last executing test programs: 9.262098706s ago: executing program 0 (id=4826): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0, r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9.072324405s ago: executing program 0 (id=4827): io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000", @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) getrlimit(0x8, &(0x7f0000000000)) 8.939057918s ago: executing program 0 (id=4828): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x1ad2, &(0x7f0000000740)={0x0, 0x1100, 0x0, 0xfffffffe, 0x3d0}) close(r2) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 7.928666068s ago: executing program 0 (id=4838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.755766563s ago: executing program 0 (id=4849): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x521, &(0x7f0000000e00)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./file1\x00', 0x1800840, &(0x7f0000000340)=ANY=[@ANYRES64=r4], 0x1, 0x369, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x80042, 0xc8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000040), 0x26, 0x75e, &(0x7f0000000280)="$eJzs3M1rHPUbAPBnJtmkL/n9NoLgy0GEFloonSTNpT01XrwVCgWvNSSTEDLJhuymdmPB1rNQm4uCIOrZo1eh1D/AmxQUvAuiNR7Ey8psXkpjNt02TVbazwcm+3xnZ+Z5nuzwzQ5kJoAX1pvljyRiKCIuR0R1c30aEQPt6EjEzY3t1h/cmCqXJFqtK78l5W6x3qpuHyvZfD0e7V3i1Yi4V4k48+G/89abq/OTRZEvb45HGgtLI/Xm6tm5hcnZfDZfHBu/MHp+fPz86Phje3ily15PvnPh6J3v315b++Gbxu03+s8mMdHuOzZ76/IwT2Tjd1KJiR3rFw8iWQ8lvS4AAICulN/z+yKiv/0ttRp97QgAAAB4nrQGWwAAAMBzL4leVwAAAAAcrK3/A9i6t/eg7oPt5Ne3ImJ4t/z97XuII45EJSKOrSeP3JmQbOwG+3LzVkTcndh5/n1VnmE393ns0R3jR++RHtjn0XkW7pbzz8Ru80+6Pf/ELvNP/9azE/ap8/z3MH9fh/nvcpc5vv38tUrH/LciXu/fLX+ynT/pkP/dLvPfXvvoTjvYpYrWlxGndv37kzySa4/nQ0zMzBV7Pn7g3t+n7+/V/7FO+ZO9+1/qsv/31/+Y7zSXlPlPn9j7898tf3lOfLxZRxoRdzZfy/HajhwnFn78bq/+pyNaT/P5f9Fl/z9/PXi9y00BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgLY2IoUjSbDtO0yyLOB4RL8extKjVG2dmaiuL0+V7EcNRSWfminw0Iqob46Qcj7Xjh+NzO8bjEfHST0c3ks4VeTZVK6Z73TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbjkfEUCRpFhFpRPxZTdMsi+jvYt/BQ6gPAAAAeEaGe10AAAAAcOC6uP4fOIw6AAAAgINTXv/3PcV+yQHUAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy3Ll+6VC6t9Qc3psrx9LXmynzt2tnpvD6fLaxMZVO15aVstlabLfJsqrbwuOMVtdrS2IVYuT7SyOuNkXpz9epCbWWxcXVuYXI2v5pXDqUrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntRQe0nSLCLSdpymWRbxv4gYjkoyM1fkoxHx/4i4X60MluOxXhcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM1dvrs5PFkW+LBAIDi34ICL+A2XsEfR6ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoBfqzdX5yaLIl+u9rgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDeSn9JIqJcTlVPDu18dyD5q9p+jYj3PrvyyfXJRmN5rFz/+/b6xqeb68/1on4AAAB4IVx8ko23rtO3ruMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6VW+uzk8WRb68v+BiNFdbSYdtet0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwdP4JAAD//2T7x0Y=") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$tun(r6, 0x0, 0x72) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xfffffeffebff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0xffe}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) 5.091591508s ago: executing program 0 (id=4868): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000005c0)='./bus\x00', 0x124181e, &(0x7f0000000580), 0x81, 0x517, &(0x7f0000001040)="$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") 3.658952179s ago: executing program 3 (id=4882): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) clock_adjtime(0x0, &(0x7f00000002c0)={0x0, 0x5, 0x8000000000000000, 0x7f, 0x100000000, 0x68355c72, 0x9, 0x5, 0x7, 0xf0f, 0x8000000000000000, 0xb, 0x2, 0x0, 0x0, 0x5, 0x8, 0x9, 0x4, 0x5, 0xe22, 0xfd, 0x9, 0x1, 0x9, 0x8000000000000000}) 3.653496819s ago: executing program 3 (id=4883): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x75f1cbd2, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x4a9, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x14507e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r5, r1, 0x0) finit_module(r5, 0x0, 0x0) 2.854984698s ago: executing program 1 (id=4886): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r3, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 2.754295108s ago: executing program 3 (id=4887): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2.549845078s ago: executing program 4 (id=4888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x84c2, 0x2, 0x9, 0xd, 0x602, 0x7be}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) 2.382890025s ago: executing program 4 (id=4889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000280)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.069879106s ago: executing program 2 (id=4893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) clock_adjtime(0x0, &(0x7f00000002c0)={0x0, 0x5, 0x8000000000000000, 0x7f, 0x100000000, 0x68355c72, 0x9, 0x5, 0x7, 0xf0f, 0x8000000000000000, 0xb, 0x2, 0x0, 0x0, 0x5, 0x8, 0x9, 0x4, 0x5, 0xe22, 0xfd, 0x9, 0x1, 0x9, 0x8000000000000000}) 2.003016032s ago: executing program 2 (id=4894): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001100)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4080) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) getrlimit(0x8, &(0x7f0000000000)) ioprio_get$pid(0x1, r1) 1.971460905s ago: executing program 1 (id=4895): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) write$selinux_create(r0, 0x0, 0x0) 1.939706008s ago: executing program 1 (id=4896): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x1ad2, &(0x7f0000000740)={0x0, 0x1100, 0x0, 0xfffffffe, 0x3d0}) close(r2) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 1.863979436s ago: executing program 4 (id=4897): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x3, 0x0, 0x0, r1}]) 1.861759646s ago: executing program 3 (id=4898): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x5d, 0x1000000, 0x0}) 1.692334543s ago: executing program 3 (id=4899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x84c2, 0x2, 0x9, 0xd, 0x602, 0x7be}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) 1.692046103s ago: executing program 4 (id=4900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x3, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.524376499s ago: executing program 4 (id=4901): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x521, &(0x7f0000000e00)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./file1\x00', 0x1800840, &(0x7f0000000340)=ANY=[@ANYRES64=r5], 0x1, 0x369, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, 0x0, 0x80042, 0xc8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000040), 0x26, 0x75e, &(0x7f0000000280)="$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") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$tun(r7, 0x0, 0x72) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r6, 0x0) sendto$inet6(r6, 0x0, 0x0, 0xfffffeffebff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="1a29686d9fe935c699abfce07ea022f260f7737101274349c2e284b44292298aafdcf9557a902c345d65381eef7661d27e5177dd6d1742007e4649d403ccc73f20b58d21c32d5f61de9df4eaea5fc4b3473d56b9a1ab523e47c84a16b0edefe2c0c6c0358a3a447916c4243917e70ea23c6a65cdb167de17b7a13ea902ed111d3f3760c66c955aa00e7e91ebb25b69ed73d9913532be657258f9d1dc7e2cf065ffc642a0b0d9a14740ad4206bae3661132fd0203d883b21be628cb02d66e6654fe7292576b15035c35996a86a5376f87ded181457b89b631123ba6e96eb836d51e7c7e1b2889709b03f8e08672b4a273a0d7564cbda01f6ecf067738f6364d02c2d61804eac7563e7941e569a15279034c7240369552d42f99bf7840223ffd51330e09436a3297162cf344e243029c2680059d0a027fd14e7674b182f28b3463b4d5eb2cedbd516462ee82c33b5fbe39e424f2b05ae30ca01252c1d6167ab020b0646be0a36efcce490d17b49f5cb4ff39b62407a2619a9459c5365a463dba799bc7bb1a84178f3fb4cc6d3023b0d90f0d19b666a67b0b57440e671ad76313fa19d358a146366b11ee856929cc098988168025a2b3ce2556708408607958a701f0860dbab81e737c06d286dcec360eba7cd20ef9306c88f5b454c03aee2303c4bcf42316508a1151bb62a925770787d230d0107f5d2f7c1cc410a484eeffdbef5b5635168eefc3137ca0700fc3ef929794f5a2b6b379c053f4402c9e25f35e1c77f1c20633628c5e96a22fbeb5c1083d82a51996e0740114b3c7df743aaf881835999c10a30e61a47442c62a86a0991e85524c684e4dc511aee215f3ea275ed9634d91919990a9a64c0f323f76386c101823d66d08e6b8bfb1cdc25947c9e663dc320c9e98cf95f8fa92e325d1a80f39cb12a42832c6180d85fea170fdeaf0fac49a3b7a9306dde9f538f8527a9b165b386f8cfa4c9974b3da399b1a17bcec4a4ed6b6afdcf7483c1b94bd204887fae46c5654be2297362b1d447b89cafe534df1dd987a8f8a0d9773453f72965810769e4e2955d5b6fd6a4b8d3f2852676c86997270c159ff76bdc906165e6855110dec5d590d99410baa3b48a2467d2a439009274c0ecbb7d6f6ec5fc7d1d6947b3cedf8363d8fea949f9a3c8c9e76eb9727ba01c1421f5010040c934e5228dd2228f08be55ab0c27d30aaec7abd61d3a35bf49e56372fa48b3e52944bb646642bab4ba38427e36ebf4366c44f557f748aa01e2166419f9ffce4b2f5af065ce3ef67687a3d0e1d691e0c6cab14d6b0050cc40eb63f92e6842b7bfc08c2dcd0bc24d51eb64b955da0a7f03cb60f0fcc2abcc7c0a3502f694867bdc0f1ee3a76cbbc250173de5811778ba10251ee045d030195ab2771d8d6b1d6ebf88b759f3aa30d6167a7433ff69ae251a5db6017d6aa522a49f6ef6f8b40c7ecefb5b70c32dbef8306be14238f7e55e642d26690b710560294f918122c0dbe117cc2248f7c8be4c06217207d7a54ac8a4aad99b6f5d9593731110f86c8a13b4f01436204a5febec7f8cb801f729c6cd414b1183c5204cc7d7e25a2744a74d5f9d11afb3eacf36b375097550ab0f0f8807f7f3271aaa480a29c0ea9b78a70cc56e69583051687b20d4638b746b6a0b3afac926aeab5e4fc2501058ae01c7f0d924e33d59b764a2492175b1f8ddfab95da5d12fbac042e958723b048e5250746f3ff6ff68547393bd4ea961058152108188b834b35035d2e98580d127627a76f8534e577bfad6d3ccca85050a39fefbf5cea99fb728a2b9ed1fba221d745d484d78a9e2ddab3ed058b9ad6f13c0900f3a2258acfcec81f263e5abc6ef11bd7bb717b00f2ae18b2f4c258e8b83aa96238dc55f84cef8dd0d9d59efb92af0788ec20d08a20300e064ff7865a66e43cc50b86dc416bb46b12845739688cd91ee85a36da2b1081916311b9dbd8333bb6551f114273607868ef83755e9da521c186e6e5df4750080525e16e9bd24b39a11e0f66937333f9f1adaf6c0f077bd797c6a4bf43fae592c7d80cecb0e65f3ba39ab0b77ec9f0366f19a519306d924e326beae86fa9c941102fd9e02ba7d72c53e54aadb74fc475fad2da5af651d8aff81106ba0e3b89a719f3c59712951c30df46b4db3149bc28c5b9324a83e7e33727cb6abc64ac75cc2eae00bc8847377f77ecc5c08e99adf9056fb4c52eeb055b8570bdb49413c54699844527b238158068a679bdc26a0450b21948a0eac9c18fec804e3067cb9886929a31407de23a894aead991fb30a1f6da613199ee76caf22404b1fa3b934d9e905b968b164e8c1c5874ce9c0940bbc791e865a6b3f3ea5f4874669cd46703dd044db0e68d7e1a20756d11319278fd46e25f5d127faa5814dbdd6d11aaf577d9f8b075a7389026ed74049ab9715c36379694558b12535ba9b0799381d27a079c2ada50f6b08678433f2aeb6967a11a73e691d276efd55e629c203c30423a55dbfdace02092ad988e50abc1b24d78253f8c1618c69c9d7639afedd8020f07e43272ea4b49a6a274c3e3bda6c8ce60597afac435236dd12c5d86bedfc52f841ff53340449f5c3f441b7c8d894938df48c8a3c71d9d35c4af3d28d72baea33a29b2beeee6f0f13a6d617eacdd38c9623d22b1306c2de29fb9805dcec16430280b54e4dfeccb70e0b2d3f218a6d6850b6115bdb69af048853fa7f414e54a9cfcefd37986aabe8f6c2d94c18050bc94205690addd224fe21f2e22a8628de1bcb2a90c4c3156e36ce68f95dae6644a5216aae2ec7d08ae0fc46945d6cf3b75e481ddc89ba84e3163458e11ffcf8ad5f532f2708cad50af9356a739ca2510cab0b8aa1f98c7006d483b0e0080ac86d0a376344789ac19ef280e853054f56b05ac320bed179902c9adfbd819d360a557ccff3d534b18047cb738f1a72ecda5157197a269a9d4a561ca45fd8043d06b9715f4fa19c70d9a3af134ef3c2d83489784c28762bb695e303352f48f83dcb35df75f63ef6bf0396ad7d472952ce86841e43f2f6cd0b2edf5741a1e316c228f4ffddd2210c498a51bb7753b3744b0cc3aea4a51fb9a02de4c295e06a74e6ed1a8b4a14da2edc127948750fb1a150fb1b7872da6e92adf1ea0311da8780c81f488125ea9836e7dcb445936d9b3998be1a0dd9fb43a3e82091ffd9ce1c2b9a56b44b6a0486fb0014f01244ea4d685656b5f3df810f7bd3d94dd2dae761ca6db57a343aefe8c7ff6d98018a14fe9deedbe31c61a502cf8fe53517f4ffcfa34efaedc61e36aa2826d24151c08a5889367e177d1d39c672e9c0eb4022f7b30d219360db78b0b88fb7b4a943629a79aa08001aed26acff7c5a72d2de889c23fe7ee359610aa011378d42ffbcda98ba37c5cdfc264dc91d6dab639df0d4c975552d3b136a13db9293006d55ac6a178a4f04be7bfd41cd355500838015bfb91b8c5cdfa051a3212f5c3b79f1411d99c2e7f7a1c75e2de530b90d4b218cff5b179c6f2487a1ac54f5719970c003feb9d0647cee624b01db38d635b493b250c09cccc406266ab3fb571f1d87351a43c44d5d79eef0841a574c2f55bbfde6d52e26657d622ff7f9388bed5e08c76fc5cd01e7e33bd1355ecbb4bbed5d94666a73629d04238104770fd3ca900ad6316e994d2c97064935d3eac054bd09e875baa19a4571d3dd7aac44428157e4ba20aa9684556e2e4e7c662aba34ffbe993cf442a27462650a52506b259a3df96563c6dba173553f3e2c81b9719ad7b9ddcf7a5c35e0421b4abc2a22fddeede33f118fef4c622f8e822ce44a763fed667a0a0c321bc755ce3fcb3ce369b63eb4329364a37be3b0d657ec7a194ce5e22e7d3660568200b33d713d546cdbffcca3e8aed418ade622e332cba4931200a078c811b5d1c0a28d61de302d32e7726087700b160444d7d997a4cb0fc3b4f74cf259db0aae49243a947a3aa8e4762841def472f686cf876088eaa2c267cb39df380bd94a5d4dca072bccf71ff7029c98a1a337c405bd0b5b1e216b0fbab3bbfb21faafff8ab4d7835b51a34a6ad5c069ad1c3d6ff819f0ac27c7acfbabc0265aa5b795081c60e21ae852795c4ee2a9a297b02341f2e0815045816c07533aa57f73116a53867ee07e32f55c632be1986d190b9e59c2e56c5e598867f5e0a5e79fd933520932fc6e05905a0aed9cca2df486a9dca475dc13c770ab56783c6fc4291182bb3f98a1fad71a47628c8b50ca28e1db47df1a9e57deaf53bef661ca87536a94bd78596dcb21365d56a74736227e062522393020d561095f200d5287e805e0ad2fc4219091b779e957fc3f1fe0614e436774dd9630c5f1e2a81fe9ad8363635bf3ce1e233eabe83a96f7c7e964baaf4c0a831ab1baa86976ded258cd38512c53f40860c271018188e56656d9c143304c4e744cd83ec673df6c0a968a3b7c5783f16b966d9752dc2fc0d587891e2f12158d521a04542dec2db145010ad00736fe2aa6b48ff4b4d159f86bdb2ddab055a48ff390b315f6c778d93723809ea2559eb64fe41857402bc424bc48620dcc5a09ede88d986a9c440cc02597d1c9ec8dc39e2f56fa4e88c1c30bc1adc6adbd9e754996d11bf72a1536c91c0e16288406a145a4150ad073196b7dd1f440a86a827c24acb4bb9d59b36331a12d771388f800216444f7869390d49c036708c69c388411d3401541781f5653714925020eee74a3be06de496e473f3704fbd97a274c02301c7bf44611eeb3ef2a19d889dd72c0f1ec53bd4f2c86a99401b9cb3dcfc1377a084d489c08b65c88b91b4e16c3ad0b56fcbd6112c330be885080becc0a70ca7a883b1dde203d7ef228a0c168463afb5feaafd41b8ffae34da857ad9371ba7ec23053bfeb12e64c59a32f97190cbb05a40ab8683661487ac3341cf3ea3bbe92febe59d4c48f17c8cfd07c6ecca383ef01fa597fa352eecd691f18417461acb105911fd85a840a3dca5efc534610cef8c8d015c19a3a2f7199f4fda683418f94fb1889816939fb71516e87dbe0819de475679912c12db3be40ce6b4b6baa32d4b4a74068bef74ee75cc8732b31d82ef3c3aa753afc5bbf71e2dec2135de3da3643ce5c5ebce8c1f635a8cf733cd4cbf97a997a37258c6f456b26604c468002a4fa220d291e588ba6a6f699a1d12e7ce0fb9b98eef015f20e48c7c8fbbf550704703482fe3714a5d8de61fe14223f66749898ab69c9c65ac476ca02057c0792357e7a9c6a8c84f6c9c596758ffebfd5be7722f2d4b16c9bcba2a08ce0ea4958f979e0d2e73eba30a48559ce587041cfbffe852be137a0bee8ae47598a9deeb901411c0eadad9f70a0127a19e858bb5fc757ba11148d3bedf2a9a58cd703abc54efc59932bb851b308a8cd859c48e8d045d4ef30e0c184fe202da9d085a83a8b7bdd02f003af053a73d3e8a03537f96dd1040ba18ee180ca4aa8fa9f10e8d04d788aa4c67c651192889df0f4fa9754952fea58d92cc1c6544fd839f977edbf50e0963f451780d8efa0e6889d83c53e9024193f2993ccaf2d17ba1e0f504e19a28ec43bb0ea671f6c457f91ecdb0a9dd9bac27712cc6c7e43ecddca3b684b6e41a681048cf17ba87a49fe80928be2eec88411d237eb87132e9adb8f61a35fbff74fb6c46b9eed67b92474bdfea3a48754bff62751f5aa6f68b90516189a62e11c4a4839a2fa01651fa1014f08c1d0c8da18ebe0f01a2d9882ce486a27ad5a032a11f7bb6a0c27737837a5c94c95e3bea16949a4c1d98d00cc763cc5b16fc8077", 0xffe}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) 1.501526202s ago: executing program 3 (id=4902): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bind$pptp(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) 1.062291375s ago: executing program 1 (id=4903): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x6ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x680, 0x2, [@TCA_U32_SEL={0x254, 0x5, {0xa, 0x5, 0x0, 0x101, 0x5, 0x5, 0x6, 0x4, [{0xff, 0x9, 0x7ff, 0x4}, {0x7bfb, 0x2, 0x1f34f1d5, 0x10001}, {0x8, 0x6, 0x94}, {0x7, 0x8, 0x9, 0x9}, {0x7, 0x3, 0x8, 0x4}, {0x7ff, 0x2, 0x3, 0x5}, {0xf88, 0x9, 0x5, 0xc3}, {0x7, 0x9, 0xfffffff9, 0x9}, {0x3, 0xfffffff8, 0x2, 0x7}, {0x4, 0x7, 0x2, 0xffffffff}, {0xcd, 0x2, 0x2, 0x6}, {0x4, 0xfffffffc, 0x5, 0x3}, {0xfffffc00, 0x0, 0xffffffff, 0x1}, {0xfffffffa, 0xfffffff8, 0x2, 0x2}, {0xf8, 0x4, 0x2, 0x7}, {0xf, 0x3, 0x3, 0x10000}, {0x9, 0x101, 0x5, 0x7}, {0x0, 0x0, 0x1, 0x5}, {0x81, 0x1, 0x3, 0x7}, {0x6, 0x9, 0x40}, {0xfffffff7, 0x9, 0x7, 0x9}, {0x1de, 0x1, 0x10, 0x20}, {0x9, 0xfffffffe, 0x3, 0x8000}, {0x11f4, 0x4, 0x4, 0x7ff}, {0x62, 0xfffffff1, 0x2, 0x1}, {0x0, 0x8, 0x2e90, 0x7}, {0x6, 0x0, 0x7fff, 0x66c}, {0xf04, 0x8, 0xebe5, 0x1}, {0xa1, 0x7, 0x6372, 0x1b90}, {0xc, 0x5, 0x2, 0xa00f}, {0x1cd2c000, 0x141ed403, 0x4, 0x1}, {0x5, 0x100, 0x3, 0x2}, {0x3, 0x6000, 0xfff, 0x3}, {0xf89, 0x8, 0xfffffff9, 0x2}, {0x9, 0x0, 0x9, 0x9}, {0x9, 0x3, 0xac, 0x8}]}}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x3}}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x67d7763c, 0x2, 0x80, 0x0, 0x81, 0x7fffffff, 0xfffffff8, 0x0, 0x3, 0x4, 0xb, 0x1, 0xfffffff7, 0x5, 0x3ff, 0xdd, 0x1, 0x9, 0x1, 0x0, 0x3, 0x1c, 0x81, 0x1f, 0x101, 0x5, 0x4, 0x6, 0x80, 0x4, 0xfffffffe, 0x50fe, 0x6e, 0xd, 0x39, 0xfffffff9, 0x0, 0xfffffffb, 0x8000, 0x5, 0xa00000, 0x3, 0x6, 0x0, 0x200, 0x6, 0x1000, 0x2, 0xa2, 0x4ab9, 0x24b7, 0x9, 0x0, 0xd64f, 0x4, 0x0, 0x401, 0x4, 0x5, 0x7f, 0xe, 0x1, 0x3ff, 0x2, 0x5, 0x6, 0x8, 0xb7ab, 0x7, 0x2, 0x1, 0x13fb, 0x6, 0x5, 0x80000001, 0x7, 0xa6, 0x1, 0x8, 0x6, 0x7, 0x4, 0x1, 0x3, 0x6, 0x1000, 0x0, 0xfff, 0x0, 0xd, 0x6, 0x800, 0x1, 0x1, 0x8001, 0x9, 0x7, 0x598a, 0x2, 0xfffffff9, 0x1, 0x4, 0x100, 0x2, 0xf, 0x0, 0x9, 0x2e49, 0x7, 0x8, 0xc2d, 0x7fffffff, 0x2, 0x200, 0x60, 0x5, 0x0, 0x80, 0x9, 0x6, 0x4, 0x7, 0x5, 0xda6, 0x80, 0x6, 0x3eae, 0xfffffff1, 0x3, 0x4836, 0x3, 0xf4cf, 0x5, 0x4, 0x0, 0x80, 0x800, 0x1240000, 0x5, 0xfff, 0x3, 0x2, 0x4, 0x9480, 0x200, 0x8, 0xffff, 0x2, 0x8da000, 0x3ff, 0xc, 0xfbf, 0x4ae, 0x8, 0xf281, 0x356cb98f, 0xffffb87e, 0x2, 0x3, 0xf, 0xd156, 0x3, 0x1ff, 0x6, 0x5, 0x5, 0x6, 0xffff, 0x168, 0x8, 0x6, 0x6, 0x0, 0x6, 0xd7b, 0x0, 0x80, 0x2d5a, 0x1, 0x80, 0x10001, 0x7, 0x1, 0x4, 0xffff, 0xfff, 0x7, 0x101, 0x7, 0xffffffff, 0x2, 0x2, 0xfba, 0x3, 0x615, 0x8, 0x2, 0x95, 0xb9cf, 0x10000, 0xf3a9, 0x101, 0x6, 0x9, 0x8, 0x224, 0x2, 0xfffffff2, 0x1, 0x6f1, 0x7, 0x2021fa48, 0x3, 0x791290f9, 0xffffff29, 0x7, 0x1, 0x7, 0x101, 0x1, 0xffffff5d, 0x1ff, 0x0, 0xc720, 0x4, 0x7, 0x0, 0x2, 0x8, 0x400, 0x8001, 0x7, 0x9, 0xfff, 0xfffffffa, 0x10, 0x9, 0x5, 0x80000000, 0x4c6, 0xf3de, 0xe26, 0xffff, 0x5, 0x1, 0x0, 0xfffffffe, 0x800, 0x100, 0x7, 0x0, 0x6, 0x6, 0x7, 0x80000000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8000}]}]}}]}, 0x6ac}}, 0x24040084) 943.064436ms ago: executing program 2 (id=4904): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000400)='kmem_cache_free\x00', r1}, 0x18) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 937.302057ms ago: executing program 1 (id=4905): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r3, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 668.722664ms ago: executing program 2 (id=4906): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r2, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)={0xa0000004}) 440.694516ms ago: executing program 4 (id=4907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000280)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 405.63329ms ago: executing program 2 (id=4908): keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030010850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08f088a82b9a86dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 236.585076ms ago: executing program 2 (id=4909): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 0s ago: executing program 1 (id=4910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000002500)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x5d, 0x1000000, 0x0}) kernel console output (not intermixed with test programs): ng mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.666583][ T9136] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 795.483585][T10392] EXT4-fs (loop2): unmounting filesystem. [ 795.514198][ T9136] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 795.630910][T12469] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3835'. [ 796.337084][T12479] xt_bpf: check failed: parse error [ 796.344088][T12480] binder: 12475:12480 ioctl c0306201 200000000540 returned -14 [ 796.460937][ T9136] usb 4-1: config 0 has no interface number 0 [ 796.467150][ T9136] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.480073][ T9136] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.490987][ T9136] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 796.501489][ T9136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.528036][ T9136] usb 4-1: config 0 descriptor?? [ 796.729261][T12492] overlayfs: missing 'lowerdir' [ 797.061719][ T9136] usbhid 4-1:0.1: can't add hid device: -71 [ 797.072620][ T9136] usbhid: probe of 4-1:0.1 failed with error -71 [ 797.082694][ T9136] usb 4-1: USB disconnect, device number 33 [ 797.173228][T12498] loop2: detected capacity change from 0 to 128 [ 797.198868][T12498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 797.214608][T12498] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.238920][T12498] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 797.259696][T10392] EXT4-fs (loop2): unmounting filesystem. [ 798.359110][T12513] loop4: detected capacity change from 0 to 40427 [ 798.366418][T12513] F2FS-fs (loop4): fault_injection options not supported [ 798.374953][T12513] F2FS-fs (loop4): invalid crc value [ 798.412664][T12513] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 798.446832][T12513] F2FS-fs (loop4): Start checkpoint disabled! [ 798.460654][T12513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 798.788585][T12532] xt_bpf: check failed: parse error [ 798.804672][T12538] serio: Serial port ptm0 [ 799.078295][T10157] kworker/u4:8: attempt to access beyond end of device [ 799.078295][T10157] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 799.352024][T12542] loop4: detected capacity change from 0 to 128 [ 799.364022][T12542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 799.373065][T12542] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.396759][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 800.515864][T12559] loop0: detected capacity change from 0 to 256 [ 800.532131][T12559] FAT-fs (loop0): Unrecognized mount option "codepage©‘¡£DêXÞ=860" or missing value [ 800.600682][T12560] overlayfs: missing 'lowerdir' [ 801.755811][T12569] loop2: detected capacity change from 0 to 512 [ 801.804179][T12569] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3872: corrupted inode contents [ 801.817088][T12569] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.3872: mark_inode_dirty error [ 801.829029][T12569] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3872: corrupted inode contents [ 801.852989][T12569] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3872: mark_inode_dirty error [ 801.873221][ T6] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 801.896866][T12580] loop0: detected capacity change from 0 to 128 [ 801.898328][T12569] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3872: corrupted inode contents [ 801.916517][T12569] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 801.925907][T12569] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3872: corrupted inode contents [ 801.938708][T12569] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.3872: mark_inode_dirty error [ 801.984513][T12569] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 802.015345][T12583] overlayfs: missing 'lowerdir' [ 802.046863][T12569] EXT4-fs (loop2): 1 truncate cleaned up [ 802.071209][T12569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 802.109967][T12569] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.242883][ T351] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 802.261160][T12580] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 802.273018][T12580] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.289905][ T351] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 1 [ 802.330126][T12580] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 802.343037][T12580] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 802.354251][ T6] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 802.362513][ T6] usb 2-1: config 0 has no interface number 0 [ 802.369005][ T6] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.387857][ T6] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.399028][T10046] EXT4-fs (loop0): unmounting filesystem. [ 802.993086][T12593] xt_bpf: check failed: parse error [ 803.012247][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 803.023150][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.024271][T10392] EXT4-fs (loop2): unmounting filesystem. [ 803.032686][ T6] usb 2-1: config 0 descriptor?? [ 803.044084][ T6] usb 2-1: can't set config #0, error -71 [ 803.050816][ T6] usb 2-1: USB disconnect, device number 27 [ 803.865974][T12604] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 803.875277][T12604] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 804.371526][T12611] loop2: detected capacity change from 0 to 512 [ 804.388162][T12613] loop4: detected capacity change from 0 to 512 [ 804.397712][T12610] serio: Serial port ptm0 [ 804.425414][T12611] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3884: corrupted inode contents [ 804.447734][T12611] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.3884: mark_inode_dirty error [ 804.459537][T12611] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3884: corrupted inode contents [ 804.471739][T12611] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3884: mark_inode_dirty error [ 804.485638][T12611] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3884: corrupted inode contents [ 804.488377][T12619] binder: 12618:12619 ioctl c0306201 200000000540 returned -22 [ 804.507678][T12611] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 804.516627][T12613] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.3885: corrupted inode contents [ 804.517669][T12611] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3884: corrupted inode contents [ 804.540945][T12613] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.3885: mark_inode_dirty error [ 804.552995][T12613] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.3885: corrupted inode contents [ 804.565513][T12613] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.3885: mark_inode_dirty error [ 804.577496][T12613] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.3885: corrupted inode contents [ 804.590052][T12613] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 804.599692][T12613] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.3885: corrupted inode contents [ 804.614073][T12611] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.3884: mark_inode_dirty error [ 804.621444][T12620] binder: 12618:12620 ioctl c0306201 200000000640 returned -22 [ 804.627207][T12613] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.3885: mark_inode_dirty error [ 804.634302][T12611] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 804.645486][T12613] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 804.654095][T12611] EXT4-fs (loop2): 1 truncate cleaned up [ 804.663546][T12613] EXT4-fs (loop4): 1 truncate cleaned up [ 804.668660][T12611] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 804.674762][ T351] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 804.684201][T12611] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.704200][T12613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 804.709530][ T351] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 1 [ 804.744258][T12613] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.801720][ T351] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 804.814206][ T351] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 1 [ 807.759260][T10392] EXT4-fs (loop2): unmounting filesystem. [ 809.039673][T12641] binder: 12631:12641 ioctl c0306201 200000000540 returned -14 [ 809.112357][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 809.256739][T12649] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 809.265756][T12649] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 809.565571][T12657] serio: Serial port ptm0 [ 809.571270][T12656] 9pnet_fd: Insufficient options for proto=fd [ 810.558357][T12672] 9pnet: Could not find request transport: fd0x0000000000000005 [ 810.569789][T12677] loop0: detected capacity change from 0 to 512 [ 810.648930][T12677] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3905: corrupted inode contents [ 810.671219][T12677] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.3905: mark_inode_dirty error [ 810.695993][T12686] loop3: detected capacity change from 0 to 512 [ 810.740042][T12677] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3905: corrupted inode contents [ 810.843386][T12677] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.3905: mark_inode_dirty error [ 810.902290][T12677] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3905: corrupted inode contents [ 810.943258][T12686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 810.989314][T12686] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.045025][T12677] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 811.062871][T12677] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3905: corrupted inode contents [ 811.080047][T12677] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.3905: mark_inode_dirty error [ 811.099496][T12677] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 811.114139][T12677] EXT4-fs (loop0): 1 truncate cleaned up [ 811.125114][T12677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 811.134562][ T351] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 811.145272][ T351] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 1 [ 811.157346][T12677] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.169265][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 811.248126][T12687] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 811.282427][T12687] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 811.586734][T12699] binder: 12698:12699 ioctl c0306201 200000000540 returned -22 [ 812.323973][T12709] serio: Serial port ptm0 [ 812.358016][T10046] EXT4-fs (loop0): unmounting filesystem. [ 812.464135][T12717] 9pnet: Could not find request transport: fd0x0000000000000005 [ 812.497076][T12719] loop2: detected capacity change from 0 to 128 [ 812.564345][T12719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 812.589618][T12719] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.735139][ T28] audit: type=1400 audit(1760283864.678:663): avc: denied { create } for pid=12721 comm="syz.4.3919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 812.760637][T10392] EXT4-fs (loop2): unmounting filesystem. [ 812.863967][ T28] audit: type=1400 audit(1760283864.688:664): avc: denied { write } for pid=12721 comm="syz.4.3919" path="socket:[58521]" dev="sockfs" ino=58521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 813.172076][T12730] binder: 12729:12730 ioctl c0306201 200000000540 returned -22 [ 814.557282][T12740] loop4: detected capacity change from 0 to 512 [ 814.634510][T12740] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.3925: corrupted inode contents [ 814.722016][T12745] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3922'. [ 814.741597][T12740] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.3925: mark_inode_dirty error [ 814.768803][T12740] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.3925: corrupted inode contents [ 814.839875][T12748] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 814.848804][T12748] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 815.090054][T12740] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.3925: mark_inode_dirty error [ 815.123289][T12740] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.3925: corrupted inode contents [ 815.154972][T12740] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 815.182520][T12740] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.3925: corrupted inode contents [ 815.221992][T12740] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.3925: mark_inode_dirty error [ 815.252645][T12740] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 815.271625][T12751] 9pnet_fd: Insufficient options for proto=fd [ 815.278225][T12740] EXT4-fs (loop4): 1 truncate cleaned up [ 815.284235][T12740] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 815.293618][ T351] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 815.302733][T12740] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.308865][ T351] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 1 [ 815.412028][T12754] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3928'. [ 815.444196][T12756] 9pnet_fd: Insufficient options for proto=fd [ 815.785081][T12764] loop2: detected capacity change from 0 to 128 [ 815.876567][T12768] serio: Serial port ptm0 [ 816.254322][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 816.355720][T12776] binder: 12775:12776 ioctl 4018620d 0 returned -22 [ 816.377218][T12776] binder: 12775:12776 ioctl c0306201 200000000540 returned -22 [ 816.443984][T12777] binder: 12775:12777 ioctl c0306201 200000000640 returned -22 [ 817.016857][T12786] x_tables: unsorted underflow at hook 2 [ 817.322151][T12791] loop0: detected capacity change from 0 to 512 [ 817.348685][T12791] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3939: corrupted inode contents [ 817.361220][T12791] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.3939: mark_inode_dirty error [ 817.373995][T12791] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3939: corrupted inode contents [ 817.386288][T12791] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.3939: mark_inode_dirty error [ 817.398616][T12791] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3939: corrupted inode contents [ 817.410941][T12791] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 817.419994][T12791] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3939: corrupted inode contents [ 817.432339][T12791] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.3939: mark_inode_dirty error [ 817.444026][T12791] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 817.453581][T12791] EXT4-fs (loop0): 1 truncate cleaned up [ 817.459443][T12791] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 817.468868][T12791] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.479753][ T442] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 817.499531][ T442] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 817.883975][T12799] 9pnet_fd: Insufficient options for proto=fd [ 818.402619][ T28] audit: type=1400 audit(1760283870.378:665): avc: denied { mount } for pid=12805 comm="syz.1.3945" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 818.749166][ T28] audit: type=1400 audit(1760283870.378:666): avc: denied { remount } for pid=12805 comm="syz.1.3945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 818.865254][ T28] audit: type=1400 audit(1760283870.398:667): avc: denied { unmount } for pid=9294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 819.103476][ T7338] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 819.257862][T10046] EXT4-fs (loop0): unmounting filesystem. [ 819.366669][ T7338] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.391568][ T7338] usb 5-1: config 0 has no interface number 0 [ 819.471224][T12815] serio: Serial port ptm0 [ 819.475788][ T7338] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.487603][ T7338] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.498164][ T7338] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 819.508252][ T7338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.043134][ T7338] usb 5-1: config 0 descriptor?? [ 820.101677][T12827] binder: 12820:12827 ioctl c0306201 200000000540 returned -22 [ 820.428254][T12840] 9pnet_fd: Insufficient options for proto=fd [ 820.610477][ T7338] prodikeys 0003:041E:2801.003A: unknown main item tag 0x5 [ 820.651097][ T7338] prodikeys 0003:041E:2801.003A: item fetching failed at offset 6/7 [ 820.672383][T12843] loop2: detected capacity change from 0 to 128 [ 820.741788][ T7338] prodikeys 0003:041E:2801.003A: hid parse failed [ 820.821941][ T7338] prodikeys: probe of 0003:041E:2801.003A failed with error -22 [ 820.831415][ T7338] usb 5-1: USB disconnect, device number 25 [ 820.949282][T12852] loop0: detected capacity change from 0 to 512 [ 820.985878][T12852] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3961: corrupted inode contents [ 821.007114][T12852] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.3961: mark_inode_dirty error [ 821.020019][T12852] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3961: corrupted inode contents [ 821.033800][T12852] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.3961: mark_inode_dirty error [ 821.045817][T12852] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3961: corrupted inode contents [ 821.263744][T12852] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 821.288523][T12852] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.3961: corrupted inode contents [ 821.359965][T12852] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.3961: mark_inode_dirty error [ 821.399216][T12852] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 821.424814][T12852] EXT4-fs (loop0): 1 truncate cleaned up [ 821.431668][T12852] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 821.440813][T12852] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.451565][T10016] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 821.522994][T10016] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 821.561752][T12866] serio: Serial port ptm0 [ 823.142955][T10046] EXT4-fs (loop0): unmounting filesystem. [ 823.492490][T12887] loop3: detected capacity change from 0 to 1024 [ 823.501496][T12887] EXT4-fs: Ignoring removed orlov option [ 823.507750][T12887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 823.683935][T12891] binder: 12877:12891 ioctl c0306201 200000000540 returned -22 [ 823.694983][T12887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 825.395435][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 827.302661][T12940] loop3: detected capacity change from 0 to 512 [ 827.941456][T12940] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.3989: corrupted inode contents [ 828.001648][T12940] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.3989: mark_inode_dirty error [ 828.062746][T12940] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.3989: corrupted inode contents [ 828.075055][T12940] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.3989: mark_inode_dirty error [ 828.093668][T12940] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.3989: corrupted inode contents [ 828.106633][T12940] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 828.143045][T12940] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.3989: corrupted inode contents [ 828.188300][T12940] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.3989: mark_inode_dirty error [ 828.201360][T12940] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 828.210512][ T19] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 828.218932][T12940] EXT4-fs (loop3): 1 truncate cleaned up [ 828.225085][T12940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 828.235075][T10016] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 828.252880][T12940] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.282617][T10016] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 829.562915][ T19] usb 5-1: device descriptor read/64, error -71 [ 829.999130][T12983] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4000'. [ 830.092774][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 830.237013][ T19] usb 5-1: device descriptor read/64, error -71 [ 831.022061][T12997] x_tables: unsorted underflow at hook 2 [ 831.732575][ T19] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 831.922560][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 831.929665][ T19] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 831.944404][ T19] usb 5-1: config 0 has no interface number 0 [ 831.957113][ T19] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 831.977956][ T19] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 832.000981][ T19] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 832.010460][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.018815][ T19] usb 5-1: Product: syz [ 832.023519][ T19] usb 5-1: Manufacturer: syz [ 832.028205][ T19] usb 5-1: SerialNumber: syz [ 832.039023][ T19] usb 5-1: config 0 descriptor?? [ 832.044596][T13007] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 832.054164][T13007] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 832.270908][T13007] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 832.291747][T13007] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 832.329001][T13021] loop0: detected capacity change from 0 to 8192 [ 832.669938][T13024] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4013'. [ 832.692970][ T19] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 832.703224][ T19] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 832.713233][ T19] asix: probe of 5-1:0.251 failed with error -5 [ 832.722306][ T19] usb 5-1: USB disconnect, device number 27 [ 832.986567][T13034] binder: 13031:13034 ioctl c0306201 200000000540 returned -14 [ 833.252682][ T6] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 833.316179][T13044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4018'. [ 833.402637][ T6] usb 2-1: device descriptor read/64, error -71 [ 833.672993][ T6] usb 2-1: device descriptor read/64, error -71 [ 833.710521][T13055] loop0: detected capacity change from 0 to 8192 [ 833.942653][ T6] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 834.102564][ T6] usb 2-1: device descriptor read/64, error -71 [ 834.200061][T13066] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4027'. [ 834.372616][ T6] usb 2-1: device descriptor read/64, error -71 [ 834.498574][ T6] usb usb2-port1: attempt power cycle [ 834.642879][T13082] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4031'. [ 835.094215][T13088] loop2: detected capacity change from 0 to 8192 [ 835.122583][ T6] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 835.173726][ T6] usb 2-1: device descriptor read/8, error -71 [ 835.325388][T13091] binder: 13089:13091 ioctl c0306201 200000000540 returned -14 [ 835.343660][ T6] usb 2-1: device descriptor read/8, error -71 [ 836.017636][T13099] loop3: detected capacity change from 0 to 512 [ 836.058668][T13099] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4039: casefold flag without casefold feature [ 836.082726][T13099] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4039: couldn't read orphan inode 15 (err -117) [ 836.111217][T13106] loop2: detected capacity change from 0 to 512 [ 836.121192][T13099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 836.205111][T13106] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4041: corrupted inode contents [ 836.243163][T13106] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.4041: mark_inode_dirty error [ 836.271018][T13106] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4041: corrupted inode contents [ 836.495050][T13106] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.4041: mark_inode_dirty error [ 836.600902][T13106] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4041: corrupted inode contents [ 836.626396][T13106] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 836.645084][T13106] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4041: corrupted inode contents [ 836.657535][T13106] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.4041: mark_inode_dirty error [ 836.669295][T13106] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 836.680798][T13106] EXT4-fs (loop2): 1 truncate cleaned up [ 836.686806][T13106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 836.696223][ T351] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 836.706419][T13106] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.717274][ T351] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 1 [ 836.981072][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 837.217754][T13118] loop4: detected capacity change from 0 to 40427 [ 837.254698][T13118] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 837.302628][T13118] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 837.316209][T13122] loop0: detected capacity change from 0 to 8192 [ 837.341349][T13118] F2FS-fs (loop4): invalid crc value [ 837.383042][ T28] audit: type=1400 audit(1760283889.388:668): avc: denied { wake_alarm } for pid=13123 comm="syz.1.4048" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 837.425072][T13118] F2FS-fs (loop4): Found nat_bits in checkpoint [ 837.527300][T13118] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 837.542591][T13118] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 837.763412][T13136] binder: 13135:13136 ioctl c0306201 200000000540 returned -14 [ 837.793208][T10392] EXT4-fs (loop2): unmounting filesystem. [ 838.326777][T13153] 9pnet_fd: Insufficient options for proto=fd [ 838.582687][T12112] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 838.752639][T12112] usb 3-1: device descriptor read/64, error -71 [ 839.032644][T12112] usb 3-1: device descriptor read/64, error -71 [ 839.093391][T13163] loop4: detected capacity change from 0 to 512 [ 839.119350][T13163] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.4059: casefold flag without casefold feature [ 839.132792][T13163] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.4059: couldn't read orphan inode 15 (err -117) [ 839.145507][T13163] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 839.274898][T13167] binder: 13166:13167 ioctl c0306201 0 returned -14 [ 839.286270][T13167] binder: 13166:13167 ioctl c0306201 200000000540 returned -22 [ 839.342642][T12112] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 839.562750][T12112] usb 3-1: device descriptor read/64, error -71 [ 839.583187][T13169] binder: 13166:13169 ioctl c0306201 200000000640 returned -22 [ 839.692042][T13173] loop0: detected capacity change from 0 to 512 [ 839.715658][T13173] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4062: corrupted inode contents [ 839.731332][T13173] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4062: mark_inode_dirty error [ 839.743171][T13173] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4062: corrupted inode contents [ 839.755557][T13173] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4062: mark_inode_dirty error [ 839.767385][T13173] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4062: corrupted inode contents [ 839.779681][T13173] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 839.789936][T13173] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4062: corrupted inode contents [ 839.802700][T13173] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4062: mark_inode_dirty error [ 839.814135][T13173] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 839.825015][T13173] EXT4-fs (loop0): 1 truncate cleaned up [ 839.830739][T13173] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 839.840662][T13173] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.842632][T12112] usb 3-1: device descriptor read/64, error -71 [ 839.851671][ T10] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 839.880399][ T10] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:1: Failed to release dquot type 1 [ 839.965347][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 839.972673][T12112] usb usb3-port1: attempt power cycle [ 840.960634][T12112] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 840.993667][T12112] usb 3-1: device descriptor read/8, error -71 [ 841.074005][T10046] EXT4-fs (loop0): unmounting filesystem. [ 841.143764][T12112] usb 3-1: device descriptor read/8, error -71 [ 841.412666][T12112] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 841.453752][T13198] loop4: detected capacity change from 0 to 40427 [ 841.463971][T13198] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 841.467821][T13205] loop0: detected capacity change from 0 to 4096 [ 841.471837][T13198] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 841.485094][T12112] usb 3-1: device descriptor read/8, error -71 [ 841.487524][T13198] F2FS-fs (loop4): invalid crc value [ 841.525020][T13198] F2FS-fs (loop4): Found nat_bits in checkpoint [ 841.611649][T13198] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 841.636482][T13198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 841.673108][T12112] usb 3-1: device descriptor read/8, error -71 [ 841.792720][T12112] usb usb3-port1: unable to enumerate USB device [ 842.125875][T13224] x_tables: unsorted underflow at hook 2 [ 842.482455][T13226] loop2: detected capacity change from 0 to 512 [ 842.517216][T13226] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.4077: casefold flag without casefold feature [ 842.563383][T13226] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4077: couldn't read orphan inode 15 (err -117) [ 842.599302][T13226] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 843.836252][T10392] EXT4-fs (loop2): unmounting filesystem. [ 843.871854][T13243] loop2: detected capacity change from 0 to 512 [ 843.976631][T13243] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4082: corrupted inode contents [ 843.999662][T13243] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.4082: mark_inode_dirty error [ 844.013022][T13243] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4082: corrupted inode contents [ 844.025511][T13243] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.4082: mark_inode_dirty error [ 844.037638][T13243] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4082: corrupted inode contents [ 844.064700][T13243] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 844.086996][T13245] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4083'. [ 844.096289][T13243] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4082: corrupted inode contents [ 844.109608][T13243] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.4082: mark_inode_dirty error [ 844.127290][T13243] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 844.145563][T13243] EXT4-fs (loop2): 1 truncate cleaned up [ 844.153088][T13243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 844.162901][ T442] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 844.176912][ T442] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 844.189349][T13243] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.967476][T13272] loop4: detected capacity change from 0 to 128 [ 845.249404][T10392] EXT4-fs (loop2): unmounting filesystem. [ 846.600918][T13300] loop3: detected capacity change from 0 to 1024 [ 846.607934][T13300] EXT4-fs: Ignoring removed orlov option [ 846.613709][T13300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 846.785678][T13300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 847.849786][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 848.827778][T13343] loop3: detected capacity change from 0 to 1024 [ 848.837363][T13343] EXT4-fs: Ignoring removed orlov option [ 848.843848][T13343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 849.032419][T13343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 849.059054][T13343] incfs: Backing dir is not set, filesystem can't be mounted. [ 849.066930][T13343] incfs: mount failed -2 [ 849.117523][T13332] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4110'. [ 849.803283][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 849.922789][T13357] loop0: detected capacity change from 0 to 1024 [ 849.932837][T13357] EXT4-fs: Ignoring removed orlov option [ 849.938726][T13357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 850.100217][T13357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 850.703201][T13362] loop3: detected capacity change from 0 to 4096 [ 851.511027][T10046] EXT4-fs (loop0): unmounting filesystem. [ 853.323491][T13400] loop0: detected capacity change from 0 to 1024 [ 853.333131][T13400] EXT4-fs: Ignoring removed orlov option [ 853.339022][T13400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 853.486062][T13400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 854.218568][T10046] EXT4-fs (loop0): unmounting filesystem. [ 854.300078][T13411] loop4: detected capacity change from 0 to 512 [ 854.322024][T13411] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4135: corrupted inode contents [ 854.326474][T13415] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4136'. [ 854.334548][T13411] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.4135: mark_inode_dirty error [ 854.453245][T13411] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4135: corrupted inode contents [ 855.395480][T13411] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.4135: mark_inode_dirty error [ 855.445902][T13411] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4135: corrupted inode contents [ 855.460933][T13411] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 855.469865][ T9136] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 855.478926][T13411] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4135: corrupted inode contents [ 855.492222][T13411] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.4135: mark_inode_dirty error [ 855.505120][T13411] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 855.598593][T13411] EXT4-fs (loop4): 1 truncate cleaned up [ 855.604536][T13411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 855.614154][ T10] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 855.631976][T13411] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.652617][ T9136] usb 3-1: device descriptor read/64, error -71 [ 855.679997][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:1: Failed to release dquot type 1 [ 856.617068][ T9136] usb 3-1: device descriptor read/64, error -71 [ 859.381864][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 860.011782][T13459] loop4: detected capacity change from 0 to 1024 [ 860.018693][T13459] EXT4-fs: Ignoring removed orlov option [ 860.024446][T13459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 860.191191][T13461] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 860.263931][T13463] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4149'. [ 860.308800][T13465] loop2: detected capacity change from 0 to 512 [ 860.345903][T13465] EXT4-fs: Ignoring removed bh option [ 860.601557][T13475] loop0: detected capacity change from 0 to 512 [ 860.605201][T13465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 860.608618][T13459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 861.111349][T13480] loop3: detected capacity change from 0 to 1024 [ 861.126069][T13480] EXT4-fs: Ignoring removed orlov option [ 861.136885][T13480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 861.158383][T13465] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 861.292664][ T2759] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 861.381847][T13475] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4153: casefold flag without casefold feature [ 861.404089][T13480] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 861.544615][ T2759] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.673883][ T28] audit: type=1400 audit(1760283913.678:669): avc: denied { append } for pid=13464 comm="syz.2.4150" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 861.703491][ T2759] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 861.713110][T13475] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4153: couldn't read orphan inode 15 (err -117) [ 861.732615][ T2759] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 861.752782][T13475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 861.762941][ T2759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.877240][T10392] EXT4-fs (loop2): unmounting filesystem. [ 861.893252][ T2759] usb 2-1: config 0 descriptor?? [ 862.192730][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 862.224223][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 862.243438][T10046] EXT4-fs (loop0): unmounting filesystem. [ 862.378813][T13496] loop4: detected capacity change from 0 to 4096 [ 862.401834][T13492] loop2: detected capacity change from 0 to 40427 [ 862.410437][T13492] F2FS-fs (loop2): fault_injection options not supported [ 862.418470][T13492] F2FS-fs (loop2): invalid crc value [ 862.429022][T13492] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 862.461624][T13492] F2FS-fs (loop2): Start checkpoint disabled! [ 862.469886][T13492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 862.534224][T13508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4159'. [ 863.237686][T13514] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4162'. [ 863.318501][T13516] loop0: detected capacity change from 0 to 512 [ 863.409474][T13521] syz.3.4164[13521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 863.409562][T13521] syz.3.4164[13521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 863.424683][T13516] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4163: corrupted inode contents [ 863.479054][T13516] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4163: mark_inode_dirty error [ 863.521464][T13516] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4163: corrupted inode contents [ 863.551604][T13516] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4163: mark_inode_dirty error [ 863.584844][ T287] usb 2-1: USB disconnect, device number 32 [ 863.604153][T13516] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4163: corrupted inode contents [ 863.718525][T13516] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 863.728139][ T10] kworker/u4:1: attempt to access beyond end of device [ 863.728139][ T10] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 863.732873][T13516] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4163: corrupted inode contents [ 864.023457][T13516] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4163: mark_inode_dirty error [ 864.217634][T13516] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 864.386905][T13516] EXT4-fs (loop0): 1 truncate cleaned up [ 864.463514][T13516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 864.540094][ T442] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 864.595116][T13516] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.611922][ T442] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 864.638523][T13539] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 864.673149][T13539] sch_tbf: burst 14 is lower than device lo mtu (65550) ! [ 864.701247][T13545] loop2: detected capacity change from 0 to 512 [ 865.672854][T13545] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4173: corrupted inode contents [ 865.715970][T13545] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.4173: mark_inode_dirty error [ 865.768027][T13545] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4173: corrupted inode contents [ 865.821892][T13545] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.4173: mark_inode_dirty error [ 865.880552][T13545] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4173: corrupted inode contents [ 865.912585][ T291] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 865.938492][T13545] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 865.957991][T13545] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4173: corrupted inode contents [ 865.980438][T13545] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.4173: mark_inode_dirty error [ 865.992313][T13545] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 866.002413][T13545] EXT4-fs (loop2): 1 truncate cleaned up [ 866.008557][T13545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 866.019758][T10016] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 866.029894][T13545] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.043326][T10016] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 866.702365][T10046] EXT4-fs (loop0): unmounting filesystem. [ 867.062640][T13564] loop0: detected capacity change from 0 to 40427 [ 867.073358][T13564] F2FS-fs (loop0): fault_injection options not supported [ 867.081810][T13564] F2FS-fs (loop0): invalid crc value [ 867.104218][T13564] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 867.138802][T13564] F2FS-fs (loop0): Start checkpoint disabled! [ 867.155475][T13564] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 868.292622][ T6] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 868.301911][ T291] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.312908][ T291] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 868.313882][T10392] EXT4-fs (loop2): unmounting filesystem. [ 868.514010][T13574] binder: 13571:13574 ioctl c0306201 200000000540 returned -14 [ 868.963201][ T291] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 868.974508][ T291] usb 5-1: config 0 interface 0 has no altsetting 0 [ 868.975504][ T442] kworker/u4:5: attempt to access beyond end of device [ 868.975504][ T442] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 868.981137][ T291] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 869.004984][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.016162][ T291] usb 5-1: config 0 descriptor?? [ 869.021626][ T291] usb 5-1: can't set config #0, error -71 [ 869.039324][ T291] usb 5-1: USB disconnect, device number 28 [ 869.071216][T13586] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4186'. [ 869.091506][T13584] loop2: detected capacity change from 0 to 512 [ 869.221902][T13584] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4181: corrupted inode contents [ 869.247796][T13584] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.4181: mark_inode_dirty error [ 869.284242][T13584] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4181: corrupted inode contents [ 869.378031][T13594] loop3: detected capacity change from 0 to 1024 [ 869.386914][T13594] EXT4-fs: Ignoring removed orlov option [ 869.393388][T13594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 869.491894][T13594] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 869.636626][T13584] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.4181: mark_inode_dirty error [ 869.831902][T13584] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4181: corrupted inode contents [ 870.102784][T13584] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 870.142819][T13584] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4181: corrupted inode contents [ 870.190291][T13598] loop0: detected capacity change from 0 to 8192 [ 870.205011][T13584] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.4181: mark_inode_dirty error [ 870.216998][T13606] incfs: Options parsing error. -22 [ 870.222459][T13606] incfs: mount failed -22 [ 870.262879][T13584] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 870.287122][T13584] EXT4-fs (loop2): 1 truncate cleaned up [ 870.295244][T13584] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 870.306009][T13584] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.309038][T10016] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 870.381664][T10016] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 870.404136][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 870.441664][T13614] binder: 13612:13614 ioctl c0306201 0 returned -14 [ 870.500033][T13617] binder: 13612:13617 ioctl c0306201 200000000640 returned -22 [ 870.517699][T13608] binder: 13607:13608 ioctl c0306201 200000000540 returned -14 [ 871.708110][T13626] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4198'. [ 871.879185][T10392] EXT4-fs (loop2): unmounting filesystem. [ 872.714831][T13653] binder: 13648:13653 ioctl c0306201 200000000540 returned -14 [ 872.882747][T13655] loop4: detected capacity change from 0 to 512 [ 872.900368][T13638] loop3: detected capacity change from 0 to 40427 [ 872.911709][T13638] F2FS-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 872.912474][T13655] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.4210: casefold flag without casefold feature [ 872.935162][T13655] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.4210: couldn't read orphan inode 15 (err -117) [ 872.987737][T13660] binder: 13656:13660 ioctl c0306201 200000000640 returned -22 [ 873.067624][T13655] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 873.126754][T13669] loop3: detected capacity change from 0 to 512 [ 873.634798][T13669] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4215: corrupted inode contents [ 873.674437][T13669] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.4215: mark_inode_dirty error [ 873.689133][T13669] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4215: corrupted inode contents [ 873.703871][T13669] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.4215: mark_inode_dirty error [ 873.808721][T13669] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4215: corrupted inode contents [ 873.822487][T13669] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 873.833776][T13669] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4215: corrupted inode contents [ 873.834610][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 873.846147][T13669] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.4215: mark_inode_dirty error [ 873.908209][T13669] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 873.918675][T13669] EXT4-fs (loop3): 1 truncate cleaned up [ 873.927058][T13669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 873.933204][T13682] incfs: Options parsing error. -22 [ 873.942110][ T502] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 873.949241][T13669] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.962931][T13682] incfs: mount failed -22 [ 873.974829][ T502] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 873.996510][T13691] loop4: detected capacity change from 0 to 256 [ 874.031291][T13691] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 875.877224][T13701] loop0: detected capacity change from 0 to 1024 [ 875.886315][T13701] EXT4-fs: Ignoring removed orlov option [ 875.892132][T13701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 876.026931][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 876.225971][T13701] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 876.534524][T13709] binder: 13692:13709 ioctl c0306201 200000000540 returned -14 [ 876.561040][T13710] binder: 13704:13710 ioctl c0306201 200000000640 returned -22 [ 876.760260][T10046] EXT4-fs (loop0): unmounting filesystem. [ 878.271717][T13726] loop4: detected capacity change from 0 to 8192 [ 879.092333][T13741] loop0: detected capacity change from 0 to 512 [ 879.164005][T13741] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4238: casefold flag without casefold feature [ 879.212864][T13741] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4238: couldn't read orphan inode 15 (err -117) [ 879.213068][ T2759] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 879.225520][T13741] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 880.745980][T10046] EXT4-fs (loop0): unmounting filesystem. [ 880.763732][ T2759] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 880.776231][ T2759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.787710][ T2759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.798207][T13775] binder: 13767:13775 ioctl c0306201 200000000640 returned -22 [ 880.812789][ T2759] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 880.837190][ T2759] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 880.852561][ T2759] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 880.871370][ T2759] usb 3-1: Manufacturer: syz [ 880.882803][ T2759] usb 3-1: config 0 descriptor?? [ 880.928427][ T28] audit: type=1400 audit(1760283932.928:670): avc: denied { relabelfrom } for pid=13769 comm="syz.4.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 880.948851][ T28] audit: type=1400 audit(1760283932.958:671): avc: denied { relabelto } for pid=13769 comm="syz.4.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 881.302441][ T2759] appleir 0003:05AC:8243.003B: unknown main item tag 0x0 [ 881.361204][ T2759] appleir 0003:05AC:8243.003B: No inputs registered, leaving [ 881.371861][ T2759] appleir 0003:05AC:8243.003B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 881.399874][T13791] loop4: detected capacity change from 0 to 512 [ 881.421091][T13791] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4255: corrupted inode contents [ 881.434988][T13791] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.4255: mark_inode_dirty error [ 881.449644][T13791] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4255: corrupted inode contents [ 881.463373][T13791] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.4255: mark_inode_dirty error [ 881.475253][T13791] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4255: corrupted inode contents [ 881.487509][T13791] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 881.496824][T13791] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4255: corrupted inode contents [ 881.509030][T13791] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.4255: mark_inode_dirty error [ 881.521798][T13791] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 881.531928][T13791] EXT4-fs (loop4): 1 truncate cleaned up [ 881.537785][T13791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 881.546872][T13791] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.557680][ T502] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 881.572664][ T502] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 881.618623][T13795] incfs: Options parsing error. -22 [ 881.634631][T13795] incfs: mount failed -22 [ 882.748539][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4258'. [ 882.997292][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 883.071084][T12112] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 883.195571][T13831] binder: 13824:13831 ioctl c0306201 200000000640 returned -22 [ 884.393851][ T2759] usb 3-1: USB disconnect, device number 43 [ 885.211459][T13861] loop4: detected capacity change from 0 to 512 [ 885.357054][T13861] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4276: corrupted inode contents [ 885.382778][T13861] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.4276: mark_inode_dirty error [ 885.559592][T13861] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4276: corrupted inode contents [ 885.713436][T13865] binder: 13856:13865 ioctl c0306201 200000000540 returned -22 [ 885.731305][T13861] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.4276: mark_inode_dirty error [ 885.857288][T13861] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4276: corrupted inode contents [ 886.197471][T13861] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 886.206469][T13861] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4276: corrupted inode contents [ 886.235547][T13861] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.4276: mark_inode_dirty error [ 886.271756][T13861] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 886.301687][T13861] EXT4-fs (loop4): 1 truncate cleaned up [ 886.312842][T10016] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 886.340694][T10016] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 886.354505][T13861] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 886.374339][T13861] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.126976][T13887] loop3: detected capacity change from 0 to 1024 [ 888.134599][T13887] EXT4-fs: Ignoring removed orlov option [ 888.141842][T13887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 888.239533][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 888.455629][T13887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 888.586769][T13892] loop2: detected capacity change from 0 to 512 [ 888.754689][T13892] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4283: corrupted inode contents [ 888.787164][T13892] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.4283: mark_inode_dirty error [ 888.809116][T13892] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4283: corrupted inode contents [ 888.856379][T13892] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.4283: mark_inode_dirty error [ 888.887767][T13892] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4283: corrupted inode contents [ 888.932784][T13892] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 888.952779][T13892] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4283: corrupted inode contents [ 888.995684][T13892] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.4283: mark_inode_dirty error [ 889.043214][T13892] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 889.053468][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 889.060234][T13892] EXT4-fs (loop2): 1 truncate cleaned up [ 889.066289][T13892] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 889.075481][T10016] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 889.092039][T13892] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.102991][T10016] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 889.134646][T13907] loop3: detected capacity change from 0 to 512 [ 889.209380][T13907] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4289: corrupted inode contents [ 889.229725][T13913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4290'. [ 889.243395][T13907] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.4289: mark_inode_dirty error [ 889.294290][T13907] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4289: corrupted inode contents [ 889.487243][T13907] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.4289: mark_inode_dirty error [ 889.672849][T13907] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4289: corrupted inode contents [ 889.692158][T13907] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 889.711193][T13907] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4289: corrupted inode contents [ 889.725594][T13908] loop4: detected capacity change from 0 to 40427 [ 889.735833][T13908] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 889.748379][T13907] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.4289: mark_inode_dirty error [ 889.765980][T13908] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 889.779016][T13907] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 889.789099][T13908] F2FS-fs (loop4): invalid crc value [ 889.795735][T13907] EXT4-fs (loop3): 1 truncate cleaned up [ 889.801574][T13907] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 889.810838][T13907] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.822227][T10016] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 889.881427][T10016] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 889.899376][T10392] EXT4-fs (loop2): unmounting filesystem. [ 889.910298][T13908] F2FS-fs (loop4): Found nat_bits in checkpoint [ 889.986421][T13908] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 889.993693][T13908] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 890.111284][T13927] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 891.090133][T13915] x_tables: unsorted underflow at hook 2 [ 891.144243][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 891.515262][T13948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4299'. [ 891.776507][T13962] binder: 13955:13962 ioctl c0306201 200000000540 returned -22 [ 891.918578][T13963] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4303'. [ 891.985244][ T28] audit: type=1400 audit(1760283943.988:672): avc: denied { mounton } for pid=13966 comm="syz.1.4306" path="/345/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 892.771604][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 892.916383][T13979] loop3: detected capacity change from 0 to 8192 [ 893.014158][ T24] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.025332][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 893.031968][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 893.041095][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.079663][ T24] usb 3-1: config 0 descriptor?? [ 893.612553][ T24] wacom 0003:056A:0343.003C: hidraw0: USB HID v0.02 Device [HID 056a:0343] on usb-dummy_hcd.2-1/input0 [ 893.840765][ T24] usb 3-1: USB disconnect, device number 44 [ 894.122278][T14004] loop3: detected capacity change from 0 to 8192 [ 895.296980][T14000] fido_id[14000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 895.582970][T13990] loop4: detected capacity change from 0 to 40427 [ 895.612027][T14022] loop0: detected capacity change from 0 to 8192 [ 895.764820][T13990] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 895.772707][T13990] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 895.781940][T13990] F2FS-fs (loop4): invalid crc value [ 895.837570][T13990] F2FS-fs (loop4): Found nat_bits in checkpoint [ 895.939916][T13990] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 895.953442][T13990] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 896.002788][T14037] binder: 14014:14037 ioctl c0306201 200000000540 returned -22 [ 896.065618][T14038] loop0: detected capacity change from 0 to 256 [ 896.074534][T14038] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 896.174117][T14038] loop0: detected capacity change from 0 to 2048 [ 896.296355][T14038] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 896.338537][T14038] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.714834][T14043] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4329'. [ 896.764397][T10046] EXT4-fs (loop0): unmounting filesystem. [ 896.812390][T14049] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 897.131100][T14058] loop0: detected capacity change from 0 to 8192 [ 897.763660][T14064] incfs: Options parsing error. -22 [ 897.786331][T14064] incfs: mount failed -22 [ 897.825940][T14061] loop4: detected capacity change from 0 to 8192 [ 898.635346][T14078] loop4: detected capacity change from 0 to 512 [ 898.666261][T14078] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4341: corrupted inode contents [ 898.679396][T14078] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.4341: mark_inode_dirty error [ 898.691111][T14078] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4341: corrupted inode contents [ 898.703478][T14078] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.4341: mark_inode_dirty error [ 898.716875][T14082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4342'. [ 898.733033][T14078] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4341: corrupted inode contents [ 898.745941][T14078] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 898.755164][T14078] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4341: corrupted inode contents [ 898.767471][T14078] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.4341: mark_inode_dirty error [ 898.794784][T14078] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 898.804329][T14078] EXT4-fs (loop4): 1 truncate cleaned up [ 898.805442][T14087] binder: 14085:14087 ioctl c0306201 0 returned -14 [ 898.810094][T14078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 898.826975][T14078] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.827291][T10157] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 898.914713][T14089] binder: 14085:14089 ioctl c0306201 200000000640 returned -22 [ 898.922834][T10157] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:8: Failed to release dquot type 1 [ 901.524838][T14109] loop2: detected capacity change from 0 to 1024 [ 901.539559][T14109] EXT4-fs: Ignoring removed orlov option [ 901.545606][T14109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 903.255103][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 903.303386][T14109] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 904.498429][T10392] EXT4-fs (loop2): unmounting filesystem. [ 904.509082][T14119] loop4: detected capacity change from 0 to 512 [ 904.603791][T14119] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4353: corrupted inode contents [ 904.632789][T14119] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.4353: mark_inode_dirty error [ 904.657759][T14119] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4353: corrupted inode contents [ 904.690605][T14119] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.4353: mark_inode_dirty error [ 904.713272][T14119] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4353: corrupted inode contents [ 904.735879][T14119] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 904.753910][T14119] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4353: corrupted inode contents [ 904.782777][T14119] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.4353: mark_inode_dirty error [ 904.804945][T14119] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 904.825568][T14119] EXT4-fs (loop4): 1 truncate cleaned up [ 904.831398][T14119] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 904.849416][T14121] loop3: detected capacity change from 0 to 40427 [ 904.855647][T14119] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 904.860695][ T502] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 904.877362][ T502] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 904.888871][T14121] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 904.897626][T14121] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 904.923286][T14121] F2FS-fs (loop3): invalid crc value [ 904.986193][T14121] F2FS-fs (loop3): Found nat_bits in checkpoint [ 905.066883][ T28] audit: type=1400 audit(1760283957.068:673): avc: denied { map } for pid=14141 comm="syz.0.4362" path="socket:[62393]" dev="sockfs" ino=62393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 905.107643][ T28] audit: type=1400 audit(1760283957.098:674): avc: denied { read accept } for pid=14141 comm="syz.0.4362" path="socket:[62393]" dev="sockfs" ino=62393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 905.173836][T14121] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 905.180980][T14121] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 905.420621][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 905.875259][T14152] loop4: detected capacity change from 0 to 8192 [ 906.066006][T14155] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 906.732271][T14163] loop0: detected capacity change from 0 to 512 [ 906.789246][T14163] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4369: corrupted inode contents [ 906.791980][T14168] loop3: detected capacity change from 0 to 16 [ 906.809397][T14163] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4369: mark_inode_dirty error [ 906.818007][T14168] erofs: (device loop3): mounted with root inode @ nid 36. [ 906.849774][T14163] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4369: corrupted inode contents [ 906.890851][T14163] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4369: mark_inode_dirty error [ 906.904434][T14163] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4369: corrupted inode contents [ 906.917262][T14163] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 906.926422][T14163] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4369: corrupted inode contents [ 906.938923][T14163] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4369: mark_inode_dirty error [ 906.950591][T14163] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 906.960621][T14163] EXT4-fs (loop0): 1 truncate cleaned up [ 906.966677][T14163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 906.976123][T10157] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 906.986314][T10157] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:8: Failed to release dquot type 1 [ 907.037692][T14163] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.066037][T14178] loop4: detected capacity change from 0 to 512 [ 907.185285][T14178] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4373: corrupted inode contents [ 907.371251][T14178] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #16: comm syz.4.4373: mark_inode_dirty error [ 907.430714][T14178] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4373: corrupted inode contents [ 907.453580][T14178] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.4373: mark_inode_dirty error [ 907.725992][T14178] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4373: corrupted inode contents [ 907.744619][T14183] loop3: detected capacity change from 0 to 8192 [ 907.762164][T14178] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 907.771866][T14185] x_tables: unsorted underflow at hook 2 [ 907.795317][T14178] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.4373: corrupted inode contents [ 907.858539][T14178] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.4373: mark_inode_dirty error [ 907.943204][T14178] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 908.000188][T14178] EXT4-fs (loop4): 1 truncate cleaned up [ 908.022636][T14178] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 908.057146][T14178] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.072316][ T8] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 908.099069][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 908.248300][T14198] loop3: detected capacity change from 0 to 8192 [ 908.298631][T10046] EXT4-fs (loop0): unmounting filesystem. [ 908.404232][ T9670] EXT4-fs (loop4): unmounting filesystem. [ 910.446513][T14217] incfs: Options parsing error. -22 [ 910.459985][T14217] incfs: mount failed -22 [ 910.538291][T14220] loop3: detected capacity change from 0 to 8192 [ 911.903884][T14246] syz.1.4394[14246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 911.905007][T14246] syz.1.4394[14246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 913.736094][T14248] loop2: detected capacity change from 0 to 1024 [ 913.754821][T14248] EXT4-fs: Ignoring removed orlov option [ 913.760550][T14248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 914.769034][T14248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 914.971859][T10392] EXT4-fs (loop2): unmounting filesystem. [ 915.162417][T14268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4399'. [ 915.181055][T14267] loop2: detected capacity change from 0 to 8192 [ 915.544696][T14263] loop3: detected capacity change from 0 to 40427 [ 915.562440][T14263] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 915.572708][T14263] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 915.595770][T14263] F2FS-fs (loop3): invalid crc value [ 915.664224][T14263] F2FS-fs (loop3): Found nat_bits in checkpoint [ 915.717826][T14263] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 915.726520][T14263] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 916.581559][T14303] overlayfs: failed to clone upperpath [ 916.830578][T14302] x_tables: unsorted underflow at hook 2 [ 916.845231][T14305] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 916.876358][T14309] loop2: detected capacity change from 0 to 128 [ 916.912172][T14307] loop3: detected capacity change from 0 to 8192 [ 916.988198][T14314] loop3: detected capacity change from 0 to 512 [ 916.998807][T14314] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4418: casefold flag without casefold feature [ 917.012163][T14314] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4418: couldn't read orphan inode 15 (err -117) [ 917.025763][T14314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 918.057156][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 919.305985][T14325] incfs_lookup_dentry err:-5 [ 919.312755][T14325] incfs: Can't find or create .index dir in ./file0 [ 919.319649][T14325] incfs: mount failed -5 [ 919.819087][T14337] incfs: Options parsing error. -22 [ 919.829082][T14337] incfs: mount failed -22 [ 919.894944][T14341] loop2: detected capacity change from 0 to 8192 [ 920.065156][T14350] overlayfs: failed to clone upperpath [ 920.369153][T14351] binder: 14342:14351 ioctl c0306201 200000000540 returned -22 [ 920.760633][T14368] syz.4.4436[14368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 920.761082][T14368] syz.4.4436[14368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 920.799413][T14368] loop4: detected capacity change from 0 to 256 [ 920.842338][T14368] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 921.840094][T14381] loop3: detected capacity change from 0 to 512 [ 921.884079][T14381] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4441: corrupted inode contents [ 921.896943][T14381] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.4441: mark_inode_dirty error [ 921.919057][T14381] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4441: corrupted inode contents [ 921.949747][T14381] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.4441: mark_inode_dirty error [ 922.301656][T14393] loop0: detected capacity change from 0 to 1024 [ 922.308583][T14393] EXT4-fs: Ignoring removed orlov option [ 922.314389][T14393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 922.373751][T14381] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4441: corrupted inode contents [ 922.491869][T14393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 922.513960][T14393] incfs: Backing dir is not set, filesystem can't be mounted. [ 922.521633][T14393] incfs: mount failed -2 [ 922.549840][T14381] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 922.629239][T14381] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4441: corrupted inode contents [ 922.643417][T14381] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.4441: mark_inode_dirty error [ 922.673556][T14381] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 922.769510][T14381] EXT4-fs (loop3): 1 truncate cleaned up [ 922.779089][T14381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 922.825963][T14381] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 922.850353][T14403] loop2: detected capacity change from 0 to 512 [ 923.020984][T14403] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4446: corrupted inode contents [ 923.052797][T14403] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.4446: mark_inode_dirty error [ 923.092747][T14403] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4446: corrupted inode contents [ 923.124195][ T10] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 923.134806][T14403] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.4446: mark_inode_dirty error [ 923.139611][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:1: Failed to release dquot type 1 [ 923.158535][T14403] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4446: corrupted inode contents [ 923.172547][T14403] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 923.173805][T10046] EXT4-fs (loop0): unmounting filesystem. [ 923.187983][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 923.194723][T14403] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4446: corrupted inode contents [ 923.213090][T14403] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.4446: mark_inode_dirty error [ 923.242821][T14403] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 923.252800][T14403] EXT4-fs (loop2): 1 truncate cleaned up [ 923.258568][T14403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 923.272827][ T8] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 923.299381][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 923.339015][T14403] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.416595][T10392] EXT4-fs (loop2): unmounting filesystem. [ 924.487755][T14429] binder: 14423:14429 ioctl c0306201 200000000540 returned -22 [ 927.067593][T14468] loop2: detected capacity change from 0 to 512 [ 928.195031][T14468] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.4467: casefold flag without casefold feature [ 928.237462][T14468] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4467: couldn't read orphan inode 15 (err -117) [ 928.300407][T14468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 928.757155][T14488] loop0: detected capacity change from 0 to 256 [ 928.801584][T14488] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 928.902163][T14494] binder: 14490:14494 ioctl c0306201 200000000540 returned -14 [ 929.460305][T10392] EXT4-fs (loop2): unmounting filesystem. [ 930.968237][T14516] incfs: Options parsing error. -22 [ 930.996625][T14516] incfs: mount failed -22 [ 932.614649][T14529] random: crng reseeded on system resumption [ 932.742680][ T28] audit: type=1400 audit(1760283984.618:675): avc: denied { append } for pid=14524 comm="syz.3.4482" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 933.338393][T14535] loop2: detected capacity change from 0 to 512 [ 933.423338][T14535] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.4485: casefold flag without casefold feature [ 933.452707][T14535] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.4485: couldn't read orphan inode 15 (err -117) [ 933.495150][T14535] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 933.779232][T14545] overlayfs: failed to clone upperpath [ 935.029744][ T28] audit: type=1400 audit(1760283987.028:676): avc: denied { unlink } for pid=14534 comm="syz.2.4485" name="#214" dev="loop2" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 935.863248][T10392] EXT4-fs (loop2): unmounting filesystem. [ 935.908313][T14554] incfs_lookup_dentry err:-5 [ 935.913849][T14554] incfs: Can't find or create .index dir in ./file0 [ 935.920527][T14554] incfs: mount failed -5 [ 936.478666][T14566] loop3: detected capacity change from 0 to 8192 [ 937.013559][T14573] incfs: Options parsing error. -22 [ 937.025085][T14573] incfs: mount failed -22 [ 937.073388][T14578] loop2: detected capacity change from 0 to 512 [ 937.136643][T14582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4497'. [ 937.162915][T14578] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4499: corrupted inode contents [ 937.175217][T14578] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.4499: mark_inode_dirty error [ 937.186937][T14578] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4499: corrupted inode contents [ 937.199862][T14578] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.4499: mark_inode_dirty error [ 937.517988][T14578] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4499: corrupted inode contents [ 937.549594][T14578] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 937.549597][ T28] audit: type=1400 audit(1760283989.548:677): avc: denied { bind } for pid=14592 comm="syz.3.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 937.583165][T14578] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4499: corrupted inode contents [ 937.607682][T14599] binder: 14598:14599 ioctl c0306201 200000000640 returned -22 [ 937.615628][T14578] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.4499: mark_inode_dirty error [ 937.632719][T14578] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 937.658118][T14578] EXT4-fs (loop2): 1 truncate cleaned up [ 937.666853][T14578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 937.676062][ T351] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 937.695394][ T351] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 1 [ 937.711421][T14578] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 938.966719][T14612] incfs: Options parsing error. -22 [ 938.972042][T14612] incfs: mount failed -22 [ 940.196810][T10392] EXT4-fs (loop2): unmounting filesystem. [ 940.403895][T14625] binder: 14619:14625 ioctl c0306201 200000000540 returned -22 [ 940.723273][T14632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4514'. [ 941.675211][T14639] loop2: detected capacity change from 0 to 512 [ 941.727551][T14641] binder: 14640:14641 ioctl c0306201 200000000640 returned -22 [ 941.789341][T14639] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4515: corrupted inode contents [ 943.021804][T14639] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.4515: mark_inode_dirty error [ 943.172597][T14639] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4515: corrupted inode contents [ 943.836755][T14639] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.4515: mark_inode_dirty error [ 943.851070][T14639] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4515: corrupted inode contents [ 943.863487][T14639] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 943.872812][T14639] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.4515: corrupted inode contents [ 943.885007][T14639] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.4515: mark_inode_dirty error [ 943.937204][T14639] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 943.946792][T14639] EXT4-fs (loop2): 1 truncate cleaned up [ 943.952840][T14639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 943.961824][T14639] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.149988][T14668] loop0: detected capacity change from 0 to 512 [ 944.156711][T10157] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 944.168230][T14667] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 944.188381][T10157] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:8: Failed to release dquot type 1 [ 944.251454][T10392] EXT4-fs (loop2): unmounting filesystem. [ 944.265026][T14673] loop3: detected capacity change from 0 to 512 [ 944.283479][T14668] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4523: corrupted inode contents [ 944.311992][T14673] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4525: casefold flag without casefold feature [ 944.325613][T14668] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4523: mark_inode_dirty error [ 944.337988][T14673] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4525: couldn't read orphan inode 15 (err -117) [ 944.351009][T14668] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4523: corrupted inode contents [ 944.363449][T14673] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 944.373535][T14668] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4523: mark_inode_dirty error [ 944.420828][T14668] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4523: corrupted inode contents [ 944.433473][T14668] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 944.443188][T14668] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4523: corrupted inode contents [ 945.264120][T14668] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4523: mark_inode_dirty error [ 946.313557][T14668] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 946.517920][T14668] EXT4-fs (loop0): 1 truncate cleaned up [ 946.523850][T14668] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 946.564202][T14668] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.778097][ T5277] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 946.788265][ T5277] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 946.802697][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 949.039473][T14725] loop3: detected capacity change from 0 to 8192 [ 950.166028][T14735] overlayfs: failed to clone upperpath [ 950.254297][T14737] syz.2.4543[14737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.254714][T14737] syz.2.4543[14737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.292386][T14737] loop2: detected capacity change from 0 to 256 [ 951.383539][T14737] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 951.624412][T10046] EXT4-fs (loop0): unmounting filesystem. [ 951.676878][T14745] loop0: detected capacity change from 0 to 512 [ 951.737116][T14745] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4549: corrupted inode contents [ 951.761411][T14745] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4549: mark_inode_dirty error [ 951.776129][T14745] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4549: corrupted inode contents [ 951.790415][T14745] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4549: mark_inode_dirty error [ 951.804589][T14745] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4549: corrupted inode contents [ 951.817445][T14745] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 951.826645][T14745] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4549: corrupted inode contents [ 951.839998][T14745] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4549: mark_inode_dirty error [ 951.852011][T14745] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 951.873148][T14745] EXT4-fs (loop0): 1 truncate cleaned up [ 951.880028][T14745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 951.892037][T14745] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 951.905324][ T5277] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 951.916875][ T5277] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 952.229671][T10046] EXT4-fs (loop0): unmounting filesystem. [ 953.169179][T14770] loop3: detected capacity change from 0 to 512 [ 953.233638][T14770] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4557: corrupted inode contents [ 953.251984][T14770] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.4557: mark_inode_dirty error [ 953.264753][T14770] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4557: corrupted inode contents [ 953.277439][T14770] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.4557: mark_inode_dirty error [ 953.290241][T14770] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4557: corrupted inode contents [ 953.303012][T14770] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 953.311943][T14770] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4557: corrupted inode contents [ 953.324793][T14770] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.4557: mark_inode_dirty error [ 953.336429][T14770] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 953.346416][T14770] EXT4-fs (loop3): 1 truncate cleaned up [ 953.352280][T14770] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 953.362064][T14770] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.373051][T14683] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 953.391738][T14683] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:9: Failed to release dquot type 1 [ 954.216452][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 954.360025][T14797] syz.2.4563[14797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 954.360108][T14797] syz.2.4563[14797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 955.197912][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4566'. [ 956.642539][T14832] incfs_lookup_dentry err:-5 [ 956.647247][T14832] incfs: Can't find or create .index dir in ./file0 [ 956.672567][T14832] incfs: mount failed -5 [ 956.766918][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4580'. [ 956.891637][ T28] audit: type=1400 audit(1760284008.888:678): avc: denied { ioctl } for pid=14839 comm="syz.0.4582" path="socket:[64389]" dev="sockfs" ino=64389 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 957.000532][T14843] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 958.568900][T14891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4596'. [ 960.281603][T14904] overlayfs: failed to clone upperpath [ 960.327101][T14905] loop3: detected capacity change from 0 to 8192 [ 960.449310][T14912] loop3: detected capacity change from 0 to 4096 [ 960.542413][T14912] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 961.341059][T14918] overlayfs: failed to clone upperpath [ 961.362236][T14912] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 961.412581][ T28] audit: type=1326 audit(1760284013.408:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.490629][ T28] audit: type=1326 audit(1760284013.408:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.516471][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 961.527150][ T28] audit: type=1326 audit(1760284013.408:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.582900][ T28] audit: type=1326 audit(1760284013.408:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.597681][T14929] loop0: detected capacity change from 0 to 512 [ 961.667684][ T28] audit: type=1326 audit(1760284013.408:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.703415][T14929] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4613: corrupted inode contents [ 961.706319][ T28] audit: type=1326 audit(1760284013.408:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.740724][ T28] audit: type=1326 audit(1760284013.408:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.765737][ T28] audit: type=1326 audit(1760284013.408:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.790584][ T28] audit: type=1326 audit(1760284013.448:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.812851][T14929] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4613: mark_inode_dirty error [ 961.824458][ T28] audit: type=1326 audit(1760284013.448:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.2.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc610b8eec9 code=0x7ffc0000 [ 961.842825][T14929] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4613: corrupted inode contents [ 961.865373][T14929] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4613: mark_inode_dirty error [ 961.877332][T14929] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4613: corrupted inode contents [ 961.891992][T14929] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 961.902138][T14929] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4613: corrupted inode contents [ 961.914384][T14929] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4613: mark_inode_dirty error [ 961.926590][T14929] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 961.939812][T14929] EXT4-fs (loop0): 1 truncate cleaned up [ 961.947027][T14929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 961.959367][T14929] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.182271][T14683] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:9: Failed to release dquot type 1 [ 962.485544][T10046] EXT4-fs (loop0): unmounting filesystem. [ 964.438844][T14975] loop0: detected capacity change from 0 to 512 [ 964.525783][T14976] loop3: detected capacity change from 0 to 8192 [ 964.544441][T14975] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4628: corrupted inode contents [ 964.587533][T14984] incfs: Options parsing error. -22 [ 964.598758][T14984] incfs: mount failed -22 [ 964.632449][T14975] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4628: mark_inode_dirty error [ 964.673621][T14975] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4628: corrupted inode contents [ 964.696760][T14975] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4628: mark_inode_dirty error [ 964.770111][T14975] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4628: corrupted inode contents [ 964.785677][T14975] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 964.796158][T14975] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4628: corrupted inode contents [ 964.809133][T14975] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4628: mark_inode_dirty error [ 965.643588][T14975] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 965.677847][T14975] EXT4-fs (loop0): 1 truncate cleaned up [ 965.687697][T14975] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 965.700744][T14975] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.702257][T14683] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:9: Failed to release dquot type 1 [ 966.825377][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 966.825394][ T28] audit: type=1326 audit(1760284018.828:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 966.877056][T15024] incfs: Options parsing error. -22 [ 966.882336][T15024] incfs: mount failed -22 [ 966.927880][ T28] audit: type=1326 audit(1760284018.868:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 966.992772][T10046] EXT4-fs (loop0): unmounting filesystem. [ 966.998866][ T28] audit: type=1326 audit(1760284018.868:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 967.004869][T15027] incfs_lookup_dentry err:-5 [ 967.024017][ T28] audit: type=1326 audit(1760284018.868:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 967.359807][T15027] incfs: Can't find or create .index dir in ./file0 [ 967.413902][T15027] incfs: mount failed -5 [ 967.451131][ T28] audit: type=1326 audit(1760284018.868:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 967.571063][ T28] audit: type=1326 audit(1760284018.868:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 968.152389][ T28] audit: type=1326 audit(1760284018.868:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 968.247951][ T28] audit: type=1326 audit(1760284018.868:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 968.324610][ T28] audit: type=1326 audit(1760284018.878:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 968.407740][ T28] audit: type=1326 audit(1760284018.878:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15021 comm="syz.1.4646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86838eec9 code=0x7ffc0000 [ 969.186805][T15058] incfs: Options parsing error. -22 [ 969.192410][T15058] incfs: mount failed -22 [ 969.386581][T15070] loop3: detected capacity change from 0 to 128 [ 971.712278][T15094] incfs: Options parsing error. -22 [ 971.717896][T15094] incfs: mount failed -22 [ 972.066208][T15106] loop0: detected capacity change from 0 to 512 [ 973.075367][T15114] loop3: detected capacity change from 0 to 4096 [ 973.084624][T15118] syz.1.4675[15118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 973.085350][T15118] syz.1.4675[15118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 973.193391][T15106] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4676: corrupted inode contents [ 973.482562][T15106] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4676: mark_inode_dirty error [ 973.495653][T15106] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4676: corrupted inode contents [ 973.507922][T15106] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4676: mark_inode_dirty error [ 973.521363][T15106] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4676: corrupted inode contents [ 973.533885][T15106] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 973.543182][T15106] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4676: corrupted inode contents [ 973.555805][T15106] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4676: mark_inode_dirty error [ 973.567407][T15106] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 973.577034][T15106] EXT4-fs (loop0): 1 truncate cleaned up [ 973.583745][T15106] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 973.595794][T15106] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 973.827580][ T5277] __quota_error: 26 callbacks suppressed [ 973.827602][ T5277] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 973.866870][ T5277] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 973.940801][T10046] EXT4-fs (loop0): unmounting filesystem. [ 975.822854][T15155] syz.1.4690[15155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.822942][T15155] syz.1.4690[15155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 977.591131][T15157] loop3: detected capacity change from 0 to 8192 [ 979.032644][T15167] loop0: detected capacity change from 0 to 512 [ 979.594993][T15167] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4693: corrupted inode contents [ 979.622840][T15172] loop3: detected capacity change from 0 to 8192 [ 979.629242][T15167] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4693: mark_inode_dirty error [ 979.630472][ T28] audit: type=1400 audit(1760284031.628:767): avc: denied { accept } for pid=15177 comm="syz.1.4698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 979.660998][T15167] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4693: corrupted inode contents [ 979.678231][T15167] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4693: mark_inode_dirty error [ 979.690396][T15167] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4693: corrupted inode contents [ 979.702964][T15167] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 979.731286][T15167] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4693: corrupted inode contents [ 979.750369][T15167] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4693: mark_inode_dirty error [ 979.762031][T15167] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 979.771730][T15167] EXT4-fs (loop0): 1 truncate cleaned up [ 979.778510][T15167] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 979.788371][ T502] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 979.798928][T15167] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.802571][ T502] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 982.228345][T10046] EXT4-fs (loop0): unmounting filesystem. [ 984.213316][T15239] loop3: detected capacity change from 0 to 8192 [ 985.924603][T15267] overlayfs: failed to clone upperpath [ 986.060962][T15270] binder: 15263:15270 ioctl c0306201 200000000540 returned -14 [ 987.263889][T15275] loop3: detected capacity change from 0 to 8192 [ 987.932531][ T335] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 988.219918][T15299] overlayfs: failed to clone upperpath [ 989.212499][ T335] usb 1-1: Using ep0 maxpacket: 32 [ 989.218744][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.228967][T15319] loop3: detected capacity change from 0 to 128 [ 989.239876][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.270255][ T335] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 989.279577][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.328588][ T335] usb 1-1: config 0 descriptor?? [ 989.336415][ T335] hub 1-1:0.0: USB hub found [ 990.740122][ T335] hub 1-1:0.0: 1 port detected [ 990.876204][ T335] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 990.882908][ T335] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 990.885621][T15337] loop3: detected capacity change from 0 to 512 [ 990.893204][ T335] usbhid 1-1:0.0: can't add hid device: -71 [ 990.903363][ T335] usbhid: probe of 1-1:0.0 failed with error -71 [ 990.925479][T15337] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4753: corrupted inode contents [ 990.933230][ T335] usb 1-1: USB disconnect, device number 25 [ 990.938072][T15337] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #16: comm syz.3.4753: mark_inode_dirty error [ 990.956380][T15337] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4753: corrupted inode contents [ 990.968711][T15337] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.4753: mark_inode_dirty error [ 990.981080][T15337] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4753: corrupted inode contents [ 990.993564][T15337] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 991.002550][T15337] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #16: comm syz.3.4753: corrupted inode contents [ 991.014848][T15337] EXT4-fs error (device loop3): ext4_truncate:4314: inode #16: comm syz.3.4753: mark_inode_dirty error [ 991.026930][T15337] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 991.036549][T15337] EXT4-fs (loop3): 1 truncate cleaned up [ 991.042280][T15337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 991.051464][T15337] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 991.062156][T15148] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 991.072081][T15148] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:10: Failed to release dquot type 1 [ 992.628257][T15361] loop0: detected capacity change from 0 to 4096 [ 994.326111][T15379] loop0: detected capacity change from 0 to 512 [ 994.465313][T15383] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 994.474925][T15383] F2FS-fs (loop5): Unable to read 1th superblock [ 994.482312][T15383] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 994.491852][T15383] F2FS-fs (loop5): Unable to read 2th superblock [ 995.437037][ T28] audit: type=1400 audit(1760284046.428:768): avc: denied { add_name } for pid=15373 comm="syz.2.4766" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 995.662122][ T28] audit: type=1400 audit(1760284046.438:769): avc: denied { create } for pid=15373 comm="syz.2.4766" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 995.686659][ T28] audit: type=1400 audit(1760284046.438:770): avc: denied { associate } for pid=15373 comm="syz.2.4766" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 995.709562][T15379] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4767: casefold flag without casefold feature [ 995.739579][T15379] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4767: couldn't read orphan inode 15 (err -117) [ 995.765682][ T28] audit: type=1400 audit(1760284046.448:771): avc: denied { mounton } for pid=15373 comm="syz.2.4766" path="/318" dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 995.866637][ T28] audit: type=1400 audit(1760284047.478:772): avc: denied { unlink } for pid=10392 comm="syz-executor" name="file0" dev="tmpfs" ino=1852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 995.893217][T15379] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 995.904294][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 996.771320][ T28] audit: type=1400 audit(1760284047.728:773): avc: denied { name_bind } for pid=15388 comm="syz.4.4770" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 998.077603][T10046] EXT4-fs (loop0): unmounting filesystem. [ 998.398935][T15419] loop0: detected capacity change from 0 to 8192 [ 999.297944][T15417] loop3: detected capacity change from 0 to 40427 [ 999.312569][T15417] F2FS-fs (loop3): fault_type options not supported [ 999.319324][T15417] F2FS-fs (loop3): fault_injection options not supported [ 999.353078][T15417] F2FS-fs (loop3): Image doesn't support compression [ 999.370014][T15417] F2FS-fs (loop3): invalid crc value [ 999.393093][T15417] F2FS-fs (loop3): Found nat_bits in checkpoint [ 999.439705][T15417] F2FS-fs (loop3): Start checkpoint disabled! [ 999.447806][T15417] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 999.553718][T15434] loop0: detected capacity change from 0 to 8192 [ 999.977335][T15438] syz.2.4784[15438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.978781][T15438] syz.2.4784[15438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1002.660103][T15449] process 'syz.3.4786' launched './file0' with NULL argv: empty string added [ 1003.205367][T15450] loop0: detected capacity change from 0 to 512 [ 1003.277978][T15450] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4788: casefold flag without casefold feature [ 1003.307671][T15450] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4788: couldn't read orphan inode 15 (err -117) [ 1003.340173][T15450] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1003.528542][T15464] loop3: detected capacity change from 0 to 8192 [ 1004.023215][T10046] EXT4-fs (loop0): unmounting filesystem. [ 1005.477806][T15476] syz.2.4796[15476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1005.478155][T15476] syz.2.4796[15476] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1006.478181][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1007.218816][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1007.242313][ T24] usb 1-1: config 0 has no interface number 0 [ 1007.273471][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.286524][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.302744][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1007.314991][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.328625][T15511] loop3: detected capacity change from 0 to 256 [ 1007.329746][ T24] usb 1-1: config 0 descriptor?? [ 1007.344599][T15511] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1007.360116][T15511] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1007.420310][T15511] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1007.519279][ T28] audit: type=1400 audit(1760284059.518:774): avc: denied { ioctl } for pid=15510 comm="syz.3.4810" path="/341/file0/file1" dev="loop3" ino=1048769 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1008.176818][T15524] syz.2.4813[15524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.176900][T15524] syz.2.4813[15524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.515065][ T24] uclogic 0003:256C:006D.003D: item fetching failed at offset 0/5 [ 1009.184200][ T24] uclogic 0003:256C:006D.003D: parse failed [ 1009.190477][ T24] uclogic: probe of 0003:256C:006D.003D failed with error -22 [ 1009.200482][ T24] usb 1-1: USB disconnect, device number 26 [ 1009.851395][T15575] loop3: detected capacity change from 0 to 128 [ 1011.934258][T15620] loop0: detected capacity change from 0 to 512 [ 1011.964316][T15620] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4849: corrupted inode contents [ 1011.982190][T15620] EXT4-fs error (device loop0): ext4_dirty_inode:6121: inode #16: comm syz.0.4849: mark_inode_dirty error [ 1011.994049][T15620] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4849: corrupted inode contents [ 1012.006322][T15620] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.4849: mark_inode_dirty error [ 1012.019842][T15620] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4849: corrupted inode contents [ 1012.032229][T15620] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1012.041867][T15620] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.4849: corrupted inode contents [ 1012.054317][T15620] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.4849: mark_inode_dirty error [ 1012.066161][T15620] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1012.075637][T15620] EXT4-fs (loop0): 1 truncate cleaned up [ 1012.081472][T15620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1012.090588][T15620] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.102554][T10016] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1012.119530][T10016] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:3: Failed to release dquot type 1 [ 1012.312080][T15637] loop3: detected capacity change from 0 to 8192 [ 1012.360788][T15633] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4852'. [ 1013.570471][T10046] EXT4-fs (loop0): unmounting filesystem. [ 1013.595048][T15674] loop0: detected capacity change from 0 to 1024 [ 1013.608018][T15676] bridge: RTM_NEWNEIGH with invalid ether address [ 1013.621266][T15674] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1013.630517][T15674] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.665537][ T28] audit: type=1400 audit(1760284065.668:775): avc: denied { bind } for pid=15682 comm="syz.3.4871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1013.686165][ T28] audit: type=1400 audit(1760284065.668:776): avc: denied { name_bind } for pid=15682 comm="syz.3.4871" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1013.708241][ T28] audit: type=1400 audit(1760284065.668:777): avc: denied { node_bind } for pid=15682 comm="syz.3.4871" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1015.035987][T15717] loop3: detected capacity change from 0 to 512 [ 1015.083634][T15717] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.4883: casefold flag without casefold feature [ 1015.121268][T15717] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.4883: couldn't read orphan inode 15 (err -117) [ 1015.146774][T15717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1015.907609][ T9960] EXT4-fs (loop3): unmounting filesystem. [ 1016.054292][T15731] loop3: detected capacity change from 0 to 8192 [ 1016.475306][T15743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4891'. [ 1016.926264][T15759] binder: 15758:15759 ioctl c0306201 200000000540 returned -14 [ 1017.452524][ T6] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1017.654753][ T6] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1017.673431][ T6] usb 4-1: config 0 has no interface number 0 [ 1017.706364][ T6] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.754954][ T6] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.789223][ T6] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1017.834177][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.884602][ T6] usb 4-1: config 0 descriptor?? [ 1018.334216][ T6] uclogic 0003:256C:006D.003E: item fetching failed at offset 0/5 [ 1018.348950][ T6] uclogic 0003:256C:006D.003E: parse failed [ 1018.365969][ T6] uclogic: probe of 0003:256C:006D.003E failed with error -22 [ 1018.561549][ T6] usb 4-1: USB disconnect, device number 35 [ 1018.672604][T15677] ------------[ cut here ]------------ [ 1018.678121][T15677] kernel BUG at fs/buffer.c:2714! [ 1018.689675][T15677] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1018.695794][T15677] CPU: 0 PID: 15677 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 1018.703372][T15677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1018.713445][T15677] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 1018.718869][T15677] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 2f e8 ff e9 b0 fe ff ff e8 7e c1 a3 ff 0f 0b e8 77 c1 a3 ff <0f> 0b e8 70 c1 a3 ff 0f 0b e8 69 c1 a3 ff 0f 0b e8 62 c1 a3 ff 0f [ 1018.738600][T15677] RSP: 0018:ffffc900011b7ca0 EFLAGS: 00010293 [ 1018.744693][T15677] RAX: ffffffff81cc5c89 RBX: 0000000000000000 RCX: ffff888112336540 [ 1018.752771][T15677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1018.760766][T15677] RBP: ffffc900011b7cf0 R08: dffffc0000000000 R09: ffffed102653ff66 [ 1018.768766][T15677] R10: ffffed102653ff66 R11: 1ffff1102653ff65 R12: 0000000000000000 [ 1018.776853][T15677] R13: 1ffff1102653ff65 R14: ffff8881329ffb28 R15: 0000000000003801 [ 1018.784856][T15677] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1018.793923][T15677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1018.800630][T15677] CR2: 0000000000000000 CR3: 000000011438f000 CR4: 00000000003506b0 [ 1018.814350][T15677] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1018.822343][T15677] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1018.830327][T15677] Call Trace: [ 1018.833617][T15677] [ 1018.836558][T15677] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1018.842383][T15677] submit_bh+0x1f/0x30 [ 1018.846468][T15677] write_mmp_block_thawed+0x34a/0x4c0 [ 1018.851843][T15677] ? read_mmp_block+0x6d0/0x6d0 [ 1018.856695][T15677] ? __cfi_process_timeout+0x10/0x10 [ 1018.862005][T15677] write_mmp_block+0x138/0x2b0 [ 1018.866773][T15677] kmmpd+0x3ce/0x950 [ 1018.870691][T15677] kthread+0x281/0x320 [ 1018.874902][T15677] ? __cfi_kmmpd+0x10/0x10 [ 1018.879349][T15677] ? __cfi_kthread+0x10/0x10 [ 1018.884386][T15677] ret_from_fork+0x1f/0x30 [ 1018.888847][T15677] [ 1018.891887][T15677] Modules linked in: [ 1019.125518][T15677] ---[ end trace 0000000000000000 ]--- [ 1019.136276][T15677] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 1019.147855][T15677] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 48 2f e8 ff e9 b0 fe ff ff e8 7e c1 a3 ff 0f 0b e8 77 c1 a3 ff <0f> 0b e8 70 c1 a3 ff 0f 0b e8 69 c1 a3 ff 0f 0b e8 62 c1 a3 ff 0f [ 1019.188038][T15677] RSP: 0018:ffffc900011b7ca0 EFLAGS: 00010293 [ 1019.200331][T15677] RAX: ffffffff81cc5c89 RBX: 0000000000000000 RCX: ffff888112336540 [ 1019.214507][T15677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1019.228638][T15677] RBP: ffffc900011b7cf0 R08: dffffc0000000000 R09: ffffed102653ff66 [ 1019.237020][T15677] R10: ffffed102653ff66 R11: 1ffff1102653ff65 R12: 0000000000000000 [ 1019.245339][T15677] R13: 1ffff1102653ff65 R14: ffff8881329ffb28 R15: 0000000000003801 [ 1019.253960][T15677] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1019.263479][T15677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1019.270133][T15677] CR2: 0000001b32b1dff8 CR3: 0000000110032000 CR4: 00000000003506b0 [ 1019.278823][T15677] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1019.302486][T15677] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1019.310518][T15677] Kernel panic - not syncing: Fatal exception [ 1019.316952][T15677] Kernel Offset: disabled [ 1019.321304][T15677] Rebooting in 86400 seconds..