last executing test programs: 5.430245519s ago: executing program 1 (id=7139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095", @ANYRESHEX=r1, @ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfee0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35eb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) syz_open_dev$vcsu(0x0, 0xb68, 0x240) utime(0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") unshare(0x64000600) mount$bind(0x0, &(0x7f0000000680)='./file1\x00', 0x0, 0x73ecc789afb4fe3a, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 5.35653922s ago: executing program 2 (id=7141): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) clock_adjtime(0x0, &(0x7f0000000100)={0xf89, 0x6a, 0x55cd, 0xa, 0x48c, 0x4000000004, 0xd, 0x6465, 0x2, 0x1c5, 0x800, 0xfffffffffffffff7, 0x7, 0x2, 0x81, 0x5, 0x0, 0x5, 0x2, 0x8b7, 0x3, 0x6, 0x9, 0x574, 0x5, 0x3}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000600)={[{@auto_da_alloc_val}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@data_err_ignore}, {@commit={'commit', 0x3d, 0x101}}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@test_dummy_encryption_v1}, {@grpquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 4.385983515s ago: executing program 1 (id=7142): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000700)={0x9, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) clock_adjtime(0x0, &(0x7f0000000100)={0xf89, 0x6a, 0x55cd, 0xa, 0x48c, 0x4000000004, 0xd, 0x6465, 0x2, 0x1c5, 0x800, 0xfffffffffffffff7, 0x7, 0x2, 0x81, 0x5, 0x0, 0x5, 0x2, 0x8b7, 0x3, 0x6, 0x9, 0x574, 0x5, 0x3}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000600)={[{@auto_da_alloc_val}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@data_err_ignore}, {@commit={'commit', 0x3d, 0x101}}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@test_dummy_encryption_v1}, {@grpquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 4.173377648s ago: executing program 2 (id=7143): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000006000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007c72cf53212fbfe53115029fa82b58376836beb04f76f96116a7de0a5dd9e43c3710a54eb3514408ef6bfc0dd7348761ed0f558dc7ca1be103880947830e0b97bbe8c3702bfe1acd388a4488234a947201374efe6d3e240f0fd3469bf295a6964b573a48e9ec34938fc0c2e5bf0e0b5d93a0d59dcc8197a87b0e6b2acb09b434df6433483cc4e517afda"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) prlimit64(0x0, 0x0, &(0x7f0000000280)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0xb, [@volatile={0x8, 0x0, 0x0, 0x9, 0x2}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @enum64={0xb, 0x5, 0x0, 0x13, 0x0, 0x2, [{0x8, 0x1, 0x1}, {0x1, 0x2, 0x58}, {0x10, 0x0, 0x13}, {0xf, 0x1, 0x7fffffff}, {0x3, 0xc8, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x6}}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @func={0xd, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x61, 0x2e, 0x5f, 0x30, 0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000880)=""/133, 0xc3, 0x85, 0x1, 0x1, 0x10000, @value}, 0x28) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x4, 0x0, 0x4, 0x10005, r5, 0x1, '\x00', 0x0, r8, 0x2, 0x4, 0x5, 0x0, @void, @value, @value=r9}, 0x50) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'dummy0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x2000, 0x0, 0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x14, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 3.878741543s ago: executing program 4 (id=7146): socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") socket$netlink(0x10, 0x3, 0x4) creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r4 = syz_io_uring_setup(0x7a6e, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', 0x0}) socket$key(0xf, 0x3, 0x2) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000001800)=ANY=[@ANYBLOB='iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB="2c696f636861727365743d63703933322c666d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d63703933322c0087c36ada509ad1217819ccb05e2c31c700a774505074a59028e5cccdd3"], 0x9, 0x1505, &(0x7f0000000180)="$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") add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3.861486763s ago: executing program 3 (id=7147): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2040000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r3}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000012c0)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0x0, 0x5002004a, 0x0, 0xf0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x11}, 0x60, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x8, 0xe2, 0x3, {0x9}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) getsockopt$inet_buf(r7, 0x0, 0x2f, &(0x7f0000000440)=""/204, &(0x7f0000000300)=0xcc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000080)={[{@noquota}, {@noblock_validity}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x541, &(0x7f0000000bc0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) 3.856791763s ago: executing program 0 (id=7148): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x22400049, &(0x7f0000000240), 0x84, 0x49b, &(0x7f0000000a40)="$eJzs3EtvG0UcAPD/bh59pgmlPFoKDZSKiELSpAV64AICqRckJDjAMaShKk1b1ASJVhUNCJUj4hMARyQ+ASe4IOAE4gp3hFShXigckNHYu4kTO6GJ4zjFv5/kZGZ3vDPjmfHO7tgOoGsNpz9ZxO6I+CUiBmvR+gR9KVFKd+vm1am/bl6dyqJSeeWPrJruz5tXp8qku4v/u4pjjuQR+YdZzDfJd/bylXOTMzPTl4r42Nz5t8dmL1958uz5yTPTZ6YvTJw8eeL4+DNPTzy1IfUcSGU98N7Fg/tPvf7JS1OVeOP7L1P5e4r99fWoGWo5z+EYjkqlUsmXbO2v/j3S8tG3loG6cNbbwYKwJqn/p+bqq47/weiJxcYbjBc/6GjhgLZK56e7GrbWzor5kay6H/i/Wn2M9xbvEQ2utas8wGYpz/jp+rd8bO4MpLNuPFe7AEr1vlU8ant6I123Z0O1K/aeNuW/OyJem//70/SIJvchtrUpXwCge32d5j9PVOcd5bJPMf/I4966dHuKZZ3kaETsjYi7I2JfRNwTUU17X0Tcv8b8h5fFG+efP+1Y4yHXJM3/ni3WtpbO/xZWbYZ6ithAdVWoL3vz7Mz0sdprEiPRty3Fx1fJ45sXfv54pX3DdfO/9Ej5l3PBohy/9y6bBJ6enJvcqKnhjfcjDvQ2q3+2sBKQOsb+iDiwjuOn1+zs418cTOE9uxr3/3f9V7EB60yVzyMeq7X/fCyrfymr5bTS+uTY9piZPjZW9opGP/x4/eX6eF9duKX6b4DU/juX9v9ivBX1L4dBuV47u/Y8rv/6UcM1Zdl519v/+7NXq+H+Ytu7k3Nzl8Yj+osNS7ZPLD63jJfpU/1HDjcf/3sj/vmseN4DEZE68YMR8VBEHCrK/nBEPBIRh1ep/3fPP/rW6q9QZ9v/dNP3v4X+P5TVr9evI9Bz7tuvVsr/9tr/RDU0Umwp3v9WdbsFbOW1AwAAgDtFXl2DzvLRhXCej47Wbvbui529Mxdn544OxzsXTtfWqoeiLy/vdA3W3Q8dLz4xX8YnlsWPR2Tz1Y8S7ajGR6cuzgx0uvLQ5XatMP6T39r1oRdg61jTOlrWvnIAm8/3NaF7Gf/QvYx/6F7GP3SvZuP/WsStDhQF2GTrPf9v3+ByAJvP/B+6l/EP3cv4h67U+JX48udW1vNN/8XA3lMtPX2LBMofv2hnXj1tOnLU/2hHGwKRd7p1WgjkW6EYh4rAtohomuZ8Q/fL29umy/sPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAne/fAAAA///kitHX") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) futex(&(0x7f0000000180)=0x80000, 0x5, 0x0, 0x0, &(0x7f0000000000)=0xfffffffe, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) unlinkat(r6, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x64040, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b00000000ff00f825ffff00ffff00"}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000002f80)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) 2.826880919s ago: executing program 1 (id=7149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x100000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0187"]) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r6}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="995d95dc77abe976044bb8957bc75e17784f134b1a154a6d4045a9ceeb723f4d3ce575eb2f8ac7d1336f460f05a45121bd7957a6e25eda6316874b49097771048df1de7cb645a4bfc576cf8aad78108a3dcd628b4b6192bfe7e76c9ad6", 0x5d, 0x20000040, &(0x7f0000000380)={0xa, 0x4e24, 0x4, @private1, 0x3}, 0x1c) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x7, &(0x7f0000000040)=ANY=[@ANYRESOCT=r10, @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000030000ff7f0000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r11}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r12 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r12, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.73526007s ago: executing program 0 (id=7150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010000000000e6ff040000000000000010000000000000002000000000000000"], 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000740)='./bus\x00', 0x148) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) 2.7326706s ago: executing program 2 (id=7151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x830) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = getuid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@min_batch_time}, {@nolazytime}, {@nogrpid}, {@dax_never}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nolazytime}, {@data_err_abort}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/%]#'}}, {@euid_eq={'euid', 0x3d, r8}}, {@subj_role={'subj_role', 0x3d, '^{%'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'min_b\x00tch_time\xdc\xa9\xb4\xe0\xd5\xb4\x7f\x0e\xde\xc3\xf5Y\x13\xd2\x83\xb5\x04\xbe\xf2\xd1\xf6\x9bIt\xd1g\xb7\xf1m\x1c\x03Q\xee\xb7\x84\x19\xdb \x99\x97B+\x91\xe7XU\x15\x83-3tL\r\xe6,\xae#\x93\"\xd1\x88V?\xd8K\xbfQ\r}tt\a\x8e\xe8\x86\aH\xeeI\x05\xc6\x95\xbc\xcec\x1b:\x13\xfa\xe0\x06\xf5\xff\xd8\x18f\xbd]\xeeY)C\xd5'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ethtool\x00'}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x200019f, &(0x7f00000003c0)={[{@usrjquota_path={'usrjquota', 0x3d, './file0/file0'}}, {@test_dummy_encryption}, {@i_version}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@prjquota}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@delalloc}, {@stripe={'stripe', 0x3d, 0x7}}]}, 0x80, 0x550, &(0x7f0000000700)="$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") r9 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setaffinity(r10, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 2.283358437s ago: executing program 3 (id=7152): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @udp_ip4_spec={@empty, @multicast1}, {0x0, @random="339341c4940f"}, @esp_ip4_spec={@multicast1, @loopback}, {0x0, @local}}}}) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000e000000720a00ff0000000066000000ffffff80950000000000000018100000", @ANYRES32, @ANYBLOB='\x00\x002\x00\x00\x00\x00\x00\a\x00\x00\x00'], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0xfffffffc, @remote, 0x1}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000900)={[{@data_err_abort}, {@bh}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv1}, {@debug}]}, 0xfb, 0x476, &(0x7f0000000d40)="$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") 2.283036296s ago: executing program 1 (id=7153): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) clock_adjtime(0x0, &(0x7f0000000100)={0xf89, 0x6a, 0x55cd, 0xa, 0x48c, 0x4000000004, 0xd, 0x6465, 0x2, 0x1c5, 0x800, 0xfffffffffffffff7, 0x7, 0x2, 0x81, 0x5, 0x0, 0x5, 0x2, 0x8b7, 0x3, 0x6, 0x9, 0x574, 0x5, 0x3}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000600)={[{@auto_da_alloc_val}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@data_err_ignore}, {@commit={'commit', 0x3d, 0x101}}, {@jqfmt_vfsv1}, {@data_err_ignore}, {@test_dummy_encryption_v1}, {@grpquota}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 2.222591517s ago: executing program 4 (id=7154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8080) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000080), &(0x7f0000000180)='%-010d \x00'}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r11}, 0x18) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) 2.158598208s ago: executing program 2 (id=7155): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) 2.086390599s ago: executing program 3 (id=7156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.994268541s ago: executing program 3 (id=7157): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x88101) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) (fail_nth: 2) 1.668626286s ago: executing program 3 (id=7158): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], &(0x7f00000001c0)=""/131, 0x30, 0x83, 0x1, 0x0, 0x0, @void, @value}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ddd1cb907720699b22bd96ed4bf3db6ef62c6950ce483f8df772998808ed5fd85b591c0edc3bdf4d5f2da443826342ae9eded84584b8cfb6f5db43af9cba992c96fbf29732bfe467fb89710402bba624351c953bab95bedd9dd724c398082adc10f6816b210c43f2ff0f47f06b5591d12badccfa9120e52fbb380148a0a617b38da889cf2a80506fa63173f3fccee6e59aef1913772b30e25a80965040ac576772", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000007fff0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r10}, 0x10) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) 1.666991446s ago: executing program 0 (id=7159): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.569161107s ago: executing program 3 (id=7160): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x22400049, &(0x7f0000000240), 0x84, 0x49b, &(0x7f0000000a40)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b00000000ff00f825ffff00ffff00"}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000002f80)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) 1.541348498s ago: executing program 32 (id=7160): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x22400049, &(0x7f0000000240), 0x84, 0x49b, &(0x7f0000000a40)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b00000000ff00f825ffff00ffff00"}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000002f80)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) 1.451357989s ago: executing program 4 (id=7162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000200000000000000000000000850000"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="8b3300000000000000000500000008000300"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 1.417016099s ago: executing program 1 (id=7163): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x8001, 0x1, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = socket(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x8, 0xc2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000900008e438a55b9dfa25800090000000000", @ANYRES32=r3, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0500000002000000020000000d00"/28], 0x50) r10 = syz_pidfd_open(r2, 0x0) setns(r10, 0x24020000) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x48, &(0x7f0000000380)=0x16f16885, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) umount2(&(0x7f0000000000)='.\x00', 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 1.277069102s ago: executing program 1 (id=7164): socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") socket$netlink(0x10, 0x3, 0x4) creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) r4 = syz_io_uring_setup(0x7a6e, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', 0x0}) socket$key(0xf, 0x3, 0x2) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000001800)=ANY=[@ANYBLOB='iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB="2c696f636861727365743d63703933322c666d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d63703933322c0087c36ada509ad1217819ccb05e2c31c700a774505074a59028e5cccdd3"], 0x9, 0x1505, &(0x7f0000000180)="$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") add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 1.276313632s ago: executing program 2 (id=7165): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x1, 0x76a, &(0x7f0000000f80)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000840)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d392c73686f72746e616d653d77696e6e742c636f6465706167653d313235312c6e6f6e756d7461696c3d302c696f636861727365743d63703835302c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c0072e1a1908680add9fd3e4aab20077351f9af0c029b21424ff3"], 0x81, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESDEC=r5, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000c40)) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r8 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000100)={0x0, r8}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) 299.246306ms ago: executing program 0 (id=7166): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2040000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x1, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 257.418047ms ago: executing program 4 (id=7167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 256.782927ms ago: executing program 4 (id=7168): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) (async) socketpair(0x28, 0x80000, 0x8e, &(0x7f0000000000)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000d"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r2], 0x50}}, 0x800) 225.732747ms ago: executing program 0 (id=7169): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlockall(0x2) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f00000004c0)="a762918dd6c10f5973585e458edddea0b9", 0x11}], 0x1) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974792e2b3a4079afae8829e07b2f2300"]) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open_tree(r3, &(0x7f0000000080)='./file0/../file0\x00', 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 225.553127ms ago: executing program 4 (id=7170): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) sendfile(r1, r0, 0x0, 0x100000000) 141.224839ms ago: executing program 2 (id=7171): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0xf4, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x3, 0xfd, {0x1, 0x0, 0x0, 0x3, 0x10000006, 0x60, 0x1, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x10, 0x0, 0x0, 0x7, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffff}, {0x0, 0x7, 0x200}}, {{@in6=@mcast1}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x0, 0x1, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x41, 0x3, 0x3, '\x00', 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=7172): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x1100100) keyctl$chown(0x6, r3, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x100000000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10010, r0, 0x869eb000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x8, 0x19efc000, 0x2, 0x0, 0xb, 0xb, 0x7fff, 0x81, 0x171, 0x3, 0x6, 0x9f8, 0xffff, 0x3c, 0x9, 0x2, 0x5, 0x4, 0x6, 0x3, 0xffffffff, 0x40}}) kernel console output (not intermixed with test programs): erofs: (device loop2): mounted with root inode @ nid 36. [ 1353.504725][T22853] syz.2.6353: attempt to access beyond end of device [ 1353.504725][T22853] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1353.567892][T22852] syz.2.6353: attempt to access beyond end of device [ 1353.567892][T22852] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1354.087963][T22866] loop4: detected capacity change from 0 to 512 [ 1354.109805][T22866] EXT4-fs: Ignoring removed bh option [ 1354.125805][T22866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1800c018, mo2=0002] [ 1354.141150][T11691] usb 1-1: SerialNumber: syz [ 1354.156708][T22866] EXT4-fs (loop4): 1 truncate cleaned up [ 1354.160631][T22869] loop2: detected capacity change from 0 to 1024 [ 1354.162177][T22866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1354.176334][T11691] r8152-cfgselector 1-1: config 0 descriptor?? [ 1354.177268][T22869] EXT4-fs: Ignoring removed orlov option [ 1354.190277][T22869] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1354.210150][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1354.216850][T22869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1354.390363][T11691] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1354.402786][T11691] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1354.416388][T11691] r8152-cfgselector 1-1: bad CDC descriptors [ 1354.453749][T22880] loop4: detected capacity change from 0 to 8192 [ 1354.603141][T11691] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1354.625063][T11691] r8152-cfgselector 1-1: USB disconnect, device number 13 [ 1355.081439][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1355.723043][T22899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6369'. [ 1355.784178][T20115] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1355.976368][T20115] usb 3-1: Using ep0 maxpacket: 16 [ 1355.983092][T22907] loop1: detected capacity change from 0 to 16 [ 1356.050452][T20115] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1356.067029][T22907] erofs: (device loop1): mounted with root inode @ nid 36. [ 1356.224451][T22907] syz.1.6371: attempt to access beyond end of device [ 1356.224451][T22907] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1356.241234][T22907] syz.1.6371: attempt to access beyond end of device [ 1356.241234][T22907] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1356.455777][T20115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.545376][T20115] usb 3-1: Product: syz [ 1356.602522][T20115] usb 3-1: Manufacturer: syz [ 1356.746311][T20115] usb 3-1: SerialNumber: syz [ 1356.776708][T20115] r8152-cfgselector 3-1: config 0 descriptor?? [ 1356.829105][T22909] loop0: detected capacity change from 0 to 8192 [ 1356.933843][T22919] loop1: detected capacity change from 0 to 1024 [ 1356.944448][T22919] EXT4-fs: Ignoring removed orlov option [ 1356.951110][T22919] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1356.962120][T22919] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1357.046554][ T60] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1357.057209][T20115] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1357.065839][T20115] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1357.072498][T20115] r8152-cfgselector 3-1: bad CDC descriptors [ 1357.269179][T20115] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1357.286511][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 1357.333406][ T60] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1357.410838][T20115] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 1357.420085][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.428652][ T60] usb 4-1: Product: syz [ 1357.432703][ T60] usb 4-1: Manufacturer: syz [ 1357.437822][ T60] usb 4-1: SerialNumber: syz [ 1357.443531][ T60] r8152-cfgselector 4-1: config 0 descriptor?? [ 1357.467723][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6377'. [ 1357.651501][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1357.658402][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1357.664805][ T60] r8152-cfgselector 4-1: bad CDC descriptors [ 1357.836362][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1357.858916][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1357.867376][ T60] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 1358.021417][T22937] loop2: detected capacity change from 0 to 1024 [ 1358.042285][T22937] EXT4-fs: Ignoring removed orlov option [ 1358.061170][T22937] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1358.092557][T22937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1358.161655][T22939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6379'. [ 1359.559074][T22955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6383'. [ 1360.087039][T22967] loop1: detected capacity change from 0 to 8192 [ 1360.109554][T22959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1360.165117][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1360.173569][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6387'. [ 1360.250190][T22977] loop2: detected capacity change from 0 to 1024 [ 1360.256940][T22977] EXT4-fs: Ignoring removed orlov option [ 1360.271919][T22977] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1360.288452][T22977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1360.928011][T22987] loop4: detected capacity change from 0 to 1024 [ 1360.960895][T22987] EXT4-fs: Ignoring removed orlov option [ 1360.976711][T22987] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1360.997194][T22987] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1361.455902][T22999] loop0: detected capacity change from 0 to 256 [ 1361.614016][T22999] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1362.657694][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1363.895579][T23019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6400'. [ 1363.990337][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1364.229348][T23025] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1364.238288][T23025] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1364.892350][T23030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6402'. [ 1365.080019][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6406'. [ 1366.426381][ T320] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1366.616258][ T320] usb 1-1: Using ep0 maxpacket: 16 [ 1366.624031][ T320] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1366.633256][ T320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.641326][ T320] usb 1-1: Product: syz [ 1366.645358][ T320] usb 1-1: Manufacturer: syz [ 1366.650033][ T320] usb 1-1: SerialNumber: syz [ 1366.659050][ T320] r8152-cfgselector 1-1: config 0 descriptor?? [ 1366.867033][ T320] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1366.873795][ T320] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1366.892271][ T320] r8152-cfgselector 1-1: bad CDC descriptors [ 1366.990935][T23077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6416'. [ 1367.037442][T23078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6415'. [ 1367.125316][ T320] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1367.297373][ T320] r8152-cfgselector 1-1: USB disconnect, device number 14 [ 1367.975108][T23086] loop1: detected capacity change from 0 to 8192 [ 1368.043268][T23092] loop2: detected capacity change from 0 to 8192 [ 1370.679044][T23136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6430'. [ 1371.224148][T23140] loop3: detected capacity change from 0 to 1024 [ 1371.340318][T23140] EXT4-fs: Ignoring removed orlov option [ 1371.384533][T23140] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1371.437783][T23144] loop4: detected capacity change from 0 to 1024 [ 1371.447321][T23140] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1371.483448][T23144] EXT4-fs: Ignoring removed orlov option [ 1371.506716][T23144] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1371.636600][T23144] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1372.588990][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1373.119816][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1374.480592][T23203] loop2: detected capacity change from 0 to 256 [ 1374.510267][T23203] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1374.534349][T23203] input: syz0 as /devices/virtual/input/input88 [ 1374.634948][T23205] loop1: detected capacity change from 0 to 16 [ 1377.394445][T23206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6448'. [ 1377.436906][T23205] erofs: (device loop1): mounted with root inode @ nid 36. [ 1377.504194][T23204] syz.1.6449: attempt to access beyond end of device [ 1377.504194][T23204] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1377.518519][T23204] syz.1.6449: attempt to access beyond end of device [ 1377.518519][T23204] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1377.988427][T23216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6450'. [ 1378.002136][ T19] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1378.810583][T23212] loop1: detected capacity change from 0 to 8192 [ 1378.837199][T23214] loop3: detected capacity change from 0 to 8192 [ 1379.120344][T23226] loop4: detected capacity change from 0 to 16 [ 1379.130242][T23226] erofs: (device loop4): mounted with root inode @ nid 36. [ 1379.282540][T23226] syz.4.6454: attempt to access beyond end of device [ 1379.282540][T23226] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1379.298880][T23226] syz.4.6454: attempt to access beyond end of device [ 1379.298880][T23226] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1380.454374][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1380.908304][T23254] loop2: detected capacity change from 0 to 256 [ 1380.939110][T23254] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1380.940720][T23255] loop0: detected capacity change from 0 to 512 [ 1380.976042][T23255] EXT4-fs: Ignoring removed bh option [ 1380.989108][T23254] input: syz0 as /devices/virtual/input/input89 [ 1380.999284][T23255] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1800c018, mo2=0002] [ 1381.022291][T23255] EXT4-fs (loop0): 1 truncate cleaned up [ 1381.028540][T23255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1381.056619][T20763] EXT4-fs (loop0): unmounting filesystem. [ 1382.144639][T23270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6464'. [ 1382.779754][T23272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6465'. [ 1383.646485][T23281] loop3: detected capacity change from 0 to 1024 [ 1383.696678][T23281] EXT4-fs: Ignoring removed orlov option [ 1384.981656][T23281] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1384.996933][T23281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1385.324218][T23298] loop0: detected capacity change from 0 to 256 [ 1385.715215][T23298] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1385.750266][T23298] input: syz0 as /devices/virtual/input/input90 [ 1385.820338][T23307] loop2: detected capacity change from 0 to 16 [ 1385.830117][T23307] erofs: (device loop2): mounted with root inode @ nid 36. [ 1386.050590][T23307] syz.2.6474: attempt to access beyond end of device [ 1386.050590][T23307] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1386.099732][T23307] syz.2.6474: attempt to access beyond end of device [ 1386.099732][T23307] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1387.277207][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1387.280838][T23321] loop1: detected capacity change from 0 to 8192 [ 1387.994949][T23330] loop2: detected capacity change from 0 to 512 [ 1388.001507][T23330] EXT4-fs: Ignoring removed bh option [ 1388.014961][T23330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1800c018, mo2=0002] [ 1388.053844][T23330] EXT4-fs (loop2): 1 truncate cleaned up [ 1388.072362][T23330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1388.131160][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1388.284489][T23340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6485'. [ 1388.345798][T23344] loop3: detected capacity change from 0 to 1024 [ 1388.358210][T23344] EXT4-fs: Ignoring removed orlov option [ 1388.364484][T23344] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1388.373352][T23344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1389.202389][T23361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6490'. [ 1389.503974][T23372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6493'. [ 1389.938643][T23374] loop4: detected capacity change from 0 to 256 [ 1390.585787][T23374] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1391.565149][T23389] loop1: detected capacity change from 0 to 16 [ 1391.607541][T23389] erofs: (device loop1): mounted with root inode @ nid 36. [ 1392.206732][T23392] syz.1.6496: attempt to access beyond end of device [ 1392.206732][T23392] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1392.349823][T23389] syz.1.6496: attempt to access beyond end of device [ 1392.349823][T23389] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1393.081089][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1393.163058][T23402] loop3: detected capacity change from 0 to 8192 [ 1393.306285][T23101] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1393.496253][T23101] usb 2-1: Using ep0 maxpacket: 16 [ 1393.503945][T23101] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1393.516317][T23101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.525902][T23101] usb 2-1: Product: syz [ 1393.539032][T23101] usb 2-1: Manufacturer: syz [ 1393.543626][T23101] usb 2-1: SerialNumber: syz [ 1393.556337][T23101] r8152-cfgselector 2-1: config 0 descriptor?? [ 1393.590950][T23405] loop4: detected capacity change from 0 to 8192 [ 1393.766589][T23101] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1393.973414][T23101] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1393.981627][T23101] r8152-cfgselector 2-1: bad CDC descriptors [ 1394.005208][T23101] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1394.025243][T23101] r8152-cfgselector 2-1: USB disconnect, device number 27 [ 1394.043991][T23411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6504'. [ 1394.205277][T23422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1394.209823][T23418] loop3: detected capacity change from 0 to 8192 [ 1394.430146][T23427] loop2: detected capacity change from 0 to 256 [ 1394.454306][T23427] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1394.513869][T23427] input: syz0 as /devices/virtual/input/input91 [ 1395.153517][T23437] loop0: detected capacity change from 0 to 8192 [ 1395.454185][T23444] loop3: detected capacity change from 0 to 1024 [ 1395.461040][T23444] EXT4-fs: Ignoring removed orlov option [ 1395.485791][T23444] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1395.517838][T23444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1396.675574][T23458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6515'. [ 1396.726952][T23461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1397.589698][T23481] loop0: detected capacity change from 0 to 16 [ 1397.599235][T23481] erofs: (device loop0): mounted with root inode @ nid 36. [ 1397.970594][T23481] syz.0.6519: attempt to access beyond end of device [ 1397.970594][T23481] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1398.539372][T23482] loop2: detected capacity change from 0 to 1024 [ 1398.648119][T23480] loop4: detected capacity change from 0 to 8192 [ 1398.683567][T23482] EXT4-fs: Ignoring removed bh option [ 1398.746958][T23482] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1399.037371][T23491] loop1: detected capacity change from 0 to 16 [ 1399.070283][T23491] erofs: (device loop1): mounted with root inode @ nid 36. [ 1399.236127][T23491] syz.1.6522: attempt to access beyond end of device [ 1399.236127][T23491] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1399.252757][T23491] syz.1.6522: attempt to access beyond end of device [ 1399.252757][T23491] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1399.351634][T23482] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1399.613751][T23495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1399.799542][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1400.309009][T23509] loop1: detected capacity change from 0 to 256 [ 1400.398846][T23509] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1400.667704][T23509] input: syz0 as /devices/virtual/input/input92 [ 1400.725160][T23516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6530'. [ 1401.200719][T23527] loop3: detected capacity change from 0 to 16 [ 1401.210670][T23527] erofs: (device loop3): mounted with root inode @ nid 36. [ 1401.575927][T23527] syz.3.6532: attempt to access beyond end of device [ 1401.575927][T23527] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1401.597150][T23527] syz.3.6532: attempt to access beyond end of device [ 1401.597150][T23527] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1402.247372][T23534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6533'. [ 1402.403178][T23536] overlayfs: failed to resolve './file1': -2 [ 1403.961466][T23548] loop3: detected capacity change from 0 to 1024 [ 1403.995459][T23548] EXT4-fs: Ignoring removed orlov option [ 1404.001637][T23548] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1404.019864][T23548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1404.134930][T23560] loop2: detected capacity change from 0 to 1024 [ 1404.175460][T23560] EXT4-fs: Ignoring removed bh option [ 1404.211082][T23561] loop4: detected capacity change from 0 to 16 [ 1404.221497][T23561] erofs: (device loop4): mounted with root inode @ nid 36. [ 1404.257818][T23562] overlayfs: failed to resolve './file1': -2 [ 1404.414410][T23564] syz.4.6536: attempt to access beyond end of device [ 1404.414410][T23564] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1404.427772][T23564] syz.4.6536: attempt to access beyond end of device [ 1404.427772][T23564] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1404.457787][T23560] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1404.527020][T23560] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1406.081985][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6542'. [ 1406.194856][T23580] loop1: detected capacity change from 0 to 16 [ 1407.150588][T23580] erofs: (device loop1): mounted with root inode @ nid 36. [ 1407.247749][T23578] syz.1.6543: attempt to access beyond end of device [ 1407.247749][T23578] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1407.262313][T23578] syz.1.6543: attempt to access beyond end of device [ 1407.262313][T23578] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1407.647036][T23586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6544'. [ 1407.881184][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1408.036476][T20115] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1408.236418][T20115] usb 1-1: Using ep0 maxpacket: 16 [ 1408.245793][T20115] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1408.396247][T20115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.434628][T20115] usb 1-1: Product: syz [ 1408.438701][T20115] usb 1-1: Manufacturer: syz [ 1408.443060][T20115] usb 1-1: SerialNumber: syz [ 1408.449673][T23592] loop3: detected capacity change from 0 to 8192 [ 1408.501968][T20115] r8152-cfgselector 1-1: config 0 descriptor?? [ 1408.666906][T23594] loop1: detected capacity change from 0 to 8192 [ 1408.747819][T20115] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1408.761202][T20115] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1408.817636][T23601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6549'. [ 1408.999910][T20115] r8152-cfgselector 1-1: bad CDC descriptors [ 1409.088902][T20115] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1409.213254][T20115] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 1410.026436][T23615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6552'. [ 1410.076044][T23616] loop0: detected capacity change from 0 to 256 [ 1410.089700][T23616] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1410.105291][T23616] input: syz0 as /devices/virtual/input/input93 [ 1410.196308][T18876] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1410.386220][T18876] usb 4-1: Using ep0 maxpacket: 16 [ 1410.393710][T18876] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1410.402799][T18876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.410757][T18876] usb 4-1: Product: syz [ 1410.414778][T18876] usb 4-1: Manufacturer: syz [ 1410.419251][T18876] usb 4-1: SerialNumber: syz [ 1410.424643][T18876] r8152-cfgselector 4-1: config 0 descriptor?? [ 1410.632134][T18876] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1410.862891][T23630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6555'. [ 1412.524635][T23635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6558'. [ 1412.793162][T23638] loop2: detected capacity change from 0 to 1024 [ 1412.926944][T23638] EXT4-fs: Ignoring removed orlov option [ 1412.936513][T23638] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1414.024420][T18876] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1414.031041][T18876] r8152-cfgselector 4-1: bad CDC descriptors [ 1414.038275][T18876] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1414.054568][T18876] r8152-cfgselector 4-1: USB disconnect, device number 22 [ 1414.066853][T23638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1414.212947][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6562'. [ 1414.281110][T23626] loop0: detected capacity change from 0 to 1024 [ 1414.502998][T23656] loop1: detected capacity change from 0 to 16 [ 1414.517602][T23656] erofs: (device loop1): mounted with root inode @ nid 36. [ 1414.546453][T23656] syz.1.6561: attempt to access beyond end of device [ 1414.546453][T23656] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1414.977304][T23656] syz.1.6561: attempt to access beyond end of device [ 1414.977304][T23656] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1415.302741][T23658] loop4: detected capacity change from 0 to 16 [ 1415.354532][T23658] erofs: (device loop4): mounted with root inode @ nid 36. [ 1415.697917][T23658] syz.4.6563: attempt to access beyond end of device [ 1415.697917][T23658] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1415.816672][T23658] syz.4.6563: attempt to access beyond end of device [ 1415.816672][T23658] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1416.126126][T23661] loop1: detected capacity change from 0 to 1024 [ 1416.135926][T23661] EXT4-fs: Ignoring removed orlov option [ 1416.153961][T23661] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1416.181326][T23661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1416.345749][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1416.354712][T23665] loop4: detected capacity change from 0 to 8192 [ 1416.606224][T18876] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1416.676228][ T707] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1416.736232][ T19] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1416.796218][T18876] usb 4-1: Using ep0 maxpacket: 16 [ 1416.803736][T18876] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1416.825676][T18876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.834456][T18876] usb 4-1: Product: syz [ 1416.839445][T18876] usb 4-1: Manufacturer: syz [ 1416.844530][T18876] usb 4-1: SerialNumber: syz [ 1416.865280][T18876] r8152-cfgselector 4-1: config 0 descriptor?? [ 1416.876293][ T707] usb 3-1: Using ep0 maxpacket: 16 [ 1416.888102][ T707] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1416.916254][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 1416.921413][ T707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.923877][ T19] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1416.939860][ T707] usb 3-1: Product: syz [ 1416.944689][ T707] usb 3-1: Manufacturer: syz [ 1416.950183][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.956495][ T707] usb 3-1: SerialNumber: syz [ 1416.965172][ T19] usb 1-1: Product: syz [ 1416.970111][ T707] r8152-cfgselector 3-1: config 0 descriptor?? [ 1416.976610][ T19] usb 1-1: Manufacturer: syz [ 1416.981778][ T19] usb 1-1: SerialNumber: syz [ 1416.997356][ T19] r8152-cfgselector 1-1: config 0 descriptor?? [ 1417.073517][T18876] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1417.084810][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1417.178232][ T707] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1417.184955][ T707] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1417.191443][ T707] r8152-cfgselector 3-1: bad CDC descriptors [ 1417.213293][ T19] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1417.226270][ T19] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1417.232440][ T19] r8152-cfgselector 1-1: bad CDC descriptors [ 1417.331477][T23680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6569'. [ 1417.413065][ T707] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1417.426114][ T707] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 1418.346338][T18876] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1418.352767][T18876] r8152-cfgselector 4-1: bad CDC descriptors [ 1418.358676][ T19] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1418.365700][ T19] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 1418.373561][T18876] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1418.384646][T18876] r8152-cfgselector 4-1: USB disconnect, device number 23 [ 1418.618478][T23689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6572'. [ 1420.645391][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6570'. [ 1420.756229][T23698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6574'. [ 1421.633116][T23711] loop4: detected capacity change from 0 to 8192 [ 1421.695483][T23714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6576'. [ 1421.934419][T23724] loop2: detected capacity change from 0 to 1024 [ 1421.963293][T23724] EXT4-fs: Ignoring removed bh option [ 1422.002276][T23724] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1422.045175][T23724] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1422.415863][T23729] loop3: detected capacity change from 0 to 1024 [ 1422.426749][T23729] EXT4-fs: Ignoring removed orlov option [ 1422.435515][T23729] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1422.449509][T23729] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1422.516401][ T707] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1422.767533][T23738] loop2: detected capacity change from 0 to 16 [ 1423.530509][T23738] erofs: (device loop2): mounted with root inode @ nid 36. [ 1423.904255][T23738] syz.2.6582: attempt to access beyond end of device [ 1423.904255][T23738] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1423.924228][T23738] syz.2.6582: attempt to access beyond end of device [ 1423.924228][T23738] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1424.259821][T23740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6583'. [ 1424.399275][ T707] usb 1-1: Using ep0 maxpacket: 16 [ 1424.971880][ T707] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1424.988499][ T707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.996702][ T707] usb 1-1: Product: syz [ 1425.000685][ T707] usb 1-1: Manufacturer: syz [ 1425.005113][ T707] usb 1-1: SerialNumber: syz [ 1425.014267][ T707] r8152-cfgselector 1-1: config 0 descriptor?? [ 1425.239568][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6585'. [ 1425.597794][ T707] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1425.654313][ T707] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1425.805886][ T707] r8152-cfgselector 1-1: bad CDC descriptors [ 1425.877817][T23753] loop4: detected capacity change from 0 to 1024 [ 1425.962361][ T707] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1425.983757][T23753] EXT4-fs: Ignoring removed orlov option [ 1426.000025][ T707] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 1426.010082][T23753] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1426.090696][T23758] loop2: detected capacity change from 0 to 8192 [ 1426.138253][T23753] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1426.193544][T23765] loop1: detected capacity change from 0 to 8192 [ 1426.305551][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1426.462438][T23772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6591'. [ 1426.876789][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1427.068463][T23781] loop2: detected capacity change from 0 to 1024 [ 1427.079559][T23781] EXT4-fs: Ignoring removed orlov option [ 1427.090834][T23781] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1427.099591][T23781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1427.109506][T23778] loop0: detected capacity change from 0 to 16 [ 1427.118329][T23778] erofs: (device loop0): mounted with root inode @ nid 36. [ 1427.333965][T23787] syz.0.6593: attempt to access beyond end of device [ 1427.333965][T23787] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1427.578978][T23778] syz.0.6593: attempt to access beyond end of device [ 1427.578978][T23778] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1427.649470][T23786] loop4: detected capacity change from 0 to 16 [ 1428.096695][T23786] erofs: (device loop4): mounted with root inode @ nid 36. [ 1428.209865][T23789] syz.4.6592: attempt to access beyond end of device [ 1428.209865][T23789] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1428.298476][T23786] syz.4.6592: attempt to access beyond end of device [ 1428.298476][T23786] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1428.613970][T23785] loop1: detected capacity change from 0 to 8192 [ 1428.809025][T23798] loop4: detected capacity change from 0 to 1024 [ 1429.138079][T23800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6597'. [ 1429.221222][T23798] EXT4-fs: Ignoring removed orlov option [ 1429.358958][T23798] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1429.513554][T23798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1430.124156][T23823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1430.888008][T23829] loop3: detected capacity change from 0 to 1024 [ 1430.914356][T23829] EXT4-fs: Ignoring removed orlov option [ 1430.940321][T23829] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1430.955324][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1430.984204][T23829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1431.985303][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1432.137760][T23845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6606'. [ 1432.999289][T23846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6608'. [ 1433.079013][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1433.162049][ T19] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1433.234113][T23856] loop3: detected capacity change from 0 to 8192 [ 1433.242312][T23852] loop1: detected capacity change from 0 to 16 [ 1433.323459][T23858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6609'. [ 1433.364602][T23852] erofs: (device loop1): mounted with root inode @ nid 36. [ 1433.423089][T23852] syz.1.6610: attempt to access beyond end of device [ 1433.423089][T23852] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1433.437188][T23852] syz.1.6610: attempt to access beyond end of device [ 1433.437188][T23852] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1434.616297][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6611'. [ 1435.624856][T23866] loop1: detected capacity change from 0 to 8192 [ 1435.815774][T23873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6615'. [ 1436.736270][T18876] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1436.896239][ T19] usb 1-1: device not accepting address 18, error -71 [ 1437.021734][T23892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6620'. [ 1437.994285][T18876] usb 5-1: Using ep0 maxpacket: 16 [ 1438.011517][T18876] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1438.055069][T18876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.063669][T18876] usb 5-1: Product: syz [ 1438.068046][T18876] usb 5-1: Manufacturer: syz [ 1438.072470][T18876] usb 5-1: SerialNumber: syz [ 1438.081144][T18876] r8152-cfgselector 5-1: config 0 descriptor?? [ 1438.107161][T23895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6621'. [ 1438.170353][T23906] loop2: detected capacity change from 0 to 16 [ 1438.210307][T23906] erofs: (device loop2): mounted with root inode @ nid 36. [ 1438.239913][T23906] syz.2.6624: attempt to access beyond end of device [ 1438.239913][T23906] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1438.253184][T23906] syz.2.6624: attempt to access beyond end of device [ 1438.253184][T23906] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1438.334137][T23911] loop3: detected capacity change from 0 to 16 [ 1438.641674][T23911] erofs: (device loop3): mounted with root inode @ nid 36. [ 1438.921239][T23911] syz.3.6625: attempt to access beyond end of device [ 1438.921239][T23911] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1439.076895][T23911] syz.3.6625: attempt to access beyond end of device [ 1439.076895][T23911] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1441.556405][T23929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6629'. [ 1443.669015][T23938] loop4: detected capacity change from 0 to 1024 [ 1443.697270][T23938] EXT4-fs: Ignoring removed orlov option [ 1443.721262][T23938] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1443.729557][T23935] loop0: detected capacity change from 0 to 8192 [ 1443.768598][T23938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1443.867096][T23928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6628'. [ 1443.895444][T18876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1443.916320][T18876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1443.922473][T18876] r8152-cfgselector 5-1: bad CDC descriptors [ 1443.932515][T18876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1444.183063][T18876] r8152-cfgselector 5-1: USB disconnect, device number 29 [ 1444.203217][T23951] loop3: detected capacity change from 0 to 1024 [ 1444.210000][T23951] EXT4-fs: Ignoring removed orlov option [ 1444.216750][T23951] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1444.232306][T23951] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1444.520578][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1444.746925][T23962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6638'. [ 1444.836252][T18876] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1444.976340][ T60] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1445.031338][T18876] usb 5-1: Using ep0 maxpacket: 16 [ 1445.046893][T18876] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1445.056087][T18876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.064610][T18876] usb 5-1: Product: syz [ 1445.068975][T18876] usb 5-1: Manufacturer: syz [ 1445.073487][T18876] usb 5-1: SerialNumber: syz [ 1445.082789][T18876] r8152-cfgselector 5-1: config 0 descriptor?? [ 1445.178406][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1445.186208][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6640'. [ 1445.196598][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 1445.210086][ T60] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1445.220623][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.229028][ T60] usb 1-1: Product: syz [ 1445.233187][ T60] usb 1-1: Manufacturer: syz [ 1445.237995][ T60] usb 1-1: SerialNumber: syz [ 1445.252665][ T60] r8152-cfgselector 1-1: config 0 descriptor?? [ 1445.290851][T18876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1445.367116][T23973] loop3: detected capacity change from 0 to 16 [ 1445.373931][T23973] erofs: (device loop3): mounted with root inode @ nid 36. [ 1445.401320][T23973] syz.3.6642: attempt to access beyond end of device [ 1445.401320][T23973] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1445.414597][T23973] syz.3.6642: attempt to access beyond end of device [ 1445.414597][T23973] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1445.497804][T18876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1445.505606][T18876] r8152-cfgselector 5-1: bad CDC descriptors [ 1445.510039][ T60] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1445.512594][T18876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1445.528952][T18876] r8152-cfgselector 5-1: USB disconnect, device number 30 [ 1445.713153][ T60] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1445.719611][ T60] r8152-cfgselector 1-1: bad CDC descriptors [ 1445.725843][ T60] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1445.733207][ T60] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 1445.910999][T23981] loop1: detected capacity change from 0 to 1024 [ 1445.918430][T23981] EXT4-fs: Ignoring removed orlov option [ 1445.924646][T23981] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1445.933495][T23981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1446.181786][T23988] loop3: detected capacity change from 0 to 1024 [ 1446.263425][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6646'. [ 1446.310908][T23988] EXT4-fs: Ignoring removed orlov option [ 1446.402184][T23988] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1446.532091][T23988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1447.332056][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1447.457448][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6649'. [ 1448.420770][T24013] loop0: detected capacity change from 0 to 1024 [ 1448.439938][T24003] loop3: detected capacity change from 0 to 8192 [ 1448.461339][T24013] EXT4-fs: Ignoring removed orlov option [ 1448.492284][T24013] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1448.609337][T24013] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1451.020921][T24035] loop4: detected capacity change from 0 to 8192 [ 1451.068755][T20763] EXT4-fs (loop0): unmounting filesystem. [ 1451.187867][T24041] loop2: detected capacity change from 0 to 16 [ 1451.199236][T24041] erofs: (device loop2): mounted with root inode @ nid 36. [ 1451.687230][T24041] syz.2.6656: attempt to access beyond end of device [ 1451.687230][T24041] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1451.715478][T24041] syz.2.6656: attempt to access beyond end of device [ 1451.715478][T24041] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1452.132381][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1453.088003][T24056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6661'. [ 1456.035311][T24063] loop2: detected capacity change from 0 to 8192 [ 1456.063131][T24076] loop0: detected capacity change from 0 to 1024 [ 1456.070412][T24076] EXT4-fs: Ignoring removed orlov option [ 1456.078693][T24076] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1456.152016][T24081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6666'. [ 1457.492618][T24076] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1457.516688][T24091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6669'. [ 1458.443341][ T39] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1458.511189][T20763] EXT4-fs (loop0): unmounting filesystem. [ 1458.598138][T24100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6670'. [ 1458.872214][T24108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6673'. [ 1459.164111][T24111] loop4: detected capacity change from 0 to 1024 [ 1459.195575][T24111] EXT4-fs: Ignoring removed orlov option [ 1459.223702][T24111] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1459.226245][ T60] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1459.248539][T24111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1459.416298][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 1459.423834][ T60] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1459.463448][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.486309][ T60] usb 4-1: Product: syz [ 1459.490597][ T60] usb 4-1: Manufacturer: syz [ 1459.515510][ T60] usb 4-1: SerialNumber: syz [ 1459.536415][ T60] r8152-cfgselector 4-1: config 0 descriptor?? [ 1459.586305][ T39] usb 5-1: device not accepting address 31, error -71 [ 1459.744035][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1459.832191][T24123] loop1: detected capacity change from 0 to 1024 [ 1459.861676][T24123] EXT4-fs: Ignoring removed orlov option [ 1459.871349][T24123] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1459.886261][T18876] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1459.905994][T24123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1459.993710][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1460.010686][ T60] r8152-cfgselector 4-1: bad CDC descriptors [ 1460.022085][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1460.071287][ T60] r8152-cfgselector 4-1: USB disconnect, device number 24 [ 1460.311304][T18876] usb 3-1: Using ep0 maxpacket: 16 [ 1460.319083][T18876] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1460.330847][T18876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.346208][T18876] usb 3-1: Product: syz [ 1460.350453][T18876] usb 3-1: Manufacturer: syz [ 1460.354962][T18876] usb 3-1: SerialNumber: syz [ 1460.366455][T18876] r8152-cfgselector 3-1: config 0 descriptor?? [ 1460.380166][T24128] loop0: detected capacity change from 0 to 8192 [ 1460.420670][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1460.574132][T18876] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1460.653553][T24135] overlayfs: failed to resolve './file0': -2 [ 1460.856014][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1460.880264][T18876] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1460.887251][T18876] r8152-cfgselector 3-1: bad CDC descriptors [ 1460.893860][T18876] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1460.901003][T18876] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 1460.975972][T24140] loop1: detected capacity change from 0 to 8192 [ 1460.979545][T24138] loop3: detected capacity change from 0 to 8192 [ 1461.482238][T24152] loop0: detected capacity change from 0 to 8192 [ 1461.603812][T24156] loop2: detected capacity change from 0 to 16 [ 1461.628799][T24156] erofs: (device loop2): mounted with root inode @ nid 36. [ 1461.981489][T24156] syz.2.6686: attempt to access beyond end of device [ 1461.981489][T24156] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1462.003000][T24156] syz.2.6686: attempt to access beyond end of device [ 1462.003000][T24156] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1462.566233][T18876] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1462.759675][T24167] loop2: detected capacity change from 0 to 16 [ 1462.769805][T24167] erofs: (device loop2): mounted with root inode @ nid 36. [ 1463.141172][T24167] syz.2.6687: attempt to access beyond end of device [ 1463.141172][T24167] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1463.163059][T24167] syz.2.6687: attempt to access beyond end of device [ 1463.163059][T24167] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1463.726313][T18876] usb 5-1: Using ep0 maxpacket: 16 [ 1463.736107][T18876] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1463.779336][T18876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.789633][T18876] usb 5-1: Product: syz [ 1463.793649][T18876] usb 5-1: Manufacturer: syz [ 1463.798148][T18876] usb 5-1: SerialNumber: syz [ 1463.818241][T18876] r8152-cfgselector 5-1: config 0 descriptor?? [ 1463.849581][T24174] loop3: detected capacity change from 0 to 1024 [ 1463.872318][T24174] EXT4-fs: Ignoring removed orlov option [ 1463.886298][T24174] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1463.926792][T24174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1464.245678][T24184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6689'. [ 1464.308005][T18876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1464.820971][T18876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1464.839415][T18876] r8152-cfgselector 5-1: bad CDC descriptors [ 1464.942915][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1465.054177][T24193] loop1: detected capacity change from 0 to 256 [ 1465.118615][T24193] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1465.148307][T18876] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1465.155319][T18876] r8152-cfgselector 5-1: USB disconnect, device number 33 [ 1465.263205][T24193] input: syz0 as /devices/virtual/input/input94 [ 1465.275418][T24195] loop2: detected capacity change from 0 to 8192 [ 1465.553326][T24206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6697'. [ 1466.562507][T24216] loop4: detected capacity change from 0 to 1024 [ 1466.565618][T24212] loop3: detected capacity change from 0 to 8192 [ 1466.616512][T24216] EXT4-fs: Ignoring removed orlov option [ 1466.638268][T24216] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1466.654641][T24214] loop0: detected capacity change from 0 to 8192 [ 1466.680575][T24216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1467.767123][T24232] loop3: detected capacity change from 0 to 1024 [ 1467.777011][T24232] EXT4-fs: Ignoring removed orlov option [ 1467.796241][T24232] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1467.840590][T24232] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1467.875065][T24235] loop0: detected capacity change from 0 to 16 [ 1467.884978][T24235] erofs: (device loop0): mounted with root inode @ nid 36. [ 1468.242927][T24235] syz.0.6703: attempt to access beyond end of device [ 1468.242927][T24235] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1468.264261][T24235] syz.0.6703: attempt to access beyond end of device [ 1468.264261][T24235] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1468.914139][T24238] loop2: detected capacity change from 0 to 8192 [ 1469.503559][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1469.606664][T24251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6707'. [ 1469.646299][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1470.241401][T18876] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1470.378485][T24264] loop1: detected capacity change from 0 to 256 [ 1470.401974][T24264] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1470.426214][T18876] usb 1-1: Using ep0 maxpacket: 16 [ 1470.433677][T18876] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1470.448904][T18876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.457296][T24264] input: syz0 as /devices/virtual/input/input95 [ 1470.463922][T18876] usb 1-1: Product: syz [ 1470.476207][T18876] usb 1-1: Manufacturer: syz [ 1470.480744][T18876] usb 1-1: SerialNumber: syz [ 1470.494675][T18876] r8152-cfgselector 1-1: config 0 descriptor?? [ 1470.536465][ T707] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1470.712299][T18876] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1470.716332][ T707] usb 4-1: Using ep0 maxpacket: 16 [ 1470.724259][T18876] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1470.730774][T18876] r8152-cfgselector 1-1: bad CDC descriptors [ 1470.731648][ T707] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1470.746367][T18876] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1470.752674][ T707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.755894][T18876] r8152-cfgselector 1-1: USB disconnect, device number 21 [ 1470.771433][ T707] usb 4-1: Product: syz [ 1470.776457][ T707] usb 4-1: Manufacturer: syz [ 1470.781277][ T707] usb 4-1: SerialNumber: syz [ 1470.798997][ T707] r8152-cfgselector 4-1: config 0 descriptor?? [ 1471.009933][ T707] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1471.197317][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6713'. [ 1471.216995][ T707] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1471.236299][ T707] r8152-cfgselector 4-1: bad CDC descriptors [ 1471.301734][ T707] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1471.309587][ T707] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 1471.509933][T24283] loop4: detected capacity change from 0 to 1024 [ 1471.516949][T24283] EXT4-fs: Ignoring removed bh option [ 1471.522679][T24283] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1471.534209][T24283] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1471.618861][T24285] loop1: detected capacity change from 0 to 16 [ 1471.628518][T24285] erofs: (device loop1): mounted with root inode @ nid 36. [ 1472.006340][T24285] syz.1.6716: attempt to access beyond end of device [ 1472.006340][T24285] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1472.027211][T24285] syz.1.6716: attempt to access beyond end of device [ 1472.027211][T24285] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1473.578524][T24300] loop0: detected capacity change from 0 to 16 [ 1473.734509][T24300] erofs: (device loop0): mounted with root inode @ nid 36. [ 1473.863079][T24301] syz.0.6717: attempt to access beyond end of device [ 1473.863079][T24301] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1473.927998][T24300] syz.0.6717: attempt to access beyond end of device [ 1473.927998][T24300] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1474.460267][T24303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6721'. [ 1475.083129][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6722'. [ 1475.480052][T18876] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1475.581698][T24318] overlayfs: failed to resolve './file0': -2 [ 1475.977043][T24323] loop2: detected capacity change from 0 to 8192 [ 1476.071845][T18876] usb 4-1: Using ep0 maxpacket: 16 [ 1476.091141][T24325] loop0: detected capacity change from 0 to 16 [ 1476.092023][T18876] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1476.101450][T24325] erofs: (device loop0): mounted with root inode @ nid 36. [ 1476.120044][T18876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.136209][T18876] usb 4-1: Product: syz [ 1476.140371][T18876] usb 4-1: Manufacturer: syz [ 1476.144826][T18876] usb 4-1: SerialNumber: syz [ 1476.163385][T18876] r8152-cfgselector 4-1: config 0 descriptor?? [ 1476.170650][T24330] syz.0.6727: attempt to access beyond end of device [ 1476.170650][T24330] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1476.186438][T24325] syz.0.6727: attempt to access beyond end of device [ 1476.186438][T24325] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1476.249997][T24333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6729'. [ 1476.327495][T24334] loop4: detected capacity change from 0 to 16 [ 1476.336390][T24334] erofs: (device loop4): mounted with root inode @ nid 36. [ 1476.595973][T24334] syz.4.6728: attempt to access beyond end of device [ 1476.595973][T24334] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1476.614384][T24334] syz.4.6728: attempt to access beyond end of device [ 1476.614384][T24334] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1476.879914][T24335] loop1: detected capacity change from 0 to 256 [ 1477.365142][T24341] loop2: detected capacity change from 0 to 8192 [ 1477.371412][T18876] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1477.380799][T18876] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1477.396438][T18876] r8152-cfgselector 4-1: bad CDC descriptors [ 1477.415695][T18876] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1477.428947][T24335] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1477.432864][T18876] r8152-cfgselector 4-1: USB disconnect, device number 26 [ 1477.498008][T24339] loop3: detected capacity change from 0 to 8192 [ 1477.567840][T24335] input: syz0 as /devices/virtual/input/input96 [ 1477.746329][ T707] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1477.858594][T24353] loop4: detected capacity change from 0 to 256 [ 1477.927358][T24353] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1477.936252][ T707] usb 1-1: Using ep0 maxpacket: 16 [ 1477.950931][ T707] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1477.967499][ T707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.984817][ T707] usb 1-1: Product: syz [ 1477.993714][ T707] usb 1-1: Manufacturer: syz [ 1478.011431][T24353] input: syz0 as /devices/virtual/input/input97 [ 1478.019060][ T707] usb 1-1: SerialNumber: syz [ 1478.036312][ T707] r8152-cfgselector 1-1: config 0 descriptor?? [ 1478.246444][ T707] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1478.453620][ T707] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1478.461706][ T707] r8152-cfgselector 1-1: bad CDC descriptors [ 1478.490852][ T707] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1478.521711][ T707] r8152-cfgselector 1-1: USB disconnect, device number 22 [ 1478.744765][T24358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6734'. [ 1479.505309][T24361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6736'. [ 1480.547695][T24370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6737'. [ 1481.072217][T24372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6738'. [ 1481.720773][T24375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6739'. [ 1481.944237][T24384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6741'. [ 1482.845657][T24389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6743'. [ 1483.455302][ T707] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1483.785114][T24396] loop0: detected capacity change from 0 to 16 [ 1486.376250][T24397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6742'. [ 1486.408186][T24396] erofs: (device loop0): mounted with root inode @ nid 36. [ 1486.475780][T24394] syz.0.6744: attempt to access beyond end of device [ 1486.475780][T24394] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1486.489381][T24394] syz.0.6744: attempt to access beyond end of device [ 1486.489381][T24394] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1486.777578][T24401] loop0: detected capacity change from 0 to 1024 [ 1486.804176][T24401] EXT4-fs: Ignoring removed orlov option [ 1486.824734][T24401] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1486.858780][T24401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1487.153035][ T707] usb 2-1: device not accepting address 28, error -71 [ 1487.355219][T24414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6746'. [ 1487.586560][T20763] EXT4-fs (loop0): unmounting filesystem. [ 1487.702310][T24426] loop3: detected capacity change from 0 to 16 [ 1487.712081][T24426] erofs: (device loop3): mounted with root inode @ nid 36. [ 1488.733187][T24430] loop3: detected capacity change from 0 to 1024 [ 1488.795299][T24430] EXT4-fs: Ignoring removed orlov option [ 1488.812145][T24430] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1488.852805][T24430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1488.904115][T24435] loop0: detected capacity change from 0 to 256 [ 1489.046575][T24435] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1489.104495][T24435] input: syz0 as /devices/virtual/input/input98 [ 1489.421599][T24444] loop4: detected capacity change from 0 to 256 [ 1489.492075][T24444] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1489.576090][T24447] loop1: detected capacity change from 0 to 1024 [ 1489.596485][T24447] EXT4-fs: Ignoring removed orlov option [ 1489.603514][T24447] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1489.620925][T24447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1489.634510][T24444] input: syz0 as /devices/virtual/input/input99 [ 1489.980539][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1490.296197][ T5943] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1490.486195][ T5943] usb 4-1: Using ep0 maxpacket: 16 [ 1490.493660][ T5943] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1490.522978][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.543172][ T5943] usb 4-1: Product: syz [ 1490.553254][ T5943] usb 4-1: Manufacturer: syz [ 1490.575559][ T5943] usb 4-1: SerialNumber: syz [ 1490.587562][ T5943] r8152-cfgselector 4-1: config 0 descriptor?? [ 1490.770604][T24459] loop2: detected capacity change from 0 to 16 [ 1490.807401][T24459] erofs: (device loop2): mounted with root inode @ nid 36. [ 1490.926362][T24459] syz.2.6758: attempt to access beyond end of device [ 1490.926362][T24459] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1490.941793][T24459] syz.2.6758: attempt to access beyond end of device [ 1490.941793][T24459] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1491.685864][ T5943] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1491.700149][ T5943] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1491.706322][ T5943] r8152-cfgselector 4-1: bad CDC descriptors [ 1491.747875][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1491.899214][ T5943] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1491.908308][ T5943] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 1492.035268][T24473] loop0: detected capacity change from 0 to 1024 [ 1492.070778][T24473] EXT4-fs: Ignoring removed bh option [ 1492.083739][T24472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6761'. [ 1492.108499][T24473] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1492.192417][T24479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6763'. [ 1492.307133][T24473] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1493.043992][T24483] loop1: detected capacity change from 0 to 1024 [ 1493.136789][T24485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6764'. [ 1493.158234][T24483] EXT4-fs: Ignoring removed orlov option [ 1493.166651][T24483] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1493.284299][T24483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1494.653266][T24497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6767'. [ 1494.962083][T24499] loop3: detected capacity change from 0 to 1024 [ 1495.105914][T24499] EXT4-fs: Ignoring removed orlov option [ 1495.158002][T24499] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1495.318116][T24499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1495.771639][T24511] loop4: detected capacity change from 0 to 1024 [ 1495.780652][T24511] EXT4-fs: Ignoring removed bh option [ 1495.796884][T24511] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1495.808260][T24511] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1495.918114][T24508] loop0: detected capacity change from 0 to 8192 [ 1496.141438][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1496.832055][T24521] loop0: detected capacity change from 0 to 256 [ 1497.099021][ T404] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1497.133166][T24521] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1497.282783][T24521] input: syz0 as /devices/virtual/input/input100 [ 1497.296380][ T404] usb 5-1: Using ep0 maxpacket: 16 [ 1497.304229][ T404] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1497.358583][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.383301][ T404] usb 5-1: Product: syz [ 1497.396263][ T404] usb 5-1: Manufacturer: syz [ 1497.403525][ T404] usb 5-1: SerialNumber: syz [ 1497.415385][ T404] r8152-cfgselector 5-1: config 0 descriptor?? [ 1497.432228][T24526] loop1: detected capacity change from 0 to 8192 [ 1497.544378][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1497.693959][ T404] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1497.726385][ T707] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1497.946818][ T404] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1497.971612][ T404] r8152-cfgselector 5-1: bad CDC descriptors [ 1497.999534][ T404] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1498.021501][ T404] r8152-cfgselector 5-1: USB disconnect, device number 34 [ 1498.036189][ T707] usb 3-1: Using ep0 maxpacket: 16 [ 1498.047466][ T707] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1498.064430][ T707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.073361][ T707] usb 3-1: Product: syz [ 1498.078367][ T707] usb 3-1: Manufacturer: syz [ 1498.083424][ T707] usb 3-1: SerialNumber: syz [ 1498.107227][ T707] r8152-cfgselector 3-1: config 0 descriptor?? [ 1498.324003][ T707] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1498.332969][ T707] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1498.341832][ T707] r8152-cfgselector 3-1: bad CDC descriptors [ 1498.371255][T24541] loop0: detected capacity change from 0 to 512 [ 1498.378803][T24541] EXT4-fs: Ignoring removed bh option [ 1498.385585][T24541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1800c018, mo2=0002] [ 1498.394398][T24541] EXT4-fs (loop0): 1 truncate cleaned up [ 1498.400227][T24541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1498.418076][T20763] EXT4-fs (loop0): unmounting filesystem. [ 1498.600070][ T707] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1498.607209][ T707] r8152-cfgselector 3-1: USB disconnect, device number 25 [ 1498.636238][ T19] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1498.803010][T24554] loop4: detected capacity change from 0 to 16 [ 1501.318066][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6782'. [ 1502.959422][T24556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6780'. [ 1503.054341][T24554] erofs: (device loop4): erofs_read_superblock: cannot read erofs superblock [ 1503.152787][T24563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6783'. [ 1503.171647][T24567] loop2: detected capacity change from 0 to 1024 [ 1503.279007][T24071] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1503.279495][T24567] EXT4-fs: Ignoring removed orlov option [ 1503.298996][T24567] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1503.315348][T24567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1504.425349][T24581] loop4: detected capacity change from 0 to 16 [ 1504.435398][T24581] erofs: (device loop4): mounted with root inode @ nid 36. [ 1504.506046][T24582] syz.4.6785: attempt to access beyond end of device [ 1504.506046][T24582] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1504.524004][T24582] syz.4.6785: attempt to access beyond end of device [ 1504.524004][T24582] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1505.389781][T24596] loop3: detected capacity change from 0 to 256 [ 1505.435360][T24596] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1505.490433][T24596] input: syz0 as /devices/virtual/input/input101 [ 1505.656204][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 1505.663699][ T19] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1505.686233][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.715072][ T19] usb 2-1: Product: syz [ 1505.719118][ T19] usb 2-1: Manufacturer: syz [ 1505.723531][ T19] usb 2-1: SerialNumber: syz [ 1505.740376][T24600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6792'. [ 1505.764586][ T19] r8152-cfgselector 2-1: config 0 descriptor?? [ 1505.997128][T24605] loop0: detected capacity change from 0 to 1024 [ 1506.005561][T24605] EXT4-fs: Ignoring removed bh option [ 1506.012846][T24605] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1506.024169][T24605] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1506.166725][ T19] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1506.197443][ T19] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1506.203613][ T19] r8152-cfgselector 2-1: bad CDC descriptors [ 1506.240563][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1506.400704][ T19] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1506.413384][ T19] r8152-cfgselector 2-1: USB disconnect, device number 30 [ 1507.002396][T24614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6795'. [ 1508.047170][T24619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6796'. [ 1508.436208][ T39] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1508.516539][T24623] loop1: detected capacity change from 0 to 1024 [ 1508.545525][T24623] EXT4-fs: Ignoring removed bh option [ 1508.617951][T24623] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1508.629369][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 1508.639891][ T39] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1508.662667][T24623] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1508.680124][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.700433][ T39] usb 1-1: Product: syz [ 1508.704445][ T39] usb 1-1: Manufacturer: syz [ 1508.738168][ T39] usb 1-1: SerialNumber: syz [ 1508.755267][T24626] loop2: detected capacity change from 0 to 1024 [ 1508.765810][ T39] r8152-cfgselector 1-1: config 0 descriptor?? [ 1508.799545][T24626] EXT4-fs: Ignoring removed orlov option [ 1508.806706][T24626] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1508.847457][T24626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1508.985895][ T39] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1509.017122][ T39] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1509.025112][ T39] r8152-cfgselector 1-1: bad CDC descriptors [ 1509.728894][T24642] loop4: detected capacity change from 0 to 1024 [ 1509.735969][T24642] EXT4-fs: Ignoring removed bh option [ 1510.629518][T24642] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1510.640794][T24642] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1510.654692][ T39] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1510.661608][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1510.681698][ T39] r8152-cfgselector 1-1: USB disconnect, device number 23 [ 1510.751130][T24647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6803'. [ 1511.526404][T24652] loop3: detected capacity change from 0 to 8192 [ 1511.635144][T24071] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1511.723970][T24657] loop1: detected capacity change from 0 to 8192 [ 1511.876198][T24663] loop0: detected capacity change from 0 to 8192 [ 1511.900519][T24661] loop4: detected capacity change from 0 to 8192 [ 1511.937254][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1512.704571][T24676] loop3: detected capacity change from 0 to 1024 [ 1512.713457][T24676] EXT4-fs: Ignoring removed bh option [ 1512.721585][T24676] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1512.732767][T24676] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1512.848178][T24071] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1513.088281][T24685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6812'. [ 1513.693527][T24687] loop3: detected capacity change from 0 to 1024 [ 1513.843713][T24687] EXT4-fs: Ignoring removed orlov option [ 1513.852954][T24684] loop1: detected capacity change from 0 to 8192 [ 1513.867949][T24687] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1513.968679][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6816'. [ 1514.025775][T24687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1514.351351][T24707] loop0: detected capacity change from 0 to 8192 [ 1514.448783][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1515.019639][T24723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1515.412456][T24727] loop3: detected capacity change from 0 to 8192 [ 1515.589096][T24731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6826'. [ 1516.568251][T24735] loop0: detected capacity change from 0 to 1024 [ 1516.644216][T24735] EXT4-fs: Ignoring removed orlov option [ 1516.673003][T24735] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1516.792771][T24745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6828'. [ 1517.974170][T24735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1520.370573][T24762] loop3: detected capacity change from 0 to 1024 [ 1520.383385][T20763] EXT4-fs (loop0): unmounting filesystem. [ 1520.414759][T24762] EXT4-fs: Ignoring removed orlov option [ 1520.430019][T24762] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1520.444015][T24762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1520.530680][ T19] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1520.736627][ T404] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1520.926379][ T404] usb 1-1: Using ep0 maxpacket: 16 [ 1520.934319][ T404] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1520.943716][ T404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.952782][ T404] usb 1-1: Product: syz [ 1520.956815][ T404] usb 1-1: Manufacturer: syz [ 1520.961205][ T404] usb 1-1: SerialNumber: syz [ 1520.966187][ T404] r8152-cfgselector 1-1: config 0 descriptor?? [ 1520.966662][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 1520.979754][ T19] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1520.988729][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.996588][ T19] usb 5-1: Product: syz [ 1521.000572][ T19] usb 5-1: Manufacturer: syz [ 1521.005037][ T19] usb 5-1: SerialNumber: syz [ 1521.010323][ T19] r8152-cfgselector 5-1: config 0 descriptor?? [ 1521.169929][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1521.182723][ T404] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1521.191072][T24775] loop3: detected capacity change from 0 to 1024 [ 1521.198719][T24775] EXT4-fs: Ignoring removed orlov option [ 1521.204999][T24775] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1521.214761][T24775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1521.224800][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1521.235518][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1521.242455][ T19] r8152-cfgselector 5-1: bad CDC descriptors [ 1521.264258][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1521.380472][ T404] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1521.386962][ T404] r8152-cfgselector 1-1: bad CDC descriptors [ 1521.394382][ T404] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1521.422727][ T404] r8152-cfgselector 1-1: USB disconnect, device number 24 [ 1521.445483][T24787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6840'. [ 1521.929555][T24791] loop1: detected capacity change from 0 to 8192 [ 1522.367748][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1522.430214][T24803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6843'. [ 1523.160786][T24794] loop4: detected capacity change from 0 to 8192 [ 1523.178957][ T19] r8152-cfgselector 5-1: USB disconnect, device number 35 [ 1523.607624][T24824] loop4: detected capacity change from 0 to 1024 [ 1523.677324][T24827] loop0: detected capacity change from 0 to 16 [ 1523.687326][T24827] erofs: (device loop0): mounted with root inode @ nid 36. [ 1524.052004][T24827] syz.0.6848: attempt to access beyond end of device [ 1524.052004][T24827] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1524.073844][T24827] syz.0.6848: attempt to access beyond end of device [ 1524.073844][T24827] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1524.113673][T24824] EXT4-fs: Ignoring removed orlov option [ 1524.129247][T24824] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1524.164757][T24824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1524.279625][T24826] loop1: detected capacity change from 0 to 1024 [ 1524.628458][T24826] EXT4-fs: Ignoring removed orlov option [ 1524.647879][T24826] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1524.660255][T24826] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1524.683158][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1525.398973][T24842] loop3: detected capacity change from 0 to 256 [ 1525.411884][T24842] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1525.448177][T24842] input: syz0 as /devices/virtual/input/input102 [ 1525.563849][T24844] loop1: detected capacity change from 0 to 16 [ 1525.571741][T24844] erofs: (device loop1): mounted with root inode @ nid 36. [ 1525.616351][T24844] syz.1.6853: attempt to access beyond end of device [ 1525.616351][T24844] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1525.630960][T24844] syz.1.6853: attempt to access beyond end of device [ 1525.630960][T24844] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1525.653251][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1526.036215][ T404] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1526.051050][T24854] loop2: detected capacity change from 0 to 8192 [ 1526.226380][ T404] usb 1-1: Using ep0 maxpacket: 16 [ 1526.233993][ T404] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1526.281686][ T404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.359352][ T404] usb 1-1: Product: syz [ 1526.363404][ T404] usb 1-1: Manufacturer: syz [ 1526.369420][ T404] usb 1-1: SerialNumber: syz [ 1526.378162][ T404] r8152-cfgselector 1-1: config 0 descriptor?? [ 1526.504045][T24860] loop1: detected capacity change from 0 to 16 [ 1526.514081][T24860] erofs: (device loop1): mounted with root inode @ nid 36. [ 1526.940828][T24860] syz.1.6857: attempt to access beyond end of device [ 1526.940828][T24860] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1526.965490][T24860] syz.1.6857: attempt to access beyond end of device [ 1526.965490][T24860] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1527.016765][ T404] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1527.091676][ T404] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1527.403817][ T404] r8152-cfgselector 1-1: bad CDC descriptors [ 1527.410522][ T404] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1527.417480][ T404] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 1527.507749][T24863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6859'. [ 1527.627006][T24868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6858'. [ 1528.555445][T24878] loop4: detected capacity change from 0 to 1024 [ 1528.565032][T24874] loop0: detected capacity change from 0 to 8192 [ 1528.572186][T24878] EXT4-fs: Ignoring removed orlov option [ 1528.798681][T24878] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1528.858688][T24878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1528.916520][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1530.240654][T24899] loop0: detected capacity change from 0 to 256 [ 1530.317613][T24902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6866'. [ 1530.392999][T24899] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1530.529636][T24909] loop4: detected capacity change from 0 to 16 [ 1530.597507][T24909] erofs: (device loop4): mounted with root inode @ nid 36. [ 1530.957370][T24909] syz.4.6868: attempt to access beyond end of device [ 1530.957370][T24909] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1530.979178][T24909] syz.4.6868: attempt to access beyond end of device [ 1530.979178][T24909] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1531.091373][T24908] loop1: detected capacity change from 0 to 1024 [ 1531.477777][T24891] input: syz0 as /devices/virtual/input/input103 [ 1531.502582][T24908] EXT4-fs: Ignoring removed orlov option [ 1531.508959][T24908] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1531.529429][T24908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1531.689732][T24915] overlayfs: failed to resolve './file1': -2 [ 1531.740571][T24917] loop2: detected capacity change from 0 to 256 [ 1531.754816][T24919] loop4: detected capacity change from 0 to 1024 [ 1531.776687][T24919] EXT4-fs: Ignoring removed orlov option [ 1531.813909][T24919] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1532.076040][T24917] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1532.090972][T24919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1532.203301][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1532.837392][T24929] overlayfs: failed to resolve './file1': -2 [ 1532.997672][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1533.158799][T24937] loop1: detected capacity change from 0 to 1024 [ 1533.167116][T24937] EXT4-fs: Ignoring removed orlov option [ 1533.201980][T24937] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1533.243486][T24939] loop4: detected capacity change from 0 to 16 [ 1533.257651][T24939] erofs: (device loop4): mounted with root inode @ nid 36. [ 1533.623096][T24939] syz.4.6875: attempt to access beyond end of device [ 1533.623096][T24939] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1533.644264][T24939] syz.4.6875: attempt to access beyond end of device [ 1533.644264][T24939] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1534.154406][T24936] loop0: detected capacity change from 0 to 8192 [ 1534.172860][T24937] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1534.198669][T24943] loop3: detected capacity change from 0 to 8192 [ 1535.055526][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1535.334260][T24965] loop0: detected capacity change from 0 to 8192 [ 1535.402604][T24966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6882'. [ 1536.077286][T24970] loop3: detected capacity change from 0 to 16 [ 1536.995214][ T320] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1537.004894][T24970] erofs: (device loop3): mounted with root inode @ nid 36. [ 1537.071917][T24969] syz.3.6884: attempt to access beyond end of device [ 1537.071917][T24969] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1537.085811][T24969] syz.3.6884: attempt to access beyond end of device [ 1537.085811][T24969] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1537.296172][ T320] usb 2-1: Using ep0 maxpacket: 16 [ 1537.303675][ T320] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1537.313360][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.321744][ T320] usb 2-1: Product: syz [ 1537.326331][ T320] usb 2-1: Manufacturer: syz [ 1537.330765][ T320] usb 2-1: SerialNumber: syz [ 1537.346461][ T320] r8152-cfgselector 2-1: config 0 descriptor?? [ 1537.358689][T24979] loop4: detected capacity change from 0 to 16 [ 1537.366416][T24978] loop3: detected capacity change from 0 to 8192 [ 1537.426320][T24979] erofs: (device loop4): mounted with root inode @ nid 36. [ 1537.510020][T24982] syz.4.6885: attempt to access beyond end of device [ 1537.510020][T24982] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1537.554198][ T320] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1537.577165][T24979] syz.4.6885: attempt to access beyond end of device [ 1537.577165][T24979] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1537.754827][ T320] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1537.766489][T18876] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1537.789742][ T320] r8152-cfgselector 2-1: bad CDC descriptors [ 1537.816073][ T320] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1537.847872][ T320] r8152-cfgselector 2-1: USB disconnect, device number 31 [ 1537.986158][T18876] usb 1-1: Using ep0 maxpacket: 16 [ 1537.994004][T18876] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1538.023192][T18876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.049990][T18876] usb 1-1: Product: syz [ 1538.067495][T18876] usb 1-1: Manufacturer: syz [ 1538.080651][T18876] usb 1-1: SerialNumber: syz [ 1538.102650][T18876] r8152-cfgselector 1-1: config 0 descriptor?? [ 1538.327310][T18876] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1538.534187][T18876] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1538.542821][T18876] r8152-cfgselector 1-1: bad CDC descriptors [ 1538.566725][T18876] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1538.605356][T18876] r8152-cfgselector 1-1: USB disconnect, device number 26 [ 1538.628675][T24991] loop1: detected capacity change from 0 to 256 [ 1538.648960][T24991] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1538.687585][T24994] loop3: detected capacity change from 0 to 8192 [ 1538.707285][T24991] input: syz0 as /devices/virtual/input/input104 [ 1539.136791][T25004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6892'. [ 1539.917808][T25011] loop2: detected capacity change from 0 to 1024 [ 1540.025577][T25011] EXT4-fs: Ignoring removed orlov option [ 1540.169500][T25018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6896'. [ 1540.329197][T25019] loop4: detected capacity change from 0 to 16 [ 1543.093450][T25019] erofs: (device loop4): mounted with root inode @ nid 36. [ 1543.159593][T25017] syz.4.6897: attempt to access beyond end of device [ 1543.159593][T25017] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1543.173031][T25017] syz.4.6897: attempt to access beyond end of device [ 1543.173031][T25017] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1543.193278][T25011] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1543.204379][T25011] EXT4-fs: failed to create workqueue [ 1543.211158][T25011] EXT4-fs (loop2): mount failed [ 1543.540970][T25027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6899'. [ 1545.326346][T25034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6902'. [ 1546.130681][T25042] loop1: detected capacity change from 0 to 1024 [ 1546.137438][T25042] EXT4-fs: Ignoring removed orlov option [ 1546.143491][T25042] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1546.152491][T25042] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1546.912503][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1546.965237][T25051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6901'. [ 1547.369000][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1548.430005][T25068] loop1: detected capacity change from 0 to 1024 [ 1548.449201][T25068] EXT4-fs: Ignoring removed orlov option [ 1548.464433][T25068] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1548.489441][T25068] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1548.519669][T25070] loop2: detected capacity change from 0 to 8192 [ 1549.311135][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1549.394110][ T39] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1549.425393][T25085] loop2: detected capacity change from 0 to 8192 [ 1549.548736][T25090] loop4: detected capacity change from 0 to 16 [ 1549.559117][T25090] erofs: (device loop4): mounted with root inode @ nid 36. [ 1550.162444][T25092] syz.4.6913: attempt to access beyond end of device [ 1550.162444][T25092] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1550.267642][T25090] syz.4.6913: attempt to access beyond end of device [ 1550.267642][T25090] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1550.316384][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 1550.890579][ T39] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1550.941577][T25095] loop1: detected capacity change from 0 to 1024 [ 1550.948286][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.067157][T25095] EXT4-fs: Ignoring removed orlov option [ 1551.075005][T25095] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1551.076794][ T39] usb 4-1: Product: syz [ 1551.101301][ T39] usb 4-1: Manufacturer: syz [ 1551.112669][T25095] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1551.144990][ T39] usb 4-1: SerialNumber: syz [ 1551.287375][ T39] r8152-cfgselector 4-1: config 0 descriptor?? [ 1551.938665][ T39] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1551.950892][T25102] loop4: detected capacity change from 0 to 8192 [ 1551.963490][ T39] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1551.977375][ T39] r8152-cfgselector 4-1: bad CDC descriptors [ 1552.075736][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1552.170171][ T39] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1552.179164][ T39] r8152-cfgselector 4-1: USB disconnect, device number 28 [ 1552.279346][T25117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6919'. [ 1553.145992][T25123] loop2: detected capacity change from 0 to 8192 [ 1553.471364][T25136] loop1: detected capacity change from 0 to 256 [ 1553.503975][T25136] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1553.520997][T25135] loop3: detected capacity change from 0 to 8192 [ 1553.594058][T25137] loop0: detected capacity change from 0 to 1024 [ 1553.613642][T25137] EXT4-fs: Ignoring removed bh option [ 1553.632238][T25137] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1553.644091][T25137] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1554.335380][T25142] loop0: detected capacity change from 0 to 8192 [ 1554.409532][T25146] loop4: detected capacity change from 0 to 1024 [ 1554.421675][T25146] EXT4-fs: Ignoring removed orlov option [ 1554.446830][T25146] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1554.622351][T25146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1554.755005][T25152] loop3: detected capacity change from 0 to 8192 [ 1555.315596][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1555.858363][T25171] loop1: detected capacity change from 0 to 8192 [ 1556.032392][T25178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6933'. [ 1557.484292][T25189] loop3: detected capacity change from 0 to 8192 [ 1557.559840][T25193] loop2: detected capacity change from 0 to 1024 [ 1557.647764][T25193] EXT4-fs: Ignoring removed orlov option [ 1557.662759][T25193] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1557.689795][T25193] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1557.758147][T25197] loop0: detected capacity change from 0 to 16 [ 1557.808925][T25197] erofs: (device loop0): mounted with root inode @ nid 36. [ 1558.172420][T25197] syz.0.6938: attempt to access beyond end of device [ 1558.172420][T25197] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1558.194291][T25197] syz.0.6938: attempt to access beyond end of device [ 1558.194291][T25197] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1559.589248][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1559.852629][T25217] loop0: detected capacity change from 0 to 256 [ 1559.880973][T25218] overlayfs: failed to resolve './file0': -2 [ 1559.981016][T25211] loop4: detected capacity change from 0 to 16 [ 1560.003222][T25217] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1560.015859][T25211] erofs: (device loop4): mounted with root inode @ nid 36. [ 1560.041610][T25211] syz.4.6943: attempt to access beyond end of device [ 1560.041610][T25211] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1560.055107][T25211] syz.4.6943: attempt to access beyond end of device [ 1560.055107][T25211] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1560.113094][T23101] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1560.132124][T25222] loop2: detected capacity change from 0 to 16 [ 1560.150340][T25222] erofs: (device loop2): mounted with root inode @ nid 36. [ 1560.233242][T25223] syz.2.6941: attempt to access beyond end of device [ 1560.233242][T25223] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1560.253655][T25223] syz.2.6941: attempt to access beyond end of device [ 1560.253655][T25223] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1561.336203][T23101] usb 2-1: Using ep0 maxpacket: 16 [ 1561.344028][T23101] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1562.030378][T23101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.038573][T23101] usb 2-1: Product: syz [ 1562.042680][T23101] usb 2-1: Manufacturer: syz [ 1562.047496][T23101] usb 2-1: SerialNumber: syz [ 1562.053414][T23101] r8152-cfgselector 2-1: config 0 descriptor?? [ 1562.131681][T25235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6947'. [ 1563.652807][T25243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6948'. [ 1563.686383][T23101] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1563.898182][T23101] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1563.915296][T23101] r8152-cfgselector 2-1: bad CDC descriptors [ 1563.940129][T25250] loop1: detected capacity change from 0 to 1024 [ 1563.952898][T23101] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1563.975537][T25250] EXT4-fs: Ignoring removed orlov option [ 1563.989340][T23101] r8152-cfgselector 2-1: USB disconnect, device number 32 [ 1564.022610][T25250] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1564.117638][T25250] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1564.848178][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1564.916218][T18876] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1564.986390][T25269] loop3: detected capacity change from 0 to 16 [ 1564.997672][T25269] erofs: (device loop3): mounted with root inode @ nid 36. [ 1565.191258][T25269] syz.3.6955: attempt to access beyond end of device [ 1565.191258][T25269] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1565.209262][T25269] syz.3.6955: attempt to access beyond end of device [ 1565.209262][T25269] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1565.719840][T25273] loop0: detected capacity change from 0 to 1024 [ 1565.753976][T25273] EXT4-fs: Ignoring removed orlov option [ 1565.776488][T25273] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1565.810668][T25275] loop4: detected capacity change from 0 to 8192 [ 1565.828087][T25273] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1565.966197][T18876] usb 3-1: Using ep0 maxpacket: 16 [ 1566.618121][T18876] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1566.635112][T18876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.635973][T20763] EXT4-fs (loop0): unmounting filesystem. [ 1566.643743][T18876] usb 3-1: Product: syz [ 1566.653913][T25284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1566.656157][T18876] usb 3-1: Manufacturer: syz [ 1566.673992][T18876] usb 3-1: SerialNumber: syz [ 1566.688246][T18876] r8152-cfgselector 3-1: config 0 descriptor?? [ 1566.920581][T18876] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1567.125539][ T1204] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1567.186472][T25295] loop1: detected capacity change from 0 to 16 [ 1567.196523][T25295] erofs: (device loop1): mounted with root inode @ nid 36. [ 1567.238497][T18876] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1567.244667][T18876] r8152-cfgselector 3-1: bad CDC descriptors [ 1567.288413][T25295] syz.1.6962: attempt to access beyond end of device [ 1567.288413][T25295] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1567.293214][T18876] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1567.308079][T25295] syz.1.6962: attempt to access beyond end of device [ 1567.308079][T25295] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1567.313292][T18876] r8152-cfgselector 3-1: USB disconnect, device number 26 [ 1567.381520][ T1204] usb 1-1: Using ep0 maxpacket: 16 [ 1567.390858][ T1204] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1567.400574][ T1204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.409064][ T1204] usb 1-1: Product: syz [ 1567.413366][ T1204] usb 1-1: Manufacturer: syz [ 1567.418066][ T1204] usb 1-1: SerialNumber: syz [ 1567.423882][ T1204] r8152-cfgselector 1-1: config 0 descriptor?? [ 1567.633258][ T1204] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1567.640736][ T1204] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1567.647121][ T1204] r8152-cfgselector 1-1: bad CDC descriptors [ 1567.654175][ T1204] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1567.661709][ T1204] r8152-cfgselector 1-1: USB disconnect, device number 27 [ 1567.894194][T25308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6966'. [ 1567.956932][T25311] loop3: detected capacity change from 0 to 16 [ 1568.036620][T25311] erofs: (device loop3): mounted with root inode @ nid 36. [ 1568.064425][T25311] syz.3.6964: attempt to access beyond end of device [ 1568.064425][T25311] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1568.078834][T25311] syz.3.6964: attempt to access beyond end of device [ 1568.078834][T25311] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1568.415827][T25316] loop2: detected capacity change from 0 to 256 [ 1568.508565][T25316] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1568.531941][T25320] loop0: detected capacity change from 0 to 16 [ 1568.542662][T25320] erofs: (device loop0): mounted with root inode @ nid 36. [ 1568.751742][T25321] syz.0.6969: attempt to access beyond end of device [ 1568.751742][T25321] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1568.810148][T25320] syz.0.6969: attempt to access beyond end of device [ 1568.810148][T25320] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1569.348506][T25328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6972'. [ 1569.589376][ T1204] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1569.604559][T25333] loop0: detected capacity change from 0 to 8192 [ 1569.856145][ T1204] usb 5-1: Using ep0 maxpacket: 16 [ 1569.868911][ T1204] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1569.963159][ T1204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.974026][ T1204] usb 5-1: Product: syz [ 1569.995143][ T1204] usb 5-1: Manufacturer: syz [ 1570.003818][ T1204] usb 5-1: SerialNumber: syz [ 1570.013272][ T1204] r8152-cfgselector 5-1: config 0 descriptor?? [ 1570.222074][ T1204] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1570.229429][ T1204] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1570.235576][ T1204] r8152-cfgselector 5-1: bad CDC descriptors [ 1570.431437][ T1204] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1570.463037][ T1204] r8152-cfgselector 5-1: USB disconnect, device number 36 [ 1570.882780][T25353] loop1: detected capacity change from 0 to 1024 [ 1570.939038][T25353] EXT4-fs: Ignoring removed bh option [ 1570.969164][T25353] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1570.981028][T25353] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1571.050237][T25357] loop0: detected capacity change from 0 to 8192 [ 1571.580087][T25364] loop2: detected capacity change from 0 to 8192 [ 1571.981563][T25376] loop3: detected capacity change from 0 to 16 [ 1572.074654][T25377] loop4: detected capacity change from 0 to 16 [ 1572.084437][T25377] erofs: (device loop4): mounted with root inode @ nid 36. [ 1572.112506][T25377] syz.4.6985: attempt to access beyond end of device [ 1572.112506][T25377] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1572.126170][T25377] syz.4.6985: attempt to access beyond end of device [ 1572.126170][T25377] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1572.183509][T25376] erofs: (device loop3): mounted with root inode @ nid 36. [ 1572.803417][T25381] syz.3.6984: attempt to access beyond end of device [ 1572.803417][T25381] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1573.933318][T25384] syz.3.6984: attempt to access beyond end of device [ 1573.933318][T25384] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1574.154840][T25397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6988'. [ 1574.705987][T25401] loop2: detected capacity change from 0 to 8192 [ 1575.019246][T25407] loop1: detected capacity change from 0 to 256 [ 1575.190112][T25407] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1575.286295][T25417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6993'. [ 1576.879425][T25423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6995'. [ 1577.966728][T25427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6996'. [ 1579.101596][T25443] loop2: detected capacity change from 0 to 1024 [ 1579.108596][T25443] EXT4-fs: Ignoring removed orlov option [ 1579.114555][T25443] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1579.142467][T25443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1580.580944][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1581.698512][T25468] loop3: detected capacity change from 0 to 8192 [ 1582.996252][ T320] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1583.011858][T25488] loop1: detected capacity change from 0 to 8192 [ 1583.111949][T25493] loop0: detected capacity change from 0 to 1024 [ 1583.127269][T25493] EXT4-fs: Ignoring removed orlov option [ 1583.144075][T25493] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1583.163578][T25493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1583.186179][ T320] usb 5-1: Using ep0 maxpacket: 16 [ 1583.193862][ T320] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1583.230256][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.251607][ T320] usb 5-1: Product: syz [ 1583.266245][ T320] usb 5-1: Manufacturer: syz [ 1583.274627][T25498] loop2: detected capacity change from 0 to 1024 [ 1583.277854][ T320] usb 5-1: SerialNumber: syz [ 1583.282208][T25498] EXT4-fs: Ignoring removed bh option [ 1583.291290][T25498] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1583.319343][ T320] r8152-cfgselector 5-1: config 0 descriptor?? [ 1583.328656][T25498] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1583.528247][ T320] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1583.536862][ T320] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1583.553415][ T320] r8152-cfgselector 5-1: bad CDC descriptors [ 1583.735604][ T320] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1583.744614][ T320] r8152-cfgselector 5-1: USB disconnect, device number 37 [ 1584.086251][T25511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7018'. [ 1584.098155][T20763] EXT4-fs (loop0): unmounting filesystem. [ 1584.104718][T25513] loop3: detected capacity change from 0 to 256 [ 1584.135258][T25513] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1584.173966][T25516] loop0: detected capacity change from 0 to 8192 [ 1584.221644][T25513] input: syz0 as /devices/virtual/input/input107 [ 1584.422550][T25520] loop4: detected capacity change from 0 to 8192 [ 1585.184266][T25532] loop2: detected capacity change from 0 to 1024 [ 1585.270572][T25532] EXT4-fs: Ignoring removed bh option [ 1585.322323][T25532] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1585.367858][T25532] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1585.444409][T25534] loop1: detected capacity change from 0 to 256 [ 1585.536807][T25534] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1585.640284][T25534] input: syz0 as /devices/virtual/input/input108 [ 1588.060864][T25564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7032'. [ 1588.346226][T25574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7034'. [ 1588.656244][T25578] loop0: detected capacity change from 0 to 1024 [ 1588.665475][T25578] EXT4-fs: Ignoring removed bh option [ 1588.958405][T25578] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1588.971560][T25578] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1589.027256][T24785] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1591.509643][T25626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7048'. [ 1592.380411][T25642] loop1: detected capacity change from 0 to 8192 [ 1592.470672][T25648] loop2: detected capacity change from 0 to 1024 [ 1592.478700][T25648] EXT4-fs: Ignoring removed orlov option [ 1592.492684][T25648] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1592.668271][T25648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1593.102466][T25663] loop0: detected capacity change from 0 to 256 [ 1593.129554][T25663] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1593.208558][T25663] input: syz0 as /devices/virtual/input/input109 [ 1593.360078][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1593.981385][T25685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7065'. [ 1594.676664][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7066'. [ 1594.813233][T25695] loop4: detected capacity change from 0 to 1024 [ 1594.845425][T25695] EXT4-fs: Ignoring removed orlov option [ 1594.854157][T25695] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1594.870607][T25695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1594.983530][T25703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7070'. [ 1595.074243][T22198] EXT4-fs (loop4): unmounting filesystem. [ 1596.104181][T25716] loop3: detected capacity change from 0 to 1024 [ 1596.131903][T25716] EXT4-fs: Ignoring removed orlov option [ 1596.145262][T25716] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1596.165877][T25716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1596.186167][ T39] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1596.366885][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 1596.378577][ T39] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1596.656163][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.735886][ T39] usb 3-1: Product: syz [ 1596.740075][ T39] usb 3-1: Manufacturer: syz [ 1596.800388][T25727] loop0: detected capacity change from 0 to 1024 [ 1596.807125][T25727] EXT4-fs: Ignoring removed bh option [ 1596.813015][ T39] usb 3-1: SerialNumber: syz [ 1596.817200][T25727] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1596.829083][T25727] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1596.852812][ T39] r8152-cfgselector 3-1: config 0 descriptor?? [ 1597.503122][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1597.511244][ T39] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1597.610164][ T39] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1597.616386][ T39] r8152-cfgselector 3-1: bad CDC descriptors [ 1597.702957][ T39] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1597.870525][ T39] r8152-cfgselector 3-1: USB disconnect, device number 27 [ 1597.892866][T25743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1599.336152][T25745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7079'. [ 1600.082884][T25758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7084'. [ 1601.552204][T25775] loop3: detected capacity change from 0 to 256 [ 1602.043223][T25775] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1602.449483][T25775] input: syz0 as /devices/virtual/input/input110 [ 1602.687327][T25790] loop0: detected capacity change from 0 to 1024 [ 1602.693874][T25790] EXT4-fs: Ignoring removed bh option [ 1602.699754][T25790] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1602.711292][T25790] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1602.856805][T25797] loop2: detected capacity change from 0 to 16 [ 1603.071666][T25799] loop1: detected capacity change from 0 to 1024 [ 1603.080709][T25799] EXT4-fs: Ignoring removed bh option [ 1603.157006][T25797] erofs: (device loop2): mounted with root inode @ nid 36. [ 1603.518513][T25797] syz.2.7093: attempt to access beyond end of device [ 1603.518513][T25797] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1603.540147][T25797] syz.2.7093: attempt to access beyond end of device [ 1603.540147][T25797] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1603.568443][T25799] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1603.579672][T25799] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1604.139309][T24785] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1604.235782][T25807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7096'. [ 1604.910948][T25811] loop1: detected capacity change from 0 to 1024 [ 1604.924903][T25811] EXT4-fs: Ignoring removed bh option [ 1605.482955][T25811] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1605.495578][T25811] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1605.540709][T25805] loop2: detected capacity change from 0 to 8192 [ 1606.013948][T25819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7099'. [ 1607.151217][T25833] loop1: detected capacity change from 0 to 1024 [ 1607.446639][T25833] EXT4-fs: Ignoring removed bh option [ 1607.459031][T25833] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1607.523547][T25833] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1607.617199][T25837] loop4: detected capacity change from 0 to 16 [ 1607.698250][T25837] erofs: (device loop4): mounted with root inode @ nid 36. [ 1607.736296][T25837] syz.4.7103: attempt to access beyond end of device [ 1607.736296][T25837] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1607.749721][T25837] syz.4.7103: attempt to access beyond end of device [ 1607.749721][T25837] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1608.626992][T25855] loop1: detected capacity change from 0 to 1024 [ 1608.640086][T25855] EXT4-fs: Ignoring removed orlov option [ 1608.659316][T25855] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1608.706739][T25855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1608.888757][T25863] loop0: detected capacity change from 0 to 1024 [ 1608.901039][T25863] EXT4-fs: Ignoring removed orlov option [ 1608.917353][T25863] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1608.972874][T25863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1609.097764][T25868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7110'. [ 1610.542458][T20763] EXT4-fs (loop0): unmounting filesystem. [ 1610.580882][T25873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7112'. [ 1610.818491][T22550] EXT4-fs (loop1): unmounting filesystem. [ 1611.207002][T25887] loop1: detected capacity change from 0 to 1024 [ 1611.221112][T25887] EXT4-fs: Ignoring removed bh option [ 1611.351611][T25888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7113'. [ 1611.396721][T25887] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1611.408045][T25887] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1613.290299][T25897] loop4: detected capacity change from 0 to 1024 [ 1613.296928][T25897] EXT4-fs: Ignoring removed bh option [ 1613.673261][T25897] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1613.684531][T25897] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1614.981907][T25906] loop0: detected capacity change from 0 to 8192 [ 1616.975662][T25933] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7127'. [ 1616.988363][T25930] loop2: detected capacity change from 0 to 1024 [ 1616.995768][T25930] EXT4-fs: Ignoring removed bh option [ 1617.002119][T25930] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1617.014410][T25930] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1618.638857][T25953] loop3: detected capacity change from 0 to 1024 [ 1618.645505][T25953] EXT4-fs: Ignoring removed bh option [ 1618.698054][T25953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1618.709405][T25953] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1619.643455][T24785] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1619.873816][T25968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7135'. [ 1620.316259][ T28] audit: type=1400 audit(1743683987.250:368): avc: denied { getopt } for pid=25970 comm="syz.4.7136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1621.064114][T25986] loop1: detected capacity change from 0 to 16 [ 1621.101354][T25985] loop2: detected capacity change from 0 to 1024 [ 1621.107959][T25985] EXT4-fs: Ignoring removed bh option [ 1621.114082][T25985] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1621.125259][T25985] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1621.133047][T25986] erofs: (device loop1): mounted with root inode @ nid 36. [ 1621.266916][T25987] syz.1.7139: attempt to access beyond end of device [ 1621.266916][T25987] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1621.331920][T25986] syz.1.7139: attempt to access beyond end of device [ 1621.331920][T25986] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1621.585896][T25976] loop0: detected capacity change from 0 to 8192 [ 1622.185133][T25996] loop1: detected capacity change from 0 to 1024 [ 1622.194059][T25996] EXT4-fs: Ignoring removed bh option [ 1622.216876][T25996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1622.228250][T25996] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1622.361429][T25998] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7143'. [ 1622.480166][T26004] loop4: detected capacity change from 0 to 8192 [ 1622.485679][T26009] loop0: detected capacity change from 0 to 512 [ 1622.503952][T26009] EXT4-fs (loop0): #blocks per group too big: 83894272 [ 1623.129497][T26010] loop3: detected capacity change from 0 to 512 [ 1623.278844][T26010] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1623.362060][T26010] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1623.373853][T26010] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1623.478305][T26010] EXT4-fs warning (device loop3): ext4_enable_quotas:7017: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1623.493078][T26010] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1623.500256][T26010] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.7147: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1623.527090][T26010] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.7147: couldn't read orphan inode 13 (err -117) [ 1623.539204][T26010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1623.550909][T26010] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.7147: bg 0: block 248: padding at end of block bitmap is not set [ 1623.687114][T26026] netem: change failed [ 1623.694838][T26026] loop2: detected capacity change from 0 to 512 [ 1623.701373][T26026] EXT4-fs: dax option not supported [ 1623.740160][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1623.757850][T24785] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1624.031047][T26031] loop3: detected capacity change from 0 to 512 [ 1624.040515][T26026] loop2: detected capacity change from 0 to 512 [ 1624.047587][T26026] EXT4-fs: quotafile must be on filesystem root [ 1624.050292][T26031] EXT4-fs: Ignoring removed bh option [ 1624.086994][T26031] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1800c018, mo2=0002] [ 1624.161539][T26031] EXT4-fs (loop3): 1 truncate cleaned up [ 1624.167584][T26031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1624.224656][T20509] EXT4-fs (loop3): unmounting filesystem. [ 1624.236292][T26042] loop1: detected capacity change from 0 to 1024 [ 1624.242896][T26042] EXT4-fs: Ignoring removed bh option [ 1624.249916][T26042] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1624.261101][T26042] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1624.366708][T26048] FAULT_INJECTION: forcing a failure. [ 1624.366708][T26048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1624.388437][T26043] device wireguard0 entered promiscuous mode [ 1624.390058][T26048] CPU: 0 PID: 26048 Comm: syz.3.7157 Not tainted 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 1624.403978][T26048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1624.413968][T26048] Call Trace: [ 1624.417084][T26048] [ 1624.419877][T26048] dump_stack_lvl+0x151/0x1b7 [ 1624.424378][T26048] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1624.429933][T26048] dump_stack+0x15/0x18 [ 1624.433926][T26048] should_fail_ex+0x3d0/0x520 [ 1624.438442][T26048] should_fail+0xb/0x10 [ 1624.442465][T26048] should_fail_usercopy+0x1a/0x20 [ 1624.447391][T26048] _copy_from_user+0x1e/0xc0 [ 1624.451938][T26048] memdup_user+0x63/0xc0 [ 1624.456015][T26048] strndup_user+0x68/0xc0 [ 1624.460180][T26048] __se_sys_mount+0x9b/0x3b0 [ 1624.464607][T26048] ? __this_cpu_preempt_check+0x13/0x20 [ 1624.470220][T26048] ? __x64_sys_mount+0xd0/0xd0 [ 1624.474832][T26048] ? debug_smp_processor_id+0x17/0x20 [ 1624.480032][T26048] __x64_sys_mount+0xbf/0xd0 [ 1624.484449][T26048] x64_sys_call+0x49d/0x9a0 [ 1624.488789][T26048] do_syscall_64+0x3b/0xb0 [ 1624.493044][T26048] ? clear_bhb_loop+0x55/0xb0 [ 1624.497585][T26048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1624.503544][T26048] RIP: 0033:0x7f4a2518d169 [ 1624.507793][T26048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.527673][T26048] RSP: 002b:00007f4a260dc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1624.535914][T26048] RAX: ffffffffffffffda RBX: 00007f4a253a5fa0 RCX: 00007f4a2518d169 [ 1624.543727][T26048] RDX: 0000200000000280 RSI: 0000200000000400 RDI: 0000200000000300 [ 1624.551541][T26048] RBP: 00007f4a260dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.559351][T26048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.567161][T26048] R13: 0000000000000000 R14: 00007f4a253a5fa0 R15: 00007ffcd73ee9b8 [ 1624.574986][T26048] [ 1624.901618][T26061] capability: warning: `syz.1.7163' uses 32-bit capabilities (legacy support in use) [ 1624.956220][ T28] audit: type=1400 audit(1743685350.964:369): avc: denied { setopt } for pid=26060 comm="syz.1.7163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1625.325219][T26068] loop2: detected capacity change from 0 to 2048 [ 1625.597992][T26068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1625.808800][T26062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.827244][T26064] loop1: detected capacity change from 0 to 8192 [ 1625.843792][T26062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.860362][T26062] device bridge_slave_0 entered promiscuous mode [ 1625.905534][T26068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7165'. [ 1625.943676][T26062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.963208][T26062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.988913][T26062] device bridge_slave_1 entered promiscuous mode [ 1626.108905][T21313] EXT4-fs (loop2): unmounting filesystem. [ 1626.120960][ T28] audit: type=1326 audit(1743685352.134:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.144361][ T28] audit: type=1326 audit(1743685352.134:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.168696][ T28] audit: type=1326 audit(1743685352.154:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.202451][ T5700] device bridge_slave_1 left promiscuous mode [ 1626.219499][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.234695][ T5700] device bridge_slave_0 left promiscuous mode [ 1626.243062][T26092] 9pnet_fd: Insufficient options for proto=fd [ 1626.246644][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.260629][ T28] audit: type=1326 audit(1743685352.154:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.261510][T26095] loop2: detected capacity change from 0 to 512 [ 1626.293526][ T5700] device veth1_macvtap left promiscuous mode [ 1626.303498][ T5700] device veth0_vlan left promiscuous mode [ 1626.309816][T20763] ------------[ cut here ]------------ [ 1626.310223][ T28] audit: type=1326 audit(1743685352.164:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.315128][T20763] WARNING: CPU: 1 PID: 20763 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 1626.339043][ T28] audit: type=1326 audit(1743685352.164:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.346625][T20763] Modules linked in: [ 1626.346648][T20763] CPU: 1 PID: 20763 Comm: syz-executor Not tainted 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 1626.346668][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1626.346678][T20763] RIP: 0010:drop_nlink+0xc1/0x110 [ 1626.346707][T20763] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 57 d0 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2f 21 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 1626.346722][T20763] RSP: 0018:ffffc90000c0fbf0 EFLAGS: 00010293 [ 1626.346737][T20763] RAX: ffffffff81cd7661 RBX: 0000000000000000 RCX: ffff888119868000 [ 1626.346749][T20763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1626.346760][T20763] RBP: ffffc90000c0fc18 R08: ffffffff81cd75e4 R09: 0000000000000003 [ 1626.346770][T20763] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 1626.346781][T20763] R13: 1ffff11026051019 R14: ffff888130288080 R15: ffff8881302880c8 [ 1626.346794][T20763] FS: 00005555607b3500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1626.346810][T20763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1626.346822][T20763] CR2: 00005555607d64e8 CR3: 0000000128012000 CR4: 00000000003526a0 [ 1626.346837][T20763] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1626.346847][T20763] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1626.346858][T20763] Call Trace: [ 1626.346864][T20763] [ 1626.346870][T20763] ? show_regs+0x58/0x60 [ 1626.346889][T20763] ? __warn+0x160/0x3d0 [ 1626.346912][T20763] ? drop_nlink+0xc1/0x110 [ 1626.346928][T20763] ? report_bug+0x4d5/0x7d0 [ 1626.346947][T20763] ? drop_nlink+0xc1/0x110 [ 1626.346964][T20763] ? handle_bug+0x41/0x70 [ 1626.346988][T20763] ? exc_invalid_op+0x1b/0x50 [ 1626.347007][T20763] ? asm_exc_invalid_op+0x1b/0x20 [ 1626.347030][T20763] ? drop_nlink+0x44/0x110 [ 1626.347047][T20763] ? drop_nlink+0xc1/0x110 [ 1626.347064][T20763] ? drop_nlink+0xc1/0x110 [ 1626.347082][T20763] shmem_rmdir+0x59/0x90 [ 1626.347102][T20763] vfs_rmdir+0x398/0x500 [ 1626.347121][T20763] incfs_kill_sb+0x113/0x230 [ 1626.347144][T20763] deactivate_locked_super+0xad/0x110 [ 1626.347170][T20763] deactivate_super+0xbe/0xf0 [ 1626.347188][T20763] cleanup_mnt+0x485/0x510 [ 1626.347206][T20763] ? user_path_at_empty+0x14e/0x1a0 [ 1626.347224][T20763] __cleanup_mnt+0x19/0x20 [ 1626.347248][T20763] task_work_run+0x24d/0x2e0 [ 1626.347264][T20763] ? task_work_cancel+0x2e0/0x2e0 [ 1626.347280][T20763] ? __x64_sys_umount+0x122/0x170 [ 1626.347297][T20763] exit_to_user_mode_loop+0x94/0xa0 [ 1626.347317][T20763] exit_to_user_mode_prepare+0x5a/0xa0 [ 1626.347336][T20763] syscall_exit_to_user_mode+0x26/0x130 [ 1626.347352][T20763] do_syscall_64+0x47/0xb0 [ 1626.347371][T20763] ? clear_bhb_loop+0x55/0xb0 [ 1626.347386][T20763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.347408][T20763] RIP: 0033:0x7fe958f8e497 [ 1626.347429][T20763] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1626.347443][T20763] RSP: 002b:00007ffe59a18158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1626.347460][T20763] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe958f8e497 [ 1626.347470][T20763] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe59a18210 [ 1626.441735][ T28] audit: type=1326 audit(1743685352.164:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.449299][T20763] RBP: 00007ffe59a18210 R08: 0000000000000000 R09: 0000000000000000 [ 1626.472681][ T28] audit: type=1326 audit(1743685352.164:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.473805][T20763] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe59a192a0 [ 1626.486709][ T28] audit: type=1326 audit(1743685352.164:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.488222][T20763] R13: 00007fe95900e08c R14: 000000000018d0ab R15: 00007ffe59a192e0 [ 1626.503522][ T28] audit: type=1326 audit(1743685352.164:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26090 comm="syz.0.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe958f8d169 code=0x7ffc0000 [ 1626.503900][T20763] [ 1626.809265][T20763] ---[ end trace 0000000000000000 ]--- [ 1626.827956][T20763] ================================================================== [ 1626.836199][T20763] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 1626.842344][T20763] Write of size 4 at addr 0000000000000170 by task syz-executor/20763 [ 1626.850523][T20763] [ 1626.852693][T20763] CPU: 0 PID: 20763 Comm: syz-executor Tainted: G W 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 1626.853626][T26095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1626.864225][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1626.864250][T20763] Call Trace: [ 1626.864257][T20763] [ 1626.864265][T20763] dump_stack_lvl+0x151/0x1b7 [ 1626.864305][T20763] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1626.864322][T20763] ? _printk+0xd1/0x111 [ 1626.864339][T20763] print_report+0xe1/0x4e0 [ 1626.873946][T26095] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1626.883191][T20763] ? __virt_addr_valid+0x59/0x2f0 [ 1626.883236][T20763] ? kasan_addr_to_slab+0xd/0x80 [ 1626.883255][T20763] ? ihold+0x20/0x60 [ 1626.883271][T20763] kasan_report+0x13c/0x170 [ 1626.883290][T20763] ? ihold+0x20/0x60 [ 1626.883306][T20763] kasan_check_range+0x294/0x2a0 [ 1626.883327][T20763] __kasan_check_write+0x14/0x20 [ 1626.883342][T20763] ihold+0x20/0x60 [ 1626.952909][T20763] vfs_rmdir+0x268/0x500 [ 1626.953861][T26101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2566619354 (20532954832 ns) > initial count (7040385832 ns). Using initial count to start timer. [ 1626.956985][T20763] incfs_kill_sb+0x113/0x230 [ 1626.957025][T20763] deactivate_locked_super+0xad/0x110 [ 1626.957044][T20763] deactivate_super+0xbe/0xf0 [ 1626.957060][T20763] cleanup_mnt+0x485/0x510 [ 1626.993173][T20763] ? user_path_at_empty+0x14e/0x1a0 [ 1626.998393][T20763] __cleanup_mnt+0x19/0x20 [ 1627.002725][T20763] task_work_run+0x24d/0x2e0 [ 1627.007152][T20763] ? task_work_cancel+0x2e0/0x2e0 [ 1627.012006][T20763] ? __x64_sys_umount+0x122/0x170 [ 1627.016865][T20763] exit_to_user_mode_loop+0x94/0xa0 [ 1627.021898][T20763] exit_to_user_mode_prepare+0x5a/0xa0 [ 1627.027463][T20763] syscall_exit_to_user_mode+0x26/0x130 [ 1627.033095][T20763] do_syscall_64+0x47/0xb0 [ 1627.037340][T20763] ? clear_bhb_loop+0x55/0xb0 [ 1627.041858][T20763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1627.047581][T20763] RIP: 0033:0x7fe958f8e497 [ 1627.051838][T20763] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1627.071604][T20763] RSP: 002b:00007ffe59a18158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1627.079846][T20763] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe958f8e497 [ 1627.087745][T20763] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe59a18210 [ 1627.095553][T20763] RBP: 00007ffe59a18210 R08: 0000000000000000 R09: 0000000000000000 [ 1627.103511][T20763] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe59a192a0 [ 1627.111637][T20763] R13: 00007fe95900e08c R14: 000000000018d0ab R15: 00007ffe59a192e0 [ 1627.119654][T20763] [ 1627.122635][T20763] ================================================================== [ 1627.134755][T20763] Disabling lock debugging due to kernel taint [ 1627.141245][T20763] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 1627.148959][T20763] #PF: supervisor write access in kernel mode [ 1627.154882][T20763] #PF: error_code(0x0002) - not-present page [ 1627.160683][T20763] PGD 12f344067 P4D 12f344067 PUD 0 [ 1627.165795][T20763] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1627.171331][T20763] CPU: 0 PID: 20763 Comm: syz-executor Tainted: G B W 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 1627.183913][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1627.194151][T20763] RIP: 0010:ihold+0x25/0x60 [ 1627.198488][T20763] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 1627.218013][T20763] RSP: 0018:ffffc90000c0fc30 EFLAGS: 00010246 [ 1627.223930][T20763] RAX: ffff888119868000 RBX: 0000000000000001 RCX: ffff888119868000 [ 1627.231976][T20763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1627.239770][T20763] RBP: ffffc90000c0fc40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 1627.247777][T20763] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110260ea9f8 [ 1627.255680][T20763] R13: ffff888111782770 R14: 0000000000000000 R15: 1ffff110222f04f4 [ 1627.263487][T20763] FS: 00005555607b3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1627.272253][T20763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1627.278706][T20763] CR2: 0000000000000170 CR3: 0000000128012000 CR4: 00000000003526b0 [ 1627.286489][T20763] Call Trace: [ 1627.289614][T20763] [ 1627.292394][T20763] ? __die_body+0x62/0xb0 [ 1627.296554][T20763] ? __die+0x7e/0x90 [ 1627.300307][T20763] ? page_fault_oops+0x7f9/0xa90 [ 1627.305094][T20763] ? vprintk_default+0x26/0x30 [ 1627.309836][T20763] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 1627.315215][T20763] ? add_taint+0x44/0xe0 [ 1627.319294][T20763] ? panic+0x667/0x667 [ 1627.323206][T20763] ? preempt_schedule_thunk+0x16/0x18 [ 1627.328416][T20763] ? exc_page_fault+0x529/0x6d0 [ 1627.333105][T20763] ? asm_exc_page_fault+0x27/0x30 [ 1627.337964][T20763] ? add_taint+0x93/0xe0 [ 1627.342046][T20763] ? ihold+0x25/0x60 [ 1627.345863][T20763] vfs_rmdir+0x268/0x500 [ 1627.349961][T20763] incfs_kill_sb+0x113/0x230 [ 1627.354378][T20763] deactivate_locked_super+0xad/0x110 [ 1627.359597][T20763] deactivate_super+0xbe/0xf0 [ 1627.364211][T20763] cleanup_mnt+0x485/0x510 [ 1627.368428][T20763] ? user_path_at_empty+0x14e/0x1a0 [ 1627.373453][T20763] __cleanup_mnt+0x19/0x20 [ 1627.377707][T20763] task_work_run+0x24d/0x2e0 [ 1627.382133][T20763] ? task_work_cancel+0x2e0/0x2e0 [ 1627.386996][T20763] ? __x64_sys_umount+0x122/0x170 [ 1627.391894][T20763] exit_to_user_mode_loop+0x94/0xa0 [ 1627.396892][T20763] exit_to_user_mode_prepare+0x5a/0xa0 [ 1627.402288][T20763] syscall_exit_to_user_mode+0x26/0x130 [ 1627.407652][T20763] do_syscall_64+0x47/0xb0 [ 1627.411901][T20763] ? clear_bhb_loop+0x55/0xb0 [ 1627.416430][T20763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1627.422167][T20763] RIP: 0033:0x7fe958f8e497 [ 1627.426407][T20763] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1627.445950][T20763] RSP: 002b:00007ffe59a18158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1627.454186][T20763] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe958f8e497 [ 1627.462173][T20763] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe59a18210 [ 1627.469966][T20763] RBP: 00007ffe59a18210 R08: 0000000000000000 R09: 0000000000000000 [ 1627.477772][T20763] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe59a192a0 [ 1627.485600][T20763] R13: 00007fe95900e08c R14: 000000000018d0ab R15: 00007ffe59a192e0 [ 1627.493504][T20763] [ 1627.496343][T20763] Modules linked in: [ 1627.500179][T20763] CR2: 0000000000000170 [ 1627.504158][T20763] ---[ end trace 0000000000000000 ]--- [ 1627.509443][T20763] RIP: 0010:ihold+0x25/0x60 [ 1627.513782][T20763] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 1627.533318][T20763] RSP: 0018:ffffc90000c0fc30 EFLAGS: 00010246 [ 1627.539300][T20763] RAX: ffff888119868000 RBX: 0000000000000001 RCX: ffff888119868000 [ 1627.547110][T20763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1627.555011][T20763] RBP: ffffc90000c0fc40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 1627.562820][T20763] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110260ea9f8 [ 1627.570979][T20763] R13: ffff888111782770 R14: 0000000000000000 R15: 1ffff110222f04f4 [ 1627.578798][T20763] FS: 00005555607b3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1627.587564][T20763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1627.594016][T20763] CR2: 0000000000000170 CR3: 0000000128012000 CR4: 00000000003526b0 [ 1627.602369][T20763] Kernel panic - not syncing: Fatal exception [ 1627.608546][T20763] Kernel Offset: disabled [ 1627.612702][T20763] Rebooting in 86400 seconds..