comm: syz.4.647 Not tainted syzkaller #0 [ 382.254567][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 382.264658][ T6741] Call Trace: [ 382.267987][ T6741] [ 382.270959][ T6741] dump_stack_lvl+0x188/0x24e [ 382.275686][ T6741] ? show_regs_print_info+0x12/0x12 [ 382.280936][ T6741] ? load_image+0x410/0x410 [ 382.285478][ T6741] ? key_instantiate_and_link+0x4b0/0x4b0 [ 382.291234][ T6741] should_fail_ex+0x390/0x4c0 [ 382.295955][ T6741] get_futex_key+0x1b1/0x1000 [ 382.300672][ T6741] ? key_payload_reserve+0x3b0/0x3b0 [ 382.306017][ T6741] ? futex_setup_timer+0xc0/0xc0 [ 382.310990][ T6741] futex_wake+0x123/0x4f0 [ 382.315368][ T6741] ? futex_wake_mark+0x150/0x150 [ 382.320348][ T6741] ? __se_sys_keyctl+0x162/0x870 [ 382.325327][ T6741] do_futex+0x2e2/0x320 [ 382.329514][ T6741] ? __ia32_sys_get_robust_list+0x100/0x100 [ 382.335444][ T6741] __se_sys_futex+0x381/0x410 [ 382.340156][ T6741] ? __x64_sys_futex+0xf0/0xf0 [ 382.344945][ T6741] ? __x64_sys_futex+0x1d/0xf0 [ 382.349745][ T6741] do_syscall_64+0x4c/0xa0 [ 382.354179][ T6741] ? clear_bhb_loop+0x60/0xb0 [ 382.358878][ T6741] ? clear_bhb_loop+0x60/0xb0 [ 382.363575][ T6741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.369485][ T6741] RIP: 0033:0x7f6b8ab9e159 [ 382.373913][ T6741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.393526][ T6741] RSP: 002b:00007f6b8b9960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 382.401953][ T6741] RAX: ffffffffffffffda RBX: 00007f6b8ae25fa8 RCX: 00007f6b8ab9e159 [ 382.409940][ T6741] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6b8ae25fac [ 382.417922][ T6741] RBP: 00007f6b8ae25fa0 R08: 000a9de7be0e33c8 R09: 0000000000000000 [ 382.425902][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.433883][ T6741] R13: 00007f6b8ae26038 R14: 00007ffd6bd41bb0 R15: 00007ffd6bd41c98 [ 382.441883][ T6741] [ 382.904730][ T6745] fuse: Bad value for 'group_id' [ 383.444640][ T6762] loop1: detected capacity change from 0 to 512 [ 383.474380][ T6763] ip_tables: iptables: counters copy to user failed while replacing table [ 383.516972][ T6762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 383.592386][ T6762] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 383.721495][ T6762] EXT4-fs (loop1): 1 truncate cleaned up [ 383.778764][ T6762] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 384.565759][ T4292] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 384.686009][ T4292] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 384.762776][ T4292] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 384.812928][ T6771] usb usb7: usbfs: process 6771 (syz.2.657) did not claim interface 0 before use [ 384.826456][ T6771] loop2: detected capacity change from 0 to 512 [ 384.874699][ T6771] EXT4-fs (loop2): orphan cleanup on readonly fs [ 384.884036][ T6771] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.657: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 384.899721][ T6771] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.2.657: ea_inode dec ref err=-117 [ 384.912653][ T6771] EXT4-fs (loop2): 1 orphan inode deleted [ 384.918823][ T6771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 384.952513][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 386.299695][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 387.462911][ T6792] loop1: detected capacity change from 0 to 256 [ 387.493841][ T6792] exfat: Unknown parameter 'fmas{' [ 387.611584][ T6796] loop3: detected capacity change from 0 to 128 [ 387.740620][ T6796] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 387.750012][ T6796] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 388.000811][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 388.971448][ T6810] loop4: detected capacity change from 0 to 512 [ 388.978483][ T6810] EXT4-fs: Ignoring removed nobh option [ 389.170776][ T6810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 389.179953][ T6810] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.193974][ T6810] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.660: corrupted inode contents [ 389.206175][ T6810] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #2: comm syz.4.660: mark_inode_dirty error [ 389.221778][ T6810] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.660: corrupted inode contents [ 389.234210][ T6810] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.660: mark_inode_dirty error [ 389.349278][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 390.255922][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 391.629910][ T6838] loop3: detected capacity change from 0 to 512 [ 391.700609][ T6838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 391.732440][ T6838] System zones: 1-12 [ 391.760956][ T6838] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.675: missing EA_INODE flag [ 391.864023][ T6838] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.675: error while reading EA inode 12 err=-117 [ 391.929022][ T6838] EXT4-fs (loop3): 1 orphan inode deleted [ 391.934907][ T6838] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 393.815157][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 394.861505][ T6862] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 394.941662][ T6863] tipc: Started in network mode [ 395.020645][ T6863] tipc: Node identity 4, cluster identity 4711 [ 395.095491][ T6863] tipc: Node number set to 4 [ 395.465652][ T6867] loop4: detected capacity change from 0 to 16 [ 395.478442][ T6867] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 395.489323][ T6867] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 398.548764][ T126] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 398.788842][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 399.094970][ T6882] loop3: detected capacity change from 0 to 512 [ 399.332653][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 399.359550][ T126] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 399.367169][ T126] usb 4-1: can't read configurations, error -71 [ 400.047409][ T6901] loop1: detected capacity change from 0 to 1024 [ 400.054959][ T6901] ext4: Bad value for 'commit' [ 401.742698][ T6924] FAULT_INJECTION: forcing a failure. [ 401.742698][ T6924] name fail_futex, interval 1, probability 0, space 0, times 0 [ 401.802034][ T6924] CPU: 0 PID: 6924 Comm: syz.1.695 Not tainted syzkaller #0 [ 401.809471][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 401.819556][ T6924] Call Trace: [ 401.822875][ T6924] [ 401.825826][ T6924] dump_stack_lvl+0x188/0x24e [ 401.830548][ T6924] ? show_regs_print_info+0x12/0x12 [ 401.835779][ T6924] ? load_image+0x410/0x410 [ 401.840326][ T6924] ? key_instantiate_and_link+0x4b0/0x4b0 [ 401.846089][ T6924] should_fail_ex+0x390/0x4c0 [ 401.850812][ T6924] get_futex_key+0x1b1/0x1000 [ 401.855515][ T6924] ? key_payload_reserve+0x3b0/0x3b0 [ 401.860839][ T6924] ? futex_setup_timer+0xc0/0xc0 [ 401.865844][ T6924] futex_wake+0x123/0x4f0 [ 401.870225][ T6924] ? futex_wake_mark+0x150/0x150 [ 401.875200][ T6924] ? __se_sys_keyctl+0x162/0x870 [ 401.880183][ T6924] do_futex+0x2e2/0x320 [ 401.884368][ T6924] ? __ia32_sys_get_robust_list+0x100/0x100 [ 401.890296][ T6924] __se_sys_futex+0x381/0x410 [ 401.895008][ T6924] ? __x64_sys_futex+0xf0/0xf0 [ 401.899807][ T6924] ? __x64_sys_futex+0x1d/0xf0 [ 401.904592][ T6924] do_syscall_64+0x4c/0xa0 [ 401.909025][ T6924] ? clear_bhb_loop+0x60/0xb0 [ 401.913728][ T6924] ? clear_bhb_loop+0x60/0xb0 [ 401.918447][ T6924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.924365][ T6924] RIP: 0033:0x7f5bf559e159 [ 401.928808][ T6924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.948445][ T6924] RSP: 002b:00007f5bf63e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 401.956869][ T6924] RAX: ffffffffffffffda RBX: 00007f5bf5825fa8 RCX: 00007f5bf559e159 [ 401.964847][ T6924] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5bf5825fac [ 401.972838][ T6924] RBP: 00007f5bf5825fa0 R08: 00299c7b2766f988 R09: 0000000000000000 [ 401.980816][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.988800][ T6924] R13: 00007f5bf5826038 R14: 00007fff872c9dd0 R15: 00007fff872c9eb8 [ 401.996787][ T6924] [ 403.885790][ T6944] loop1: detected capacity change from 0 to 256 [ 403.929554][ T6944] exfat: Unknown parameter 'fmas{' [ 404.625399][ T6958] loop2: detected capacity change from 0 to 128 [ 404.631934][ T4330] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 404.692928][ T6958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 404.716322][ T6958] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.838767][ T4330] usb 5-1: Using ep0 maxpacket: 32 [ 404.846199][ T4330] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.886267][ T4330] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 404.894301][ T6966] overlayfs: missing 'lowerdir' [ 404.924503][ T6968] loop3: detected capacity change from 0 to 512 [ 405.069612][ T4330] usb 5-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 405.088183][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.096512][ T4330] usb 5-1: Product: syz [ 405.105439][ T4330] usb 5-1: Manufacturer: syz [ 406.589391][ T6968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 406.598934][ T6968] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.625657][ T4330] usb 5-1: SerialNumber: syz [ 406.878375][ T6954] loop4: detected capacity change from 0 to 512 [ 406.940082][ T6954] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.954413][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 407.026693][ T4330] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 407.067336][ T4330] usb 5-1: unit 4 not found! [ 407.121200][ T4276] udevd[4276]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.198465][ T4330] usb 5-1: USB disconnect, device number 9 [ 407.283903][ T6980] FAULT_INJECTION: forcing a failure. [ 407.283903][ T6980] name fail_futex, interval 1, probability 0, space 0, times 0 [ 407.316648][ T6980] CPU: 1 PID: 6980 Comm: syz.3.714 Not tainted syzkaller #0 [ 407.323991][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 407.334081][ T6980] Call Trace: [ 407.337402][ T6980] [ 407.340363][ T6980] dump_stack_lvl+0x188/0x24e [ 407.345082][ T6980] ? show_regs_print_info+0x12/0x12 [ 407.350352][ T6980] ? load_image+0x410/0x410 [ 407.354905][ T6980] ? key_instantiate_and_link+0x4b0/0x4b0 [ 407.360669][ T6980] should_fail_ex+0x390/0x4c0 [ 407.365404][ T6980] get_futex_key+0x1b1/0x1000 [ 407.370118][ T6980] ? key_payload_reserve+0x3b0/0x3b0 [ 407.375466][ T6980] ? futex_setup_timer+0xc0/0xc0 [ 407.380486][ T6980] futex_wake+0x123/0x4f0 [ 407.384906][ T6980] ? futex_wake_mark+0x150/0x150 [ 407.389934][ T6980] ? __se_sys_keyctl+0x162/0x870 [ 407.394959][ T6980] do_futex+0x2e2/0x320 [ 407.399181][ T6980] ? __ia32_sys_get_robust_list+0x100/0x100 [ 407.405171][ T6980] __se_sys_futex+0x381/0x410 [ 407.409906][ T6980] ? __x64_sys_futex+0xf0/0xf0 [ 407.414741][ T6980] ? __x64_sys_futex+0x1d/0xf0 [ 407.419580][ T6980] do_syscall_64+0x4c/0xa0 [ 407.424074][ T6980] ? clear_bhb_loop+0x60/0xb0 [ 407.428824][ T6980] ? clear_bhb_loop+0x60/0xb0 [ 407.433559][ T6980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.439520][ T6980] RIP: 0033:0x7fdf5f19e159 [ 407.443967][ T6980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.463599][ T6980] RSP: 002b:00007fdf5fff40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 407.472038][ T6980] RAX: ffffffffffffffda RBX: 00007fdf5f425fa8 RCX: 00007fdf5f19e159 [ 407.480035][ T6980] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf5f425fac [ 407.488024][ T6980] RBP: 00007fdf5f425fa0 R08: 000e31708df4e404 R09: 0000000000000000 [ 407.496019][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.504003][ T6980] R13: 00007fdf5f426038 R14: 00007ffd56b27300 R15: 00007ffd56b273e8 [ 407.512020][ T6980] [ 409.194662][ T6993] loop3: detected capacity change from 0 to 512 [ 409.201745][ T6993] EXT4-fs: Ignoring removed nobh option [ 409.251826][ T6993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 409.260902][ T6993] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.278492][ T6993] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.717: corrupted inode contents [ 409.291795][ T6993] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.717: mark_inode_dirty error [ 409.304321][ T6993] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.717: corrupted inode contents [ 409.316416][ T6993] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.717: mark_inode_dirty error [ 409.451429][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 410.132397][ T6986] loop1: detected capacity change from 0 to 40427 [ 410.169915][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 410.191295][ T6986] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 410.223698][ T6986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 410.269514][ T6986] F2FS-fs (loop1): invalid crc value [ 411.291597][ T6986] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 411.302397][ T7014] loop2: detected capacity change from 0 to 512 [ 411.446074][ T7014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 411.488905][ T7014] System zones: 1-12 [ 411.548927][ T7014] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.725: missing EA_INODE flag [ 411.651486][ T7014] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.725: error while reading EA inode 12 err=-117 [ 411.674393][ T7014] EXT4-fs (loop2): 1 orphan inode deleted [ 411.694314][ T7014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 412.024641][ T7025] overlayfs: failed to clone upperpath [ 415.682191][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 415.751943][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 416.293455][ T7054] loop4: detected capacity change from 0 to 512 [ 416.573448][ T7054] ext4: Unknown parameter 'fowner' [ 417.058436][ T7064] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 417.215332][ T7068] loop2: detected capacity change from 0 to 128 [ 417.257408][ T7068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 417.267233][ T7068] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.403987][ T7073] loop1: detected capacity change from 0 to 1024 [ 417.412831][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 417.465902][ T7073] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 417.587172][ T7073] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 417.731380][ T7079] device syzkaller0 entered promiscuous mode [ 417.752901][ T7081] tipc: Started in network mode [ 417.757812][ T7081] tipc: Node identity 4, cluster identity 4711 [ 417.839346][ T7081] tipc: Node number set to 4 [ 417.861531][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 417.971039][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.743'. [ 418.182414][ T7084] netlink: 'syz.1.745': attribute type 5 has an invalid length. [ 420.194926][ T7100] loop1: detected capacity change from 0 to 512 [ 420.293477][ T7100] ext4: Unknown parameter 'fowner' [ 420.696073][ T7102] loop1: detected capacity change from 0 to 512 [ 420.733985][ T7102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.782520][ T7102] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 420.857988][ T7102] EXT4-fs (loop1): 1 truncate cleaned up [ 420.969411][ T7102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 421.438818][ T4373] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 421.808727][ T4373] usb 3-1: Using ep0 maxpacket: 8 [ 421.822971][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 421.950198][ T7106] loop2: detected capacity change from 0 to 512 [ 423.522393][ T4373] usb 3-1: unable to get BOS descriptor or descriptor too short [ 423.571264][ T4373] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 424.246018][ T4373] usb 3-1: can't read configurations, error -71 [ 427.389584][ T7155] loop1: detected capacity change from 0 to 8192 [ 427.514591][ T7157] loop2: detected capacity change from 0 to 1024 [ 427.670263][ T7157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 428.189237][ T7157] EXT4-fs: Ignoring removed orlov option [ 429.119577][ T7157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 431.290123][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 433.441714][ T7196] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 433.738371][ T7199] loop2: detected capacity change from 0 to 128 [ 435.758984][ T7210] fuse: Bad value for 'fd' [ 435.823624][ T7210] loop3: detected capacity change from 0 to 1024 [ 435.919501][ T7199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 435.948244][ T7210] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.779: lblock 1 mapped to illegal pblock 1 (length 1) [ 435.964400][ T7210] Quota error (device loop3): write_blk: dquota write failed [ 435.971868][ T7210] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 435.982883][ T7210] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.779: Failed to acquire dquot type 0 [ 435.994525][ T7210] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.779: Freeing blocks not in datazone - block = 0, count = 4096 [ 436.008041][ T7210] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.779: Invalid inode bitmap blk 0 in block_group 0 [ 436.021946][ T5242] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 436.023372][ T7210] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 436.045152][ T7210] EXT4-fs (loop3): 1 orphan inode deleted [ 436.050975][ T7210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 436.088860][ T7199] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.170372][ T5242] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 436.245930][ T5242] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:23: Failed to release dquot type 0 [ 436.951261][ T7220] Illegal XDP return value 4294967294 on prog (id 16) dev syz_tun, expect packet loss! [ 437.043844][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 437.338442][ T7227] overlayfs: unrecognized mount option "uuid=null" or missing value [ 439.442499][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 439.791263][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.797621][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.831136][ T7241] loop4: detected capacity change from 0 to 128 [ 439.969439][ T7241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 439.989084][ T7241] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.271822][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 441.752561][ T7258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.923784][ T7273] fuse: Unknown parameter 'group_i00000000000000000000' [ 445.071514][ T7279] loop1: detected capacity change from 0 to 128 [ 445.307541][ T7279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 445.331505][ T7279] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.403329][ T7288] FAULT_INJECTION: forcing a failure. [ 445.403329][ T7288] name failslab, interval 1, probability 0, space 0, times 0 [ 445.520054][ T7288] CPU: 1 PID: 7288 Comm: syz.4.803 Not tainted syzkaller #0 [ 445.527412][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 445.537499][ T7288] Call Trace: [ 445.540817][ T7288] [ 445.543790][ T7288] dump_stack_lvl+0x188/0x24e [ 445.548518][ T7288] ? show_regs_print_info+0x12/0x12 [ 445.553767][ T7288] ? load_image+0x410/0x410 [ 445.558316][ T7288] ? __might_sleep+0xd0/0xd0 [ 445.563014][ T7288] ? __lock_acquire+0x7c40/0x7c40 [ 445.568151][ T7288] ? lockdep_init_map_type+0x98/0x8d0 [ 445.573566][ T7288] should_fail_ex+0x390/0x4c0 [ 445.578290][ T7288] should_failslab+0x5/0x20 [ 445.582857][ T7288] slab_pre_alloc_hook+0x59/0x300 [ 445.587930][ T7288] ? sbitmap_queue_init_node+0x24c/0x650 [ 445.593582][ T7288] __kmem_cache_alloc_node+0x4f/0x270 [ 445.598998][ T7288] ? sbitmap_queue_init_node+0x24c/0x650 [ 445.604678][ T7288] kmalloc_node_trace+0x22/0xe0 [ 445.609583][ T7288] sbitmap_queue_init_node+0x24c/0x650 [ 445.615089][ T7288] blk_mq_init_tags+0x112/0x280 [ 445.620047][ T7288] blk_mq_alloc_map_and_rqs+0xc1/0x920 [ 445.625558][ T7288] ? xa_find+0x258/0x2b0 [ 445.629837][ T7288] ? xa_find+0x89/0x2b0 [ 445.634042][ T7288] blk_mq_init_sched+0x332/0x840 [ 445.639068][ T7288] ? blk_mq_sched_insert_requests+0x890/0x890 [ 445.645200][ T7288] elevator_switch+0x26c/0x860 [ 445.650109][ T7288] elv_iosched_store+0x3c3/0x460 [ 445.655088][ T7288] ? elevator_switch+0x860/0x860 [ 445.660086][ T7288] queue_attr_store+0x8a/0xc0 [ 445.664809][ T7288] ? sysfs_kf_read+0x350/0x350 [ 445.669674][ T7288] kernfs_fop_write_iter+0x3a0/0x520 [ 445.675001][ T7288] vfs_write+0x482/0x9a0 [ 445.679373][ T7288] ? file_end_write+0x250/0x250 [ 445.684273][ T7288] ? __fget_files+0x3fc/0x460 [ 445.689023][ T7288] ? __fdget_pos+0x2ae/0x360 [ 445.693648][ T7288] ? ksys_write+0x70/0x260 [ 445.698112][ T7288] ksys_write+0x14d/0x260 [ 445.702479][ T7288] ? __ia32_sys_read+0x80/0x80 [ 445.707281][ T7288] ? lockdep_hardirqs_on+0x94/0x140 [ 445.712521][ T7288] do_syscall_64+0x4c/0xa0 [ 445.716981][ T7288] ? clear_bhb_loop+0x60/0xb0 [ 445.721692][ T7288] ? clear_bhb_loop+0x60/0xb0 [ 445.726427][ T7288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.732359][ T7288] RIP: 0033:0x7f6b8ab9e159 [ 445.736804][ T7288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.756441][ T7288] RSP: 002b:00007f6b8b996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.764888][ T7288] RAX: ffffffffffffffda RBX: 00007f6b8ae25fa0 RCX: 00007f6b8ab9e159 [ 445.772897][ T7288] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 445.780906][ T7288] RBP: 00007f6b8ac3506b R08: 0000000000000000 R09: 0000000000000000 [ 445.788905][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.796903][ T7288] R13: 00007f6b8ae26038 R14: 00007f6b8ae25fa0 R15: 00007ffd6bd41c98 [ 445.804919][ T7288] [ 445.983650][ T7291] loop3: detected capacity change from 0 to 512 [ 446.046375][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 446.102129][ T7291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 446.159622][ T7291] System zones: 1-12 [ 446.169049][ T7291] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.806: missing EA_INODE flag [ 446.193915][ T7291] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.806: error while reading EA inode 12 err=-117 [ 446.298867][ T7291] EXT4-fs (loop3): 1 orphan inode deleted [ 446.304668][ T7291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 446.353573][ T7296] loop4: detected capacity change from 0 to 256 [ 446.400568][ T7296] exfat: Unknown parameter 'fmas{' [ 447.221039][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 447.758911][ T7314] fuse: Unknown parameter 'group_i00000000000000000000' [ 447.800918][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.814'. [ 451.020261][ T7330] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 451.257337][ T7338] loop2: detected capacity change from 0 to 128 [ 451.323996][ T7338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 451.347740][ T7338] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.472395][ T7345] loop5: detected capacity change from 0 to 7 [ 451.514811][ T4276] Dev loop5: unable to read RDB block 7 [ 451.520909][ T4276] loop5: unable to read partition table [ 451.560088][ T4276] loop5: partition table beyond EOD, truncated [ 451.579737][ T7346] loop5: detected capacity change from 7 to 0 [ 451.799688][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 453.215896][ T7362] loop1: detected capacity change from 0 to 512 [ 454.118840][ T7362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 454.193867][ T7362] System zones: 1-12 [ 454.245622][ T7362] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.827: missing EA_INODE flag [ 454.314640][ T7362] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.827: error while reading EA inode 12 err=-117 [ 454.395536][ T7362] EXT4-fs (loop1): 1 orphan inode deleted [ 455.708930][ T7362] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 455.958635][ T7376] loop4: detected capacity change from 0 to 16 [ 456.024350][ T7376] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 456.044238][ T7377] 9pnet_fd: Insufficient options for proto=fd [ 456.258695][ T7376] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 456.650834][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 457.057845][ T7384] loop2: detected capacity change from 0 to 128 [ 457.137905][ T7384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 457.203661][ T7384] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.866911][ T7389] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 457.997692][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 458.574170][ T7394] loop1: detected capacity change from 0 to 512 [ 458.629541][ T7394] jffs2: notice: (7394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 458.724779][ T7396] loop3: detected capacity change from 0 to 2048 [ 458.785540][ T7400] loop4: detected capacity change from 0 to 128 [ 458.881502][ T7400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 458.937512][ T7407] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.989873][ T7400] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.849988][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 459.963290][ T26] audit: type=1800 audit(1789510571.196:46): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.831" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 460.855892][ T26] audit: type=1804 audit(1789510572.086:47): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.831" name="/newroot/163/file2/file1" dev="loop3" ino=15 res=1 errno=0 [ 461.041034][ T7415] loop2: detected capacity change from 0 to 2048 [ 461.201408][ T7415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 462.869742][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 462.909070][ T7396] syz.3.831 (7396) used greatest stack depth: 19856 bytes left [ 462.984087][ T7426] loop4: detected capacity change from 0 to 512 [ 463.008043][ T7426] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: comm syz.4.842: inode #2147418112: comm syz.4.842: iget: illegal inode # [ 463.103855][ T7426] EXT4-fs (loop4): no journal found [ 463.928777][ T7342] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 463.939024][ T7426] EXT4-fs (loop4): can't get journal size [ 463.957137][ T7426] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 464.000378][ T7426] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 464.008005][ T7426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 464.057483][ T7342] EXT4-fs (loop2): Remounting filesystem read-only [ 464.133542][ T7426] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.842: Invalid inode bitmap blk 4 in block_group 0 [ 464.193166][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 464.234284][ T7433] loop3: detected capacity change from 0 to 2048 [ 464.332027][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 464.363292][ T7435] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.414460][ T7433] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 464.466306][ T7433] Remounting filesystem read-only [ 464.499617][ T7433] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 464.541037][ T7433] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 464.571681][ T7433] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 464.632957][ T7433] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 464.691415][ T7433] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 464.759992][ T7433] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 464.813929][ T7440] loop4: detected capacity change from 0 to 4096 [ 464.823080][ T7433] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 464.869371][ T26] audit: type=1800 audit(1789510576.106:48): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.845" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 466.148351][ T7433] syz.3.845 (7433) used greatest stack depth: 19840 bytes left [ 466.231407][ T7445] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.278758][ T26] audit: type=1800 audit(1789510577.506:49): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.849" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 467.574016][ T7458] loop1: detected capacity change from 0 to 512 [ 467.708187][ T7458] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 467.778199][ T7458] System zones: 1-12 [ 467.862623][ T7458] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.844: missing EA_INODE flag [ 467.914952][ T7458] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.844: error while reading EA inode 12 err=-117 [ 467.948861][ T7458] EXT4-fs (loop1): 1 orphan inode deleted [ 468.014482][ T7458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 468.359807][ T7464] 9pnet_fd: Insufficient options for proto=fd [ 468.695650][ T7466] loop4: detected capacity change from 0 to 512 [ 468.704299][ T7447] loop3: detected capacity change from 0 to 32768 [ 468.879216][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 468.900556][ T7466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 468.971343][ T7466] ext4 filesystem being mounted at /169/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.037268][ T7447] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 470.381744][ T7466] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz.4.855: invalid size [ 470.595335][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 470.659791][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 471.086865][ T7472] loop2: detected capacity change from 0 to 32768 [ 472.478853][ T7472] (syz.2.851,7472,1):ocfs2_initialize_super:2284 ERROR: status = -12 [ 472.533058][ T7472] (syz.2.851,7472,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 473.108163][ T7490] loop2: detected capacity change from 0 to 4096 [ 473.528931][ T7497] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.139807][ T7512] fuse: Bad value for 'fd' [ 476.169087][ T7512] loop1: detected capacity change from 0 to 1024 [ 476.291849][ T7512] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 1: comm syz.1.857: lblock 1 mapped to illegal pblock 1 (length 1) [ 476.438960][ T7512] Quota error (device loop1): write_blk: dquota write failed [ 476.446412][ T7512] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 476.514180][ T7519] fuse: Bad value for 'user_id' [ 476.618971][ T7512] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.857: Failed to acquire dquot type 0 [ 476.739715][ T7512] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.857: Freeing blocks not in datazone - block = 0, count = 4096 [ 476.859361][ T7512] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.857: Invalid inode bitmap blk 0 in block_group 0 [ 476.879651][ T47] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 476.940309][ T7512] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 476.972725][ T47] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 476.983879][ T7512] EXT4-fs (loop1): 1 orphan inode deleted [ 477.024593][ T47] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 477.036236][ T7512] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 479.828128][ T7534] loop3: detected capacity change from 0 to 1024 [ 479.980063][ T7534] hfsplus: invalid length 1280 has been corrected to 255 [ 479.988394][ T7534] hfsplus: invalid length 1280 has been corrected to 255 [ 480.058244][ T7534] hfsplus: invalid length 1280 has been corrected to 255 [ 480.124489][ T7534] hfsplus: invalid length 1280 has been corrected to 255 [ 480.300877][ T4621] hfsplus: invalid length 1280 has been corrected to 255 [ 482.419888][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 482.785560][ T7552] loop4: detected capacity change from 0 to 1024 [ 482.799552][ T7552] EXT4-fs: Ignoring removed nobh option [ 482.833188][ T7552] EXT4-fs: Ignoring removed bh option [ 482.869505][ T7552] EXT4-fs: Ignoring removed nobh option [ 482.974293][ T7552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 483.007374][ T26] audit: type=1800 audit(1789510594.236:50): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.874" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 483.082302][ T7552] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 483.166371][ T7545] loop3: detected capacity change from 0 to 32768 [ 483.382733][ T26] audit: type=1800 audit(1789510594.616:51): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.879" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 484.554938][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 486.032920][ T7575] loop2: detected capacity change from 0 to 512 [ 486.095124][ T7575] EXT4-fs: Ignoring removed oldalloc option [ 486.196628][ T7575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 486.308688][ T4330] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 486.456293][ T26] audit: type=1800 audit(1789510597.686:52): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.887" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 486.498727][ T4330] usb 5-1: Using ep0 maxpacket: 8 [ 486.694373][ T7573] loop4: detected capacity change from 0 to 512 [ 486.927988][ T4330] usb 5-1: unable to get BOS descriptor or descriptor too short [ 486.965148][ T4330] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 486.988993][ T4330] usb 5-1: can't read configurations, error -71 [ 489.122663][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 491.742856][ T7614] loop2: detected capacity change from 0 to 128 [ 491.855593][ T7614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 491.968713][ T7614] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.447328][ T7622] fuse: Bad value for 'fd' [ 492.520310][ T7622] loop3: detected capacity change from 0 to 1024 [ 492.689240][ T7622] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.891: lblock 1 mapped to illegal pblock 1 (length 1) [ 492.748019][ T7622] Quota error (device loop3): write_blk: dquota write failed [ 492.775941][ T7622] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 492.786244][ T7622] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.891: Failed to acquire dquot type 0 [ 492.811271][ T7605] loop4: detected capacity change from 0 to 32768 [ 492.832752][ T7622] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.891: Freeing blocks not in datazone - block = 0, count = 4096 [ 492.862338][ T7602] loop1: detected capacity change from 0 to 32768 [ 492.880730][ T7622] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.891: Invalid inode bitmap blk 0 in block_group 0 [ 492.897103][ T7622] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 492.915252][ T7622] EXT4-fs (loop3): 1 orphan inode deleted [ 492.921540][ T7622] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 492.935159][ T4767] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 493.043205][ T7605] XFS (loop4): Mounting V5 Filesystem [ 493.050961][ T4767] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 493.117338][ T4767] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0 [ 493.240407][ T7605] XFS (loop4): Ending clean mount [ 494.949068][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 495.011150][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 495.112803][ T7633] XFS (loop4): User initiated shutdown received. [ 495.149200][ T7633] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 495.228307][ T7633] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 495.861231][ T4286] XFS (loop4): Unmounting Filesystem [ 497.717521][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 497.759236][ T4330] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 497.840325][ T7644] loop2: detected capacity change from 0 to 40427 [ 497.889073][ T7644] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 497.897449][ T7644] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4 [ 497.969776][ T4330] usb 5-1: Using ep0 maxpacket: 8 [ 498.230893][ T7666] loop3: detected capacity change from 0 to 128 [ 498.549605][ T7644] F2FS-fs (loop2): invalid crc value [ 498.579363][ T7644] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 498.624003][ T7666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 498.684951][ T7660] loop4: detected capacity change from 0 to 512 [ 498.702329][ T7666] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.508481][ T4330] usb 5-1: unable to get BOS descriptor or descriptor too short [ 499.520362][ T4330] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 499.528568][ T4330] usb 5-1: can't read configurations, error -71 [ 501.238713][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.245599][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.320131][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 502.372327][ T7695] loop1: detected capacity change from 0 to 512 [ 502.431802][ T7695] EXT4-fs: Ignoring removed nobh option [ 502.459145][ T7695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 502.529469][ T7695] EXT4-fs (loop1): 1 truncate cleaned up [ 502.558790][ T7695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 502.671025][ T7695] syz.1.916 (pid 7695) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 503.618494][ T7716] loop3: detected capacity change from 0 to 128 [ 503.788040][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 504.055211][ T7716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 504.064110][ T7716] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 504.501649][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 507.593116][ T7739] loop4: detected capacity change from 0 to 128 [ 507.662314][ T7739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 507.713612][ T7739] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.856703][ T7745] FAULT_INJECTION: forcing a failure. [ 507.856703][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 507.924895][ T7745] CPU: 1 PID: 7745 Comm: syz.1.927 Not tainted syzkaller #0 [ 507.932240][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 507.942339][ T7745] Call Trace: [ 507.945646][ T7745] [ 507.948618][ T7745] dump_stack_lvl+0x188/0x24e [ 507.953330][ T7745] ? show_regs_print_info+0x12/0x12 [ 507.958553][ T7745] ? load_image+0x410/0x410 [ 507.963113][ T7745] ? __lock_acquire+0x7c40/0x7c40 [ 507.968175][ T7745] should_fail_ex+0x390/0x4c0 [ 507.972888][ T7745] should_failslab+0x5/0x20 [ 507.977441][ T7745] slab_pre_alloc_hook+0x59/0x300 [ 507.982504][ T7745] kmem_cache_alloc_lru+0x49/0x2e0 [ 507.987649][ T7745] ? sock_alloc_inode+0x24/0xc0 [ 507.992604][ T7745] sock_alloc_inode+0x24/0xc0 [ 507.997317][ T7745] ? sockfs_init_fs_context+0xa0/0xa0 [ 508.002719][ T7745] new_inode_pseudo+0x5f/0x1c0 [ 508.007522][ T7745] __sock_create+0x129/0x940 [ 508.012202][ T7745] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 508.018232][ T7745] __sys_socket+0xc4/0x190 [ 508.022692][ T7745] __x64_sys_socket+0x76/0x80 [ 508.027409][ T7745] do_syscall_64+0x4c/0xa0 [ 508.031864][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 508.036605][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 508.041322][ T7745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.047267][ T7745] RIP: 0033:0x7f5bf559e159 [ 508.051705][ T7745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.071339][ T7745] RSP: 002b:00007f5bf63e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 508.079785][ T7745] RAX: ffffffffffffffda RBX: 00007f5bf5825fa0 RCX: 00007f5bf559e159 [ 508.087779][ T7745] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 508.095776][ T7745] RBP: 00007f5bf563506b R08: 0000000000000000 R09: 0000000000000000 [ 508.103772][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.111765][ T7745] R13: 00007f5bf5826038 R14: 00007f5bf5825fa0 R15: 00007fff872c9eb8 [ 508.119772][ T7745] [ 508.700201][ T7745] socket: no more sockets [ 509.009947][ T7753] fuse: Bad value for 'fd' [ 509.092770][ T7735] loop2: detected capacity change from 0 to 32768 [ 509.147749][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 509.227770][ T7735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.911 (7735) [ 509.830399][ T7735] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 509.937588][ T7766] fuse: Bad value for 'fd' [ 509.946780][ T7735] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 510.025523][ T7735] BTRFS info (device loop2): setting nodatasum [ 510.093274][ T7735] BTRFS info (device loop2): enabling auto defrag [ 510.199778][ T7735] BTRFS info (device loop2): disabling tree log [ 510.206207][ T7735] BTRFS info (device loop2): using free space tree [ 510.482913][ T7772] loop1: detected capacity change from 0 to 40427 [ 510.553931][ T7772] F2FS-fs (loop1): invalid crc value [ 510.605321][ T7772] F2FS-fs (loop1): Found nat_bits in checkpoint [ 510.666542][ T7772] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 510.996324][ T7735] BTRFS error (device loop2): open_ctree failed: -12 [ 513.021298][ T4292] syz-executor: attempt to access beyond end of device [ 513.021298][ T4292] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 513.575201][ T7800] fuse: Unknown parameter 'group_id00000000000000000000' [ 515.394197][ T7815] overlayfs: failed to clone upperpath [ 515.486268][ T7816] fuse: Bad value for 'fd' [ 516.628973][ T4908] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 516.828872][ T4908] usb 4-1: Using ep0 maxpacket: 16 [ 516.836302][ T4908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.913270][ T4908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.986816][ T4908] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.048480][ T4908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.104387][ T4908] usb 4-1: Product: syz [ 517.114618][ T4806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4806) [ 517.231341][ T4908] usb 4-1: Manufacturer: syz [ 517.257087][ T4908] usb 4-1: SerialNumber: syz [ 517.514464][ T4908] usb 4-1: cannot find UAC_HEADER [ 517.543447][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.606752][ T4908] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 517.676287][ T4908] usb 4-1: USB disconnect, device number 10 [ 517.783600][ T7839] fuse: Bad value for 'fd' [ 518.289888][ T7844] loop4: detected capacity change from 0 to 128 [ 519.236984][ T7853] loop3: detected capacity change from 0 to 512 [ 519.324804][ T7844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 519.333873][ T7844] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 519.449117][ T7856] loop1: detected capacity change from 0 to 128 [ 519.473029][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 519.552132][ T7853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 519.582933][ T7856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 519.638827][ T7853] System zones: 1-12 [ 519.723208][ T7856] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.734152][ T7853] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.949: missing EA_INODE flag [ 519.771724][ T7853] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.949: error while reading EA inode 12 err=-117 [ 519.890220][ T7853] EXT4-fs (loop3): 1 orphan inode deleted [ 519.908880][ T7853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 520.046769][ T7861] loop4: detected capacity change from 0 to 40427 [ 520.055389][ T7861] F2FS-fs (loop4): invalid crc value [ 520.260047][ T7861] F2FS-fs (loop4): Found nat_bits in checkpoint [ 520.765229][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 520.793302][ T7861] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 522.107075][ T4286] syz-executor: attempt to access beyond end of device [ 522.107075][ T4286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 523.420988][ T7882] fuse: Bad value for 'fd' [ 523.768891][ T4373] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 523.853041][ T7884] overlayfs: failed to clone upperpath [ 523.920287][ T7887] fuse: Unknown parameter 'group_id00000000000000000000' [ 524.304669][ T7894] fuse: Bad value for 'fd' [ 524.663066][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 525.116003][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 525.698312][ T7918] device syzkaller0 entered promiscuous mode [ 526.266652][ T7934] overlayfs: failed to clone upperpath [ 526.280181][ T7935] fuse: Bad value for 'fd' [ 526.293323][ T7935] loop2: detected capacity change from 0 to 1024 [ 526.394489][ T7937] fuse: Unknown parameter 'group_id00000000000000000000' [ 526.571005][ T7935] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.968: lblock 1 mapped to illegal pblock 1 (length 1) [ 526.585350][ T7935] Quota error (device loop2): write_blk: dquota write failed [ 526.593031][ T7935] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 526.603171][ T7935] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.968: Failed to acquire dquot type 0 [ 526.615220][ T7935] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.968: Freeing blocks not in datazone - block = 0, count = 4096 [ 526.628982][ T7935] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.968: Invalid inode bitmap blk 0 in block_group 0 [ 526.642653][ T7935] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 526.651759][ T7935] EXT4-fs (loop2): 1 orphan inode deleted [ 526.657533][ T7935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 526.684188][ T5242] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 526.766405][ T5242] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 527.038749][ T5242] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:23: Failed to release dquot type 0 [ 527.282537][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 527.638777][ T7792] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 527.802780][ T7952] fuse: Invalid rootmode [ 527.838881][ T7792] usb 2-1: Using ep0 maxpacket: 8 [ 527.852393][ T7943] loop1: detected capacity change from 0 to 512 [ 527.931025][ T7792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 528.009037][ T7792] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 528.017054][ T7792] usb 2-1: can't read configurations, error -71 [ 530.472240][ T7992] loop3: detected capacity change from 0 to 128 [ 530.524931][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 530.662855][ T7992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 530.756671][ T7992] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.020418][ T7998] fuse: Bad value for 'fd' [ 531.030990][ T7998] loop2: detected capacity change from 0 to 1024 [ 531.044016][ T7998] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.983: lblock 1 mapped to illegal pblock 1 (length 1) [ 531.058066][ T7998] Quota error (device loop2): write_blk: dquota write failed [ 531.065563][ T7998] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 531.075797][ T7998] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.983: Failed to acquire dquot type 0 [ 531.087811][ T7998] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.983: Freeing blocks not in datazone - block = 0, count = 4096 [ 531.109971][ T7998] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.983: Invalid inode bitmap blk 0 in block_group 0 [ 531.122790][ T7998] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 531.131598][ T7998] EXT4-fs (loop2): 1 orphan inode deleted [ 531.137344][ T7998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 531.328783][ T4767] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 531.562456][ T4767] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 531.572360][ T4767] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0 [ 531.710079][ T8001] fuse: Unknown parameter 'group_id00000000000000000000' [ 531.808330][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 533.114970][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 533.270336][ T8016] loop4: detected capacity change from 0 to 128 [ 533.359884][ T8016] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 533.369793][ T8016] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 533.620697][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 533.893684][ T8022] loop2: detected capacity change from 0 to 128 [ 534.128707][ T126] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 534.210728][ T8022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 534.301020][ T8022] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.318740][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 534.744154][ T8045] overlayfs: failed to clone upperpath [ 534.807504][ T8046] fuse: Bad value for 'fd' [ 534.880802][ T8026] loop4: detected capacity change from 0 to 512 [ 534.951304][ T126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 534.970890][ T126] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 535.033718][ T126] usb 5-1: can't read configurations, error -71 [ 535.309402][ T8048] loop3: detected capacity change from 0 to 40427 [ 535.329526][ T8048] F2FS-fs (loop3): invalid crc value [ 535.417089][ T8048] F2FS-fs (loop3): Found nat_bits in checkpoint [ 535.508488][ T8048] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 537.053706][ T4277] syz-executor: attempt to access beyond end of device [ 537.053706][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 537.156867][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 538.560097][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 540.516572][ T4327] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 540.797505][ T8094] fuse: Bad value for 'fd' [ 540.810550][ T8094] loop3: detected capacity change from 0 to 1024 [ 541.558698][ T4327] usb 2-1: Using ep0 maxpacket: 16 [ 541.575433][ T4327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.651250][ T8094] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.1008: lblock 1 mapped to illegal pblock 1 (length 1) [ 541.665501][ T8094] Quota error (device loop3): write_blk: dquota write failed [ 541.673002][ T8094] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 541.683078][ T8094] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1008: Failed to acquire dquot type 0 [ 541.697942][ T8094] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.1008: Freeing blocks not in datazone - block = 0, count = 4096 [ 541.711729][ T8094] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1008: Invalid inode bitmap blk 0 in block_group 0 [ 541.724609][ T8094] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 541.733431][ T8094] EXT4-fs (loop3): 1 orphan inode deleted [ 541.739903][ T8094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 541.836615][ T4327] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.846845][ T4621] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 541.872246][ T8109] loop4: detected capacity change from 0 to 1024 [ 541.873634][ T4327] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.895022][ T8109] EXT4-fs: Ignoring removed bh option [ 541.911347][ T4621] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 541.932887][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.948413][ T4621] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 0 [ 541.961139][ T4327] usb 2-1: Product: syz [ 541.965341][ T4327] usb 2-1: Manufacturer: syz [ 542.003713][ T8109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 542.022515][ T4327] usb 2-1: SerialNumber: syz [ 542.036726][ T8109] EXT4-fs (loop4): unmounting filesystem. [ 542.087305][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 542.260569][ T4327] usb 2-1: cannot find UAC_HEADER [ 542.270289][ T5352] udevd[5352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.287717][ T8115] fuse: Invalid rootmode [ 542.318766][ T4908] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 542.331277][ T4327] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 542.372189][ T4327] usb 2-1: USB disconnect, device number 8 [ 542.528853][ T4908] usb 3-1: Using ep0 maxpacket: 8 [ 542.543422][ T8102] loop2: detected capacity change from 0 to 512 [ 542.550537][ T8121] device syzkaller0 entered promiscuous mode [ 542.611081][ T4908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 542.640692][ T4908] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 542.649709][ T4908] usb 3-1: can't read configurations, error -71 [ 545.863904][ T8148] loop3: detected capacity change from 0 to 512 [ 545.992973][ T8148] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 546.018808][ T8148] System zones: 1-12 [ 546.048964][ T8148] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1024: missing EA_INODE flag [ 546.123269][ T8151] fuse: Bad value for 'fd' [ 546.136209][ T8151] loop2: detected capacity change from 0 to 1024 [ 546.233433][ T8151] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.1023: lblock 1 mapped to illegal pblock 1 (length 1) [ 546.247774][ T8151] Quota error (device loop2): write_blk: dquota write failed [ 546.255360][ T8151] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 546.265430][ T8151] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1023: Failed to acquire dquot type 0 [ 546.281930][ T8151] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.1023: Freeing blocks not in datazone - block = 0, count = 4096 [ 546.295656][ T8151] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1023: Invalid inode bitmap blk 0 in block_group 0 [ 546.310524][ T8151] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 546.319284][ T8151] EXT4-fs (loop2): 1 orphan inode deleted [ 546.325078][ T8151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 546.338929][ T8148] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1024: error while reading EA inode 12 err=-117 [ 546.408291][ T8148] EXT4-fs (loop3): 1 orphan inode deleted [ 546.447411][ T9] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 546.458847][ T8148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 546.517244][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 546.620777][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 546.810495][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 546.974660][ T8155] fuse: Bad value for 'rootmode' [ 546.996772][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 547.433827][ T8165] loop1: detected capacity change from 0 to 128 [ 548.543265][ T8165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 549.803392][ T8165] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.638997][ T8186] device syzkaller0 entered promiscuous mode [ 550.647222][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 551.544538][ T8200] fuse: Bad value for 'fd' [ 551.557603][ T8200] loop2: detected capacity change from 0 to 1024 [ 551.862511][ T8200] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.1036: lblock 1 mapped to illegal pblock 1 (length 1) [ 551.876962][ T8200] Quota error (device loop2): write_blk: dquota write failed [ 551.884444][ T8200] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 551.894612][ T8200] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1036: Failed to acquire dquot type 0 [ 551.906850][ T8200] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.1036: Freeing blocks not in datazone - block = 0, count = 4096 [ 551.920737][ T8200] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1036: Invalid inode bitmap blk 0 in block_group 0 [ 551.934180][ T8200] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 551.942919][ T5236] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 551.946941][ T8200] EXT4-fs (loop2): 1 orphan inode deleted [ 551.963221][ T8200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 552.049246][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 552.058330][ T5236] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 552.066911][ T5236] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:22: Failed to release dquot type 0 [ 552.241722][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 554.798664][ T4908] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 554.987847][ T8228] loop2: detected capacity change from 0 to 128 [ 554.996345][ T4908] usb 5-1: Using ep0 maxpacket: 8 [ 555.010443][ T8217] loop4: detected capacity change from 0 to 512 [ 555.061464][ T4908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 555.062747][ T8228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 555.091368][ T8228] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.106311][ T4908] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 555.168848][ T4908] usb 5-1: can't read configurations, error -71 [ 555.777454][ T8234] loop3: detected capacity change from 0 to 128 [ 555.807197][ T8234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 555.862398][ T8234] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.590359][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 556.612718][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 556.898601][ T8246] fuse: Unknown parameter 'group_id00000000000000000000' [ 558.375331][ T8262] loop1: detected capacity change from 0 to 512 [ 558.455773][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 558.469812][ T8262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 558.525894][ T8262] System zones: 1-12 [ 558.581303][ T8262] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1050: missing EA_INODE flag [ 558.697737][ T8262] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1050: error while reading EA inode 12 err=-117 [ 558.748857][ T8262] EXT4-fs (loop1): 1 orphan inode deleted [ 558.771194][ T8262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 560.656270][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 561.154850][ T8286] loop2: detected capacity change from 0 to 128 [ 561.192605][ T8286] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 561.244631][ T8286] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.483802][ T4342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.664315][ T4342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.791602][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 561.867045][ T4342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.075282][ T4342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.424243][ T4342] tipc: Left network mode [ 562.671906][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.680458][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.928898][ T4327] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 563.128680][ T4327] usb 2-1: Using ep0 maxpacket: 8 [ 563.132964][ T8300] loop2: detected capacity change from 0 to 32768 [ 563.146057][ T8302] loop1: detected capacity change from 0 to 512 [ 563.157321][ T8300] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.176324][ T8300] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 563.186979][ T4327] usb 2-1: unable to get BOS descriptor or descriptor too short [ 563.191764][ T8300] BTRFS info (device loop2): setting nodatasum [ 563.210124][ T8300] BTRFS info (device loop2): enabling auto defrag [ 563.214473][ T4327] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 563.220741][ T8300] BTRFS info (device loop2): disabling tree log [ 563.237639][ T8300] BTRFS info (device loop2): using free space tree [ 563.246544][ T4327] usb 2-1: can't read configurations, error -71 [ 564.059666][ T8300] BTRFS info (device loop2): enabling ssd optimizations [ 564.318120][ T8300] binfmt_misc: register: failed to install interpreter file ./file0 [ 564.500301][ T4274] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 565.096911][ T8345] fuse: Unknown parameter 'group_id00000000000000000000' [ 566.427655][ T8359] loop3: detected capacity change from 0 to 256 [ 566.497043][ T8359] exfat: Unknown parameter 'fmas{' [ 567.044759][ T8363] loop4: detected capacity change from 0 to 128 [ 567.161344][ T8363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 567.198519][ T8363] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.461573][ T4342] device hsr_slave_0 left promiscuous mode [ 567.473299][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 567.525567][ T4342] device hsr_slave_1 left promiscuous mode [ 567.538392][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.586735][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.640475][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.668270][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.731038][ T4342] device bridge_slave_1 left promiscuous mode [ 567.770669][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.859497][ T4342] device bridge_slave_0 left promiscuous mode [ 567.875652][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.730206][ T4342] device veth1_vlan left promiscuous mode [ 568.782561][ T4342] device veth0_vlan left promiscuous mode [ 570.154430][ T8380] loop3: detected capacity change from 0 to 32768 [ 570.195415][ T8380] syz.3.1070: attempt to access beyond end of device [ 570.195415][ T8380] loop3: rw=0, sector=96280, nr_sectors = 8 limit=32768 [ 570.273362][ T8380] lbmIODone: I/O error in JFS log [ 570.319374][ T8380] syz.3.1070: attempt to access beyond end of device [ 570.319374][ T8380] loop3: rw=2049, sector=96280, nr_sectors = 8 limit=32768 [ 570.383694][ T8380] lbmIODone: I/O error in JFS log [ 570.559043][ T8380] lmLogInit: exit(-5) [ 570.563352][ T8380] lmLogOpen: exit(-5) [ 570.595804][ T8380] jfs_mount_rw failed, return code = -5 [ 571.253386][ T4342] team0 (unregistering): Port device team_slave_1 removed [ 571.347223][ T4342] team0 (unregistering): Port device team_slave_0 removed [ 571.421196][ T4342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.497414][ T4342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.083349][ T8404] loop3: detected capacity change from 0 to 512 [ 573.121893][ T8404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.134182][ T8408] loop1: detected capacity change from 0 to 512 [ 573.170283][ T8404] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 573.221807][ T8408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 573.379343][ T8408] System zones: 1-12 [ 573.892897][ T8408] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1076: missing EA_INODE flag [ 573.905208][ T8404] EXT4-fs (loop3): 1 truncate cleaned up [ 573.918892][ T8408] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1076: error while reading EA inode 12 err=-117 [ 573.925448][ T8404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 573.971815][ T8408] EXT4-fs (loop1): 1 orphan inode deleted [ 574.010211][ T8408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 574.032575][ T4342] bond0 (unregistering): Released all slaves [ 574.259578][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 574.354658][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 574.509475][ T4292] EXT4-fs (loop1): unmounting filesystem. [ 574.752900][ T8432] loop2: detected capacity change from 0 to 128 [ 574.840442][ T8432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 574.876995][ T8432] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.586682][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 576.759802][ T8450] fuse: Bad value for 'fd' [ 576.772841][ T8450] loop3: detected capacity change from 0 to 1024 [ 576.835814][ T8450] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.1086: lblock 1 mapped to illegal pblock 1 (length 1) [ 576.852677][ T8450] Quota error (device loop3): write_blk: dquota write failed [ 576.860745][ T8450] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 576.870819][ T8450] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1086: Failed to acquire dquot type 0 [ 576.887377][ T8450] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.1086: Freeing blocks not in datazone - block = 0, count = 4096 [ 576.904509][ T8450] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1086: Invalid inode bitmap blk 0 in block_group 0 [ 576.925299][ T8450] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 576.938420][ T8450] EXT4-fs (loop3): 1 orphan inode deleted [ 576.944331][ T8450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 577.738843][ T4510] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 577.757118][ T4510] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 577.772930][ T4510] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 0 [ 577.786829][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 577.972737][ T8458] loop4: detected capacity change from 0 to 128 [ 578.145049][ T8458] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 578.178897][ T8458] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.388743][ T8465] fuse: Bad value for 'fd' [ 579.041414][ T8466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.085188][ T8466] loop2: detected capacity change from 0 to 512 [ 579.302504][ T8466] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 579.311840][ T8466] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 580.981798][ T8477] overlayfs: unrecognized mount option "uuid=null" or missing value [ 581.014340][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 581.875896][ T8484] loop1: detected capacity change from 0 to 16 [ 581.902661][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 581.949448][ T8484] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 582.045215][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'. [ 582.124452][ T8494] loop4: detected capacity change from 0 to 512 [ 582.221782][ T8494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 582.256731][ T8494] System zones: 1-12 [ 582.322360][ T8494] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.1096: missing EA_INODE flag [ 582.389952][ T8494] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1096: error while reading EA inode 12 err=-117 [ 582.429065][ T8494] EXT4-fs (loop4): 1 orphan inode deleted [ 582.434916][ T8494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 583.030176][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 584.314205][ T8512] fuse: Bad value for 'fd' [ 584.327425][ T8512] loop3: detected capacity change from 0 to 1024 [ 584.523915][ T8512] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #3: block 1: comm syz.3.1099: lblock 1 mapped to illegal pblock 1 (length 1) [ 584.543559][ T8512] Quota error (device loop3): write_blk: dquota write failed [ 584.551168][ T8512] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 584.562063][ T8512] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1099: Failed to acquire dquot type 0 [ 584.575673][ T8512] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.1099: Freeing blocks not in datazone - block = 0, count = 4096 [ 584.621583][ T8512] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1099: Invalid inode bitmap blk 0 in block_group 0 [ 584.634683][ T8512] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 584.643494][ T8512] EXT4-fs (loop3): 1 orphan inode deleted [ 584.649405][ T8512] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 585.352313][ T4767] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 585.366889][ T4767] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 585.375431][ T4767] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0 [ 585.389745][ T4277] EXT4-fs (loop3): unmounting filesystem. SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=5 req=1053 state=1 status=67 (errno 9: Bad file descriptor) [ 588.853843][ T7971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.929981][ T7971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.004671][ T7971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.105360][ T7971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.254346][ T7971] tipc: Left network mode [ 590.301816][ T7971] device hsr_slave_0 left promiscuous mode [ 590.308230][ T7971] device hsr_slave_1 left promiscuous mode [ 590.321222][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.334802][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.342928][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.354027][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.361952][ T7971] device bridge_slave_1 left promiscuous mode [ 590.368199][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.380270][ T7971] device bridge_slave_0 left promiscuous mode [ 590.386492][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.415686][ T7971] device veth1_vlan left promiscuous mode [ 590.422053][ T7971] device veth0_vlan left promiscuous mode [ 590.801192][ T7971] team0 (unregistering): Port device team_slave_1 removed [ 590.835859][ T7971] team0 (unregistering): Port device team_slave_0 removed [ 590.869418][ T7971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.905407][ T7971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.141033][ T7971] bond0 (unregistering): Released all slaves [ 592.980836][ T7971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.028656][ T7971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.102080][ T7971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.161627][ T7971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.262922][ T7971] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.316301][ T7971] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.387088][ T7971] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.441122][ T7971] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.565809][ T7971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.624119][ T7971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.680966][ T7971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.762301][ T7971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.201698][ T7971] device hsr_slave_0 left promiscuous mode [ 595.207969][ T7971] device hsr_slave_1 left promiscuous mode [ 595.214771][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.222274][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.230042][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.237437][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.245259][ T7971] device bridge_slave_1 left promiscuous mode [ 595.254580][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.263794][ T7971] device bridge_slave_0 left promiscuous mode [ 595.270061][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.283028][ T7971] device hsr_slave_0 left promiscuous mode [ 595.289777][ T7971] device hsr_slave_1 left promiscuous mode [ 595.295974][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.303517][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.311368][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.318837][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.326363][ T7971] device bridge_slave_1 left promiscuous mode [ 595.332596][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.341560][ T7971] device bridge_slave_0 left promiscuous mode [ 595.347737][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.360736][ T7971] device hsr_slave_0 left promiscuous mode [ 595.366952][ T7971] device hsr_slave_1 left promiscuous mode [ 595.374042][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.381654][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.389917][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.397330][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.404956][ T7971] device bridge_slave_1 left promiscuous mode [ 595.411140][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.419460][ T7971] device bridge_slave_0 left promiscuous mode [ 595.425624][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.467061][ T7971] device veth1_vlan left promiscuous mode [ 595.473025][ T7971] device veth0_vlan left promiscuous mode [ 595.481648][ T7971] device veth1_vlan left promiscuous mode [ 595.487450][ T7971] device veth0_vlan left promiscuous mode [ 595.494611][ T7971] device veth1_macvtap left promiscuous mode [ 595.501807][ T7971] device veth0_macvtap left promiscuous mode [ 595.507870][ T7971] device veth1_vlan left promiscuous mode [ 595.514027][ T7971] device veth0_vlan left promiscuous mode [ 596.003341][ T7971] team0 (unregistering): Port device team_slave_1 removed [ 596.037059][ T7971] team0 (unregistering): Port device team_slave_0 removed