last executing test programs: 13.530881118s ago: executing program 1 (id=1003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xceb3) 11.145912222s ago: executing program 1 (id=1008): syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x48010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0x3df1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 10.120036386s ago: executing program 0 (id=1010): syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x48010) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x500, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0xb, 0x181000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x1, [[0x9ef8, 0x0, 0x0, 0x7, 0x0, 0x101], [0x207, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe], [0x7, 0xfffffffd, 0x0, 0x80]], '\x00', [{0x0, 0x1}, {0xd788, 0xfffffffd}, {0x0, 0xffffffff}, {0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x1}, {0x0, 0x8}, {0x4000000, 0x8}, {}, {0xfffffffe}, {0xffffffff}, {0x12}], '\x00', 0x1000}) 8.254165578s ago: executing program 1 (id=1011): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x20, 0x114}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_open_procfs(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x20, r8, 0x1, 0x70bd2c, 0x2, {0x18}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x20048004) 8.145842797s ago: executing program 3 (id=1012): r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x2, 0x0) r1 = eventfd(0x4) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) pwrite64(r3, &(0x7f00000002c0)="e6", 0x1, 0x2) fcntl$addseals(r3, 0x409, 0x6) close(0x3) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000000c0)={0x10000, 0x1, [{r3, 0x0, 0x0, 0x1000}]}) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 7.779051827s ago: executing program 3 (id=1014): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x48) open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.847368874s ago: executing program 1 (id=1016): socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.632841031s ago: executing program 3 (id=1017): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x7, 0x1}, 0x38) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xa0, &(0x7f0000001a80)=""/160, 0x41000, 0x8}, 0x94) 5.358040884s ago: executing program 3 (id=1018): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000180)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@user_xattr}]}, 0xfd, 0x573, &(0x7f0000000ec0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, 0x0) ioctl$sock_bt_hci(r5, 0x400448e7, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x10020500) 5.325940186s ago: executing program 0 (id=1019): syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x3df1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.032435502s ago: executing program 0 (id=1020): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20}, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) read$FUSE(r0, &(0x7f0000002fc0)={0x2020}, 0x2020) 3.739036945s ago: executing program 0 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB='\x00'/11], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r5}, 0x38) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000206010100000000000000000a00000005000400020000000900020073798c3000000000000000000300000005000100060000000d000300686173683a6e657400000000"], 0x48}}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) 3.67781091s ago: executing program 1 (id=1022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000065895340f010022067d7010203010902240001fc00000009046b00020a00000009056b10000000000109058a"], 0x0) 3.422933471s ago: executing program 2 (id=1024): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x20, 0x114}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_open_procfs(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x20, r8, 0x1, 0x70bd2c, 0x2, {0x18}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x20048004) 2.360755148s ago: executing program 2 (id=1025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1010410, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@noquota}]}, 0x0, 0x76a, &(0x7f0000000fc0)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@nodecompose}, {}, {@umask={'umask', 0x3d, 0x3}}, {@uid}, {@nobarrier}, {@type={'type', 0x3d, "05f2875e"}}, {@type={'type', 0x3d, "21f205c1"}}]}, 0x3, 0x637, &(0x7f0000001480)="$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") ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.71970774s ago: executing program 2 (id=1026): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x48) open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) creat(0x0, 0x0) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.683256773s ago: executing program 3 (id=1027): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x7, 0x1}, 0x38) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000580000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xa0, &(0x7f0000001a80)=""/160, 0x41000, 0x8}, 0x94) 1.536049974s ago: executing program 0 (id=1028): syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x3df1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.47440895s ago: executing program 2 (id=1029): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20}, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) read$FUSE(r0, &(0x7f0000002fc0)={0x2020}, 0x2020) 1.46813728s ago: executing program 3 (id=1030): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000540)=@sr0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x1, 0x0) readv(r4, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/103, 0x67}, {0x0}], 0x2) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 1.303081594s ago: executing program 2 (id=1031): socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$eJzs3ctrXNcZAPDvjl6W7FYqFFp3JSi0AuNR5ap2C124dFEKNRjadW0xGgtXI43RjIwlBLYpgWwCScgikGy8zsPZZZvHNvkvsgg2TiKLKGQRJtzRHWlkzciSo5kR6PeDq3vOfeicb859nJlzmQngxBpP/+QizkbEq0nEaLY8iYiBeqo/4vLWdpvra4V0SqJW+/fXSX2bjfW1QjTtkzqdZX4dEZ+8FHEuly44tavcysrq/EypVFzK8pPVhVuTlZXV8zcXZuaKc8XFi1PT0xcu/enSxaOL9dvPV888fu0fv3//8vf//9XDVz5N4nKcydY1x3FUxmM8e00G0pdwl78fdWE9lvS6AryQ9NTs2zrL42yMRl891cZwN2sGAHTK3YioAQAnTOL+DwAnTONzgI31tUJj6u0nEt315G9bQ5Mb2djm5nb8/dmY3an6OOjIRrJrZCSJiLEjKH88It7+8L/vplN0aBwSoJV79yPi+tj43ut/sueZhcP6w34ra0P12fgzi13/oHs+Svs/f27V/8tt93+iRf9nqMW5+yKef/7nHh1BMW2l/b+/Nj3bttkUf2asL8v9rN7nG0hu3CwV02vbzyNiIgaG0vxUfdPWT0FNPP3habvym/t/37z+v3fS8tP5zha5R/1Du/eZnanO/NS4G57cj/hNf6v4k+32T9r0f68esIx//uXlt9qtS+NP421Me+PvrNqDiN+1bP+dtkz2fT5xsn44TDYOihY++OLNkXbl77T/UH2elt94L9ANafuP7B//WNL8vGbl8GV89mD043brmo//1vG3Pv4Hk//U04PZsjsz1erSVMRg8q+9yy/s7NvIN7ZP45/4bevzv93xn8uejb2+ndtf/+Ov3sv+Vcv46+61i7+z0vhnD9X++yRq2T7PrHq4Od/XrvyDtf90PTWRLTnI9e85NW0knt94AAAAAAAAAAAAAAAAAAAAAAAAAHAEchFxJpJcfjudy+XzW7/h/csYyZXKleq5G+Xlxdmo/1b2WAzkGl91Odr0fahT2ffhN/IXnsn/MSJ+ERFvDA3X8/lCuTTb6+ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHN69+//301n+fzWui+Hel07AKBjTvW6AgBA17n/A8DJc7j7/3DH6gEAdM+h3//Xks5UBADomgPf/693th4AQPcY/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDrl65kk6179bXCml+9vbK8nz59vnZYmU+v7BcyBfKS7fyc+XyXKmYL5QX2v6je1uzUrl8azoWl+9MVouV6mRlZfXaQnl5sXrt5sLMXPFacaBrkQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwVVWVudnSqXiksS+ieHjUY1jk+iPY1GNI0vU+rbOh+NRn/5oLBnsWTWarxLDPbo6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABx/PwYAAP//eUchiw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 313.585194ms ago: executing program 1 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0012060, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x22) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='contention_end\x00'}, 0x18) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000940)={0x1, 0x2, 0x8aa5, 0x1, 0x3}) 176.346725ms ago: executing program 0 (id=1033): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0xa2) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x37d, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000280)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x6, &(0x7f0000000e40)) connect$inet(0xffffffffffffffff, 0x0, 0xfffffca4) sendfile(r2, r2, 0x0, 0xe0000000) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 0s ago: executing program 2 (id=1034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc8140, 0x8) pwritev2(r0, 0x0, 0x0, 0x6e45, 0x2, 0x0) fstat(r0, &(0x7f0000003ac0)) fcntl$setown(r0, 0x8, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): FAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 134.648010][ T6310] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 134.692149][ T28] audit: type=1800 audit(1754644887.996:5): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.128" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 134.805252][ T28] audit: type=1800 audit(1754644888.086:6): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.127" name="file1" dev="loop3" ino=1048606 res=0 errno=0 [ 135.432437][ T6328] loop3: detected capacity change from 0 to 512 [ 135.510557][ T6328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.523484][ T6328] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.717688][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.823444][ T6351] loop0: detected capacity change from 0 to 512 [ 136.914203][ T6351] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 137.026469][ T6351] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.141: iget: bad i_size value: 12154757448730 [ 137.081831][ T6351] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.141: couldn't read orphan inode 13 (err -117) [ 137.115858][ T6351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.274167][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.570120][ T6361] loop0: detected capacity change from 0 to 256 [ 137.661714][ T6361] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 137.681897][ T6361] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 137.931685][ T28] audit: type=1800 audit(1754644891.196:7): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.143" name="file1" dev="loop0" ino=1048616 res=0 errno=0 [ 137.953414][ T6364] loop3: detected capacity change from 0 to 512 [ 138.035955][ T6364] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 138.206611][ T6364] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.144: iget: bad i_size value: 360287970189639680 [ 138.269215][ T6364] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.144: couldn't read orphan inode 15 (err -117) [ 138.311473][ T6364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.460228][ T6364] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 13: comm syz.3.144: path /30/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 138.841638][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.929103][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.060187][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 139.104860][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.184111][ T787] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 139.257660][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.334887][ T787] usb 1-1: Product: syz [ 139.340621][ T6376] loop1: detected capacity change from 0 to 128 [ 139.370540][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.147'. [ 139.412366][ T787] usb 1-1: Manufacturer: syz [ 139.423237][ T787] usb 1-1: SerialNumber: syz [ 139.450698][ T787] usb 1-1: config 0 descriptor?? [ 139.478097][ T787] hub 1-1:0.0: bad descriptor, ignoring hub [ 139.515065][ T787] hub: probe of 1-1:0.0 failed with error -5 [ 139.544395][ T787] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 142.163553][ T6391] loop1: detected capacity change from 0 to 32768 [ 142.197397][ T6391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.152 (6391) [ 142.397756][ T6391] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.421777][ T6391] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 142.460969][ T6391] BTRFS info (device loop1): enabling disk space caching [ 142.489486][ T6391] BTRFS info (device loop1): doing ref verification [ 142.520867][ T6391] BTRFS info (device loop1): use zlib compression, level 3 [ 142.557405][ T6391] BTRFS info (device loop1): force clearing of disk cache [ 142.593160][ T6391] BTRFS info (device loop1): setting nodatacow, compression disabled [ 142.621688][ T6391] BTRFS info (device loop1): doing ref verification [ 142.628542][ T6391] BTRFS info (device loop1): disk space caching is enabled [ 143.052556][ T5797] usb 1-1: USB disconnect, device number 3 [ 143.769365][ T6391] BTRFS info (device loop1): enabling ssd optimizations [ 143.778724][ T6391] BTRFS info (device loop1): auto enabling async discard [ 143.808687][ T6391] BTRFS info (device loop1): rebuilding free space tree [ 144.918418][ T6391] BTRFS info (device loop1): disabling free space tree [ 144.937415][ T6391] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.950664][ T6391] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 145.007697][ T6429] loop0: detected capacity change from 0 to 512 [ 145.085563][ T6429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.175605][ T5786] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.188432][ T6429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.202650][ T6429] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.114753][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.506388][ T5797] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.535164][ T6446] loop1: detected capacity change from 0 to 256 [ 146.660302][ T6446] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 146.703145][ T6446] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 146.786796][ T5797] usb 4-1: Using ep0 maxpacket: 16 [ 146.897604][ T28] audit: type=1800 audit(1754644900.186:8): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.160" name="file1" dev="loop1" ino=1048626 res=0 errno=0 [ 146.951708][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.987751][ T5797] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.081899][ T5797] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 147.098997][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.140497][ T5797] usb 4-1: Product: syz [ 147.178504][ T5797] usb 4-1: Manufacturer: syz [ 147.204725][ T5797] usb 4-1: SerialNumber: syz [ 147.236037][ T5797] usb 4-1: config 0 descriptor?? [ 150.408491][ T6463] Illegal XDP return value 4294967274 on prog (id 22) dev syz_tun, expect packet loss! [ 150.499403][ T5791] usb 4-1: USB disconnect, device number 4 [ 150.703803][ T6466] loop3: detected capacity change from 0 to 1024 [ 150.764192][ T6466] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 150.806211][ T6466] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 150.871697][ T6466] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 150.921910][ T6466] EXT4-fs error (device loop3): ext4_get_journal_inode:5805: inode #5: comm syz.3.167: unexpected bad inode w/o EXT4_IGET_BAD [ 150.963930][ T6466] EXT4-fs (loop3): no journal found [ 150.969305][ T6466] EXT4-fs (loop3): can't get journal size [ 151.021242][ T6466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.379484][ T6467] loop0: detected capacity change from 0 to 32768 [ 151.417102][ T6467] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.168 (6467) [ 151.460362][ T6467] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.525906][ T6467] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 151.541430][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.562208][ T6467] BTRFS info (device loop0): enabling disk space caching [ 151.569439][ T6467] BTRFS info (device loop0): doing ref verification [ 151.601582][ T6467] BTRFS info (device loop0): use zlib compression, level 3 [ 151.608967][ T6467] BTRFS info (device loop0): force clearing of disk cache [ 151.662681][ T6467] BTRFS info (device loop0): setting nodatacow, compression disabled [ 151.670995][ T6467] BTRFS info (device loop0): doing ref verification [ 151.691718][ T6467] BTRFS info (device loop0): disk space caching is enabled [ 151.839301][ T6467] BTRFS info (device loop0): enabling ssd optimizations [ 151.868318][ T6467] BTRFS info (device loop0): auto enabling async discard [ 151.918873][ T6467] BTRFS info (device loop0): rebuilding free space tree [ 151.988534][ T6467] BTRFS info (device loop0): disabling free space tree [ 152.010177][ T6467] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 152.046362][ T6467] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.264750][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 152.278383][ T28] audit: type=1800 audit(1754644905.556:9): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.168" name="file1" dev="loop0" ino=263 res=0 errno=0 [ 152.362646][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 152.834157][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.257767][ T6506] loop3: detected capacity change from 0 to 1024 [ 153.325021][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.431685][ T5797] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 153.626671][ T5797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 153.666349][ T5797] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 153.696289][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.729830][ T5797] usb 2-1: config 0 descriptor?? [ 153.743097][ T6504] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.914527][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.216942][ T5797] usbhid 2-1:0.0: can't add hid device: -71 [ 154.223966][ T5797] usbhid: probe of 2-1:0.0 failed with error -71 [ 154.542543][ T55] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.209602][ T5797] usb 2-1: USB disconnect, device number 5 [ 156.611676][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 156.660802][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.700987][ T55] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.152841][ T55] usb 1-1: string descriptor 0 read error: -71 [ 158.193586][ T55] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 158.225686][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.267062][ T55] usb 1-1: config 0 descriptor?? [ 158.292167][ T55] usb 1-1: can't set config #0, error -71 [ 158.331783][ T55] usb 1-1: USB disconnect, device number 4 [ 158.574927][ T6533] loop1: detected capacity change from 0 to 32768 [ 158.587065][ T6533] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.181 (6533) [ 158.631175][ T6533] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.655307][ T6533] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 158.681901][ T6533] BTRFS info (device loop1): enabling disk space caching [ 158.699685][ T6533] BTRFS info (device loop1): doing ref verification [ 158.715095][ T6533] BTRFS info (device loop1): use zlib compression, level 3 [ 158.736112][ T6533] BTRFS info (device loop1): force clearing of disk cache [ 158.760745][ T6533] BTRFS info (device loop1): setting nodatacow, compression disabled [ 158.779669][ T6533] BTRFS info (device loop1): doing ref verification [ 158.795745][ T6533] BTRFS info (device loop1): disk space caching is enabled [ 158.881824][ T6533] BTRFS info (device loop1): enabling ssd optimizations [ 158.911674][ T6533] BTRFS info (device loop1): auto enabling async discard [ 158.959218][ T6533] BTRFS info (device loop1): rebuilding free space tree [ 159.035833][ T6533] BTRFS info (device loop1): disabling free space tree [ 159.051720][ T6533] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.076861][ T6533] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.181634][ T28] audit: type=1800 audit(1754644912.476:10): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.181" name="file1" dev="loop1" ino=263 res=0 errno=0 [ 159.761994][ T5786] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.821980][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.182'. [ 160.007822][ T6569] loop0: detected capacity change from 0 to 2048 [ 160.110347][ T6569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.660968][ T6580] loop1: detected capacity change from 0 to 256 [ 161.705595][ T28] audit: type=1326 audit(1754644915.006:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ee78ebe9 code=0x0 [ 162.525245][ T6592] loop3: detected capacity change from 0 to 128 [ 162.788145][ T6593] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 163.000910][ T6600] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 163.036342][ T6593] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 163.810163][ T6600] FAT-fs (loop3): Filesystem has been set read-only [ 163.824255][ T6593] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 163.908981][ T28] audit: type=1800 audit(1754644917.206:12): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.188" name="file1" dev="loop1" ino=1048634 res=0 errno=0 [ 163.976449][ T6593] syz.1.188 (6593) used greatest stack depth: 20592 bytes left [ 164.101788][ T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.313413][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 164.340594][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.420389][ T6611] loop1: detected capacity change from 0 to 256 [ 164.427065][ T787] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 164.509691][ T6611] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 164.562324][ T6611] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 164.605681][ T787] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 164.654672][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.677519][ T787] usb 1-1: Product: syz [ 164.704917][ T787] usb 1-1: Manufacturer: syz [ 164.714955][ T787] usb 1-1: SerialNumber: syz [ 164.727285][ T6613] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 164.754915][ T787] usb 1-1: config 0 descriptor?? [ 164.886473][ T28] audit: type=1800 audit(1754644918.186:13): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.195" name="file1" dev="loop1" ino=1048639 res=0 errno=0 [ 165.015372][ T6616] loop3: detected capacity change from 0 to 128 [ 165.121090][ T6616] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.260753][ T6616] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.426522][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.685338][ T6625] loop3: detected capacity change from 0 to 512 [ 165.702174][ T6625] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.718657][ T6625] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 165.919595][ T6625] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.102019][ T6625] EXT4-fs (loop3): 1 truncate cleaned up [ 166.149182][ T6625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.192615][ T6625] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 167.255646][ T55] usb 1-1: USB disconnect, device number 5 [ 167.307427][ T6632] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 167.432062][ T6634] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 167.516098][ T6637] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 167.646030][ T28] audit: type=1800 audit(1754644920.936:14): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.200" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 167.826296][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.905993][ T6674] loop0: detected capacity change from 0 to 256 [ 168.158761][ T6676] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 168.221320][ T28] audit: type=1326 audit(1754644921.516:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.0.204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31e738ebe9 code=0x0 [ 168.476122][ T6678] loop3: detected capacity change from 0 to 2048 [ 168.544584][ T6678] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 168.582164][ T6678] UDF-fs: Scanning with blocksize 512 failed [ 168.676339][ T6678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.263770][ T6686] loop3: detected capacity change from 0 to 512 [ 170.479785][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.533371][ T6686] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.712002][ T6685] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.209: invalid size [ 170.726419][ T6685] EXT4-fs (loop3): Remounting filesystem read-only [ 170.888396][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.936230][ T11] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.957446][ T11] Quota error (device loop3): write_blk: dquota write failed [ 170.967191][ T11] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 170.978432][ T11] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.989902][ T11] Quota error (device loop3): write_blk: dquota write failed [ 171.004897][ T11] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 171.374575][ T6690] loop0: detected capacity change from 0 to 128 [ 171.400428][ T6690] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 171.498458][ T6690] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.830067][ T6689] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 171.957515][ T6701] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 172.082115][ T6712] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 172.278295][ T6714] loop3: detected capacity change from 0 to 128 [ 172.298088][ T6714] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.334515][ T6714] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.407923][ T3444] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.630464][ T6716] loop3: detected capacity change from 0 to 8 [ 172.686311][ T6716] SQUASHFS error: Failed to read block 0x4e8: -5 [ 172.731854][ T6716] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.740757][ T6716] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.760485][ T6716] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.776670][ T6718] loop0: detected capacity change from 0 to 2048 [ 172.940834][ T28] audit: type=1800 audit(1754644926.226:16): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.218" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 173.044324][ T6718] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.115193][ T6718] EXT4-fs error (device loop0): ext4_lookup:1858: inode #16: comm syz.0.219: iget: bad i_size value: 8796093031208 [ 173.427908][ T6724] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.904348][ T5788] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 177.179577][ T6747] loop0: detected capacity change from 0 to 256 [ 177.204127][ T6748] ubi: mtd0 is already attached to ubi31 [ 177.267628][ T6747] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 177.357991][ T6747] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 177.620689][ T28] audit: type=1800 audit(1754644930.916:17): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.225" name="file1" dev="loop0" ino=1048651 res=0 errno=0 [ 177.730238][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.906008][ T6753] batadv_slave_0: entered promiscuous mode [ 178.103856][ T6760] loop0: detected capacity change from 0 to 256 [ 178.134712][ T5831] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 178.358150][ T5831] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 178.380188][ T5831] usb 2-1: config 252 has no interface number 0 [ 178.409560][ T5831] usb 2-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 178.436659][ T6762] loop0: detected capacity change from 0 to 8 [ 178.444703][ T5831] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 178.490556][ T5831] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 178.512556][ T6762] SQUASHFS error: Failed to read block 0x4e8: -5 [ 178.519111][ T6762] SQUASHFS error: Failed to read block 0x4de: -5 [ 178.520627][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.571794][ T5831] usb 2-1: Product: syz [ 178.580520][ T5831] usb 2-1: Manufacturer: syz [ 178.599327][ T5831] usb 2-1: SerialNumber: syz [ 178.719402][ T6762] SQUASHFS error: Failed to read block 0x4de: -5 [ 178.726737][ T6762] SQUASHFS error: Failed to read block 0x4de: -5 [ 178.733695][ T28] audit: type=1800 audit(1754644932.036:18): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.231" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 179.214823][ T5876] usb 2-1: USB disconnect, device number 6 [ 180.338589][ T6770] netlink: 'syz.1.233': attribute type 1 has an invalid length. [ 182.942872][ T6790] loop3: detected capacity change from 0 to 512 [ 182.972417][ T6790] EXT4-fs: Ignoring removed nobh option [ 183.054007][ T6790] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.241: iget: bad i_size value: 38620345925642 [ 183.104204][ T6790] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.241: couldn't read orphan inode 15 (err -117) [ 183.319293][ T6790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.374151][ T6139] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:10: bg 0: block 5: invalid block bitmap [ 184.484123][ T6139] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 184.498923][ T6139] EXT4-fs (loop3): This should not happen!! Data will be lost [ 184.498923][ T6139] [ 184.512566][ T6139] EXT4-fs (loop3): Total free blocks count 0 [ 184.518941][ T6139] EXT4-fs (loop3): Free/Dirty block details [ 184.526525][ T6139] EXT4-fs (loop3): free_blocks=0 [ 184.532295][ T6139] EXT4-fs (loop3): dirty_blocks=16001 [ 184.553348][ T6139] EXT4-fs (loop3): Block reservation details [ 184.564901][ T6139] EXT4-fs (loop3): i_reserved_data_blocks=16001 [ 184.666366][ T6802] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 186.734268][ T6821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.516929][ T6825] loop1: detected capacity change from 0 to 2048 [ 187.741360][ T6825] loop1: p1 < > p3 [ 187.784873][ T6825] loop1: p3 size 134217728 extends beyond EOD, truncated [ 187.804840][ T6829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.950909][ T6823] loop0: detected capacity change from 0 to 32768 [ 187.965580][ T6823] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.251 (6823) [ 188.010649][ T6823] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.044039][ T6823] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 188.057075][ T6823] BTRFS info (device loop0): enabling disk space caching [ 188.068387][ T6823] BTRFS info (device loop0): doing ref verification [ 188.084084][ T6823] BTRFS info (device loop0): use zlib compression, level 3 [ 188.097414][ T6823] BTRFS info (device loop0): force clearing of disk cache [ 188.116067][ T6823] BTRFS info (device loop0): setting nodatacow, compression disabled [ 188.138501][ T6823] BTRFS info (device loop0): doing ref verification [ 188.157802][ T6823] BTRFS info (device loop0): disk space caching is enabled [ 188.275290][ T6823] BTRFS info (device loop0): enabling ssd optimizations [ 188.295556][ T6823] BTRFS info (device loop0): auto enabling async discard [ 188.338508][ T6823] BTRFS info (device loop0): rebuilding free space tree [ 188.364121][ T6855] loop1: detected capacity change from 0 to 256 [ 188.446390][ T6823] BTRFS info (device loop0): disabling free space tree [ 188.481889][ T6823] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.532858][ T6823] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.882661][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.363146][ T6898] loop0: detected capacity change from 0 to 32768 [ 194.399237][ T6898] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.270 (6898) [ 194.458195][ T6898] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.477061][ T6898] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 194.502207][ T6898] BTRFS info (device loop0): enabling disk space caching [ 194.524213][ T6898] BTRFS info (device loop0): doing ref verification [ 194.562737][ T6898] BTRFS info (device loop0): use zlib compression, level 3 [ 194.581970][ T6898] BTRFS info (device loop0): force clearing of disk cache [ 194.606390][ T6898] BTRFS info (device loop0): setting nodatacow, compression disabled [ 194.631779][ T6898] BTRFS info (device loop0): doing ref verification [ 194.653251][ T6898] BTRFS info (device loop0): disk space caching is enabled [ 194.666837][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.673532][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.674238][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 194.717153][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 194.749270][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 194.818704][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 194.873165][ T6919] netlink: 'syz.3.278': attribute type 1 has an invalid length. [ 194.911914][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 194.912613][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 194.942267][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 195.001899][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 195.023764][ T6924] loop1: detected capacity change from 0 to 256 [ 195.035912][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 195.039553][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 195.088942][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 195.141938][ T6898] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 195.178317][ T6898] BTRFS error (device loop0): open_ctree failed: -12 [ 197.856601][ T6969] loop3: detected capacity change from 0 to 256 [ 199.046436][ T6967] loop0: detected capacity change from 0 to 32768 [ 199.119138][ T6967] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.289 (6967) [ 199.246392][ T6967] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.273084][ T6979] loop1: detected capacity change from 0 to 256 [ 199.297904][ T6967] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 199.346354][ T6967] BTRFS info (device loop0): enabling disk space caching [ 199.381955][ T6967] BTRFS info (device loop0): doing ref verification [ 199.431901][ T6967] BTRFS info (device loop0): use zlib compression, level 3 [ 199.439210][ T6967] BTRFS info (device loop0): force clearing of disk cache [ 199.472220][ T6967] BTRFS info (device loop0): setting nodatacow, compression disabled [ 199.499268][ T6967] BTRFS info (device loop0): doing ref verification [ 199.526520][ T6967] BTRFS info (device loop0): disk space caching is enabled [ 199.718861][ T6967] BTRFS info (device loop0): enabling ssd optimizations [ 199.740697][ T6967] BTRFS info (device loop0): auto enabling async discard [ 199.760015][ T6967] BTRFS info (device loop0): rebuilding free space tree [ 199.817447][ T6967] BTRFS info (device loop0): disabling free space tree [ 199.829507][ T6967] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 199.841137][ T6967] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.331596][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 200.520641][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 200.555163][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 200.594454][ T27] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 200.620038][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.635485][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.644461][ T27] usb 2-1: Product: syz [ 200.649213][ T27] usb 2-1: Manufacturer: syz [ 200.654986][ T27] usb 2-1: SerialNumber: syz [ 200.695271][ T27] usb 2-1: config 0 descriptor?? [ 200.736214][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 200.752565][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 200.803762][ T27] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 201.435564][ T7022] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 201.658979][ T7024] loop0: detected capacity change from 0 to 512 [ 201.683456][ T7024] EXT4-fs: Ignoring removed nobh option [ 201.719996][ T7024] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.304: iget: bad i_size value: 38620345925642 [ 201.753344][ T7024] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.304: couldn't read orphan inode 15 (err -117) [ 201.810730][ T7024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.769428][ T2876] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 202.837503][ T2876] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 202.850114][ T2876] EXT4-fs (loop0): This should not happen!! Data will be lost [ 202.850114][ T2876] [ 202.862730][ T2876] EXT4-fs (loop0): Total free blocks count 0 [ 202.868969][ T2876] EXT4-fs (loop0): Free/Dirty block details [ 202.876368][ T2876] EXT4-fs (loop0): free_blocks=0 [ 202.882308][ T2876] EXT4-fs (loop0): dirty_blocks=16001 [ 202.887850][ T2876] EXT4-fs (loop0): Block reservation details [ 202.894459][ T2876] EXT4-fs (loop0): i_reserved_data_blocks=16001 [ 202.984576][ T7028] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 203.685947][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 203.762675][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 204.101947][ T5791] usb 2-1: USB disconnect, device number 7 [ 204.359126][ T7042] loop0: detected capacity change from 0 to 32768 [ 204.375600][ T7042] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.310 (7042) [ 204.400998][ T7042] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.423724][ T7042] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 204.435196][ T7042] BTRFS info (device loop0): enabling disk space caching [ 204.445896][ T7042] BTRFS info (device loop0): doing ref verification [ 204.453102][ T7042] BTRFS info (device loop0): use zlib compression, level 3 [ 204.460731][ T7042] BTRFS info (device loop0): force clearing of disk cache [ 204.473383][ T7042] BTRFS info (device loop0): setting nodatacow, compression disabled [ 204.486595][ T7042] BTRFS info (device loop0): doing ref verification [ 204.497433][ T7042] BTRFS info (device loop0): disk space caching is enabled [ 204.561799][ T7042] BTRFS info (device loop0): enabling ssd optimizations [ 204.595999][ T7042] BTRFS info (device loop0): auto enabling async discard [ 204.646872][ T7042] BTRFS info (device loop0): rebuilding free space tree [ 204.695015][ T7042] BTRFS info (device loop0): disabling free space tree [ 204.712316][ T7042] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 204.740998][ T7042] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 204.835353][ T28] audit: type=1800 audit(1754644958.136:19): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.310" name="file1" dev="loop0" ino=261 res=0 errno=0 [ 205.011622][ T5791] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 205.212515][ T5791] usb 4-1: no configurations [ 205.217544][ T5791] usb 4-1: can't read configurations, error -22 [ 205.404545][ T5791] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 205.434922][ T5788] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.754488][ T5791] usb 4-1: no configurations [ 205.772135][ T5791] usb 4-1: can't read configurations, error -22 [ 205.783166][ T5791] usb usb4-port1: attempt power cycle [ 206.191751][ T5791] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 206.245757][ T5791] usb 4-1: no configurations [ 206.261253][ T5791] usb 4-1: can't read configurations, error -22 [ 206.416902][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 206.434266][ T5791] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 206.473047][ T5791] usb 4-1: no configurations [ 206.488384][ T5791] usb 4-1: can't read configurations, error -22 [ 206.496960][ T5791] usb usb4-port1: unable to enumerate USB device [ 206.500503][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 206.989070][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 206.989101][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 206.996001][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 207.004291][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 207.219089][ T7092] loop1: detected capacity change from 0 to 256 [ 208.540013][ T7107] loop3: detected capacity change from 0 to 32768 [ 208.557291][ T7107] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.329 (7107) [ 208.650225][ T7107] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.685056][ T7115] loop1: detected capacity change from 0 to 2048 [ 208.692151][ T7107] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 208.724469][ T7107] BTRFS info (device loop3): enabling disk space caching [ 208.753998][ T7107] BTRFS info (device loop3): doing ref verification [ 208.754058][ T7115] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.760651][ T7107] BTRFS info (device loop3): use zlib compression, level 3 [ 208.760676][ T7107] BTRFS info (device loop3): force clearing of disk cache [ 208.760695][ T7107] BTRFS info (device loop3): setting nodatacow, compression disabled [ 208.760719][ T7107] BTRFS info (device loop3): doing ref verification [ 208.816097][ T7107] BTRFS info (device loop3): disk space caching is enabled [ 208.830814][ T7115] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.333: iget: bad i_size value: 8796093031208 [ 209.121829][ T7107] BTRFS info (device loop3): enabling ssd optimizations [ 209.129036][ T7107] BTRFS info (device loop3): auto enabling async discard [ 209.138774][ T7107] BTRFS info (device loop3): rebuilding free space tree [ 209.194622][ T7107] BTRFS info (device loop3): disabling free space tree [ 209.213171][ T7147] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 209.223740][ T7107] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.277118][ T7107] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.392634][ T28] audit: type=1800 audit(1754644962.696:20): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.329" name="file1" dev="loop3" ino=261 res=0 errno=0 [ 209.994847][ T5787] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.136253][ T5786] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 211.286978][ T7168] kvm: kvm [7167]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 211.342292][ T7168] kvm: kvm [7167]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 211.871619][ T7178] loop0: detected capacity change from 0 to 256 [ 211.935838][ T7178] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d) [ 211.976554][ T7178] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 212.055609][ T28] audit: type=1800 audit(1754644965.356:21): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.348" name="file1" dev="loop0" ino=1048658 res=0 errno=0 [ 212.139732][ T7176] loop1: detected capacity change from 0 to 32768 [ 212.153594][ T7178] syz.0.348: attempt to access beyond end of device [ 212.153594][ T7178] loop0: rw=0, sector=184, nr_sectors = 3855 limit=256 [ 212.171971][ T7176] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.347 (7176) [ 212.207027][ T7181] netlink: 'syz.0.348': attribute type 4 has an invalid length. [ 212.242525][ T7176] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.282508][ T7176] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 212.311762][ T7176] BTRFS info (device loop1): enabling disk space caching [ 212.359933][ T7176] BTRFS info (device loop1): doing ref verification [ 212.362076][ T7182] netlink: 'syz.0.348': attribute type 4 has an invalid length. [ 212.395341][ T7178] syz.0.348: attempt to access beyond end of device [ 212.395341][ T7178] loop0: rw=0, sector=4039, nr_sectors = 2728 limit=256 [ 212.409375][ T7176] BTRFS info (device loop1): use zlib compression, level 3 [ 212.443709][ T7176] BTRFS info (device loop1): force clearing of disk cache [ 212.467694][ T7176] BTRFS info (device loop1): setting nodatacow, compression disabled [ 212.480660][ T7176] BTRFS info (device loop1): doing ref verification [ 212.502218][ T7176] BTRFS info (device loop1): disk space caching is enabled [ 212.558709][ T7178] syz.0.348: attempt to access beyond end of device [ 212.558709][ T7178] loop0: rw=0, sector=6767, nr_sectors = 7168 limit=256 [ 212.663813][ T7176] BTRFS info (device loop1): enabling ssd optimizations [ 212.679590][ T7176] BTRFS info (device loop1): auto enabling async discard [ 212.691900][ T27] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 212.704418][ T7176] BTRFS info (device loop1): rebuilding free space tree [ 212.733028][ T7176] BTRFS info (device loop1): disabling free space tree [ 212.740033][ T7176] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.778568][ T7176] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.799550][ T7178] syz.0.348: attempt to access beyond end of device [ 212.799550][ T7178] loop0: rw=0, sector=13935, nr_sectors = 7040 limit=256 [ 212.849431][ T28] audit: type=1800 audit(1754644966.146:22): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.347" name="file1" dev="loop1" ino=261 res=0 errno=0 [ 212.913336][ T27] usb 4-1: config 252 has an invalid interface number: 107 but max is 0 [ 212.926468][ T27] usb 4-1: config 252 has no interface number 0 [ 212.933229][ T27] usb 4-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 212.961578][ T27] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 212.984388][ T27] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 212.996737][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.016602][ T27] usb 4-1: Product: syz [ 213.020931][ T27] usb 4-1: Manufacturer: syz [ 213.034942][ T27] usb 4-1: SerialNumber: syz [ 213.275838][ T27] usb 4-1: USB disconnect, device number 9 [ 213.482886][ T5786] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 214.125923][ T7217] loop3: detected capacity change from 0 to 256 [ 214.136237][ T7217] exfat: Deprecated parameter 'utf8' [ 214.169125][ T7217] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 214.371641][ T5791] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 214.512560][ T7226] loop3: detected capacity change from 0 to 256 [ 214.584025][ T5791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.611898][ T5791] usb 1-1: config 0 has no interfaces? [ 214.627573][ T5791] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 214.661933][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.702698][ T5791] usb 1-1: config 0 descriptor?? [ 215.071605][ T5831] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 215.169651][ T7242] loop3: detected capacity change from 0 to 512 [ 215.181629][ T7242] EXT4-fs: Ignoring removed nobh option [ 215.208529][ T7242] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.367: iget: bad i_size value: 38620345925642 [ 215.227349][ T7242] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.367: couldn't read orphan inode 15 (err -117) [ 215.246727][ T7242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.267574][ T5831] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 215.284723][ T5831] usb 2-1: config 252 has no interface number 0 [ 216.134230][ T5831] usb 2-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 216.159837][ T5831] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 216.180654][ T42] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 216.182411][ T5831] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 216.214168][ T42] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 216.216308][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.237638][ T42] EXT4-fs (loop3): This should not happen!! Data will be lost [ 216.237638][ T42] [ 216.239683][ T5831] usb 2-1: Product: syz [ 216.252527][ T42] EXT4-fs (loop3): Total free blocks count 0 [ 216.260451][ T5831] usb 2-1: Manufacturer: syz [ 216.265679][ T42] EXT4-fs (loop3): Free/Dirty block details [ 216.271011][ T5831] usb 2-1: SerialNumber: syz [ 216.278539][ T42] EXT4-fs (loop3): free_blocks=0 [ 216.291319][ T42] EXT4-fs (loop3): dirty_blocks=16001 [ 216.301621][ T42] EXT4-fs (loop3): Block reservation details [ 216.310308][ T42] EXT4-fs (loop3): i_reserved_data_blocks=16001 [ 216.311746][ T5803] Bluetooth: Wrong link type (-71) [ 216.398277][ T7247] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 216.503293][ T8] usb 2-1: USB disconnect, device number 8 [ 217.779775][ T8] usb 1-1: USB disconnect, device number 6 [ 218.076280][ T7269] loop0: detected capacity change from 0 to 256 [ 218.137287][ T7270] loop3: detected capacity change from 0 to 256 [ 218.974255][ T7283] loop3: detected capacity change from 0 to 1024 [ 219.085121][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.109870][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.137814][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.150918][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.159522][ T7285] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.169197][ T7285] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.178585][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.180088][ T7289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.381'. [ 219.188175][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.203897][ T7285] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.215662][ T7285] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.224446][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.234055][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.245336][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.253279][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.271688][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.291943][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.305838][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.313812][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.321317][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.329121][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.338395][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.346424][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.354016][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.361991][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.369414][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.377112][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.384732][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.392137][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.399626][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.407588][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.415087][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.422527][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.429922][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.437391][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.445690][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.453116][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.460492][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.467876][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.475453][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.483206][ T7283] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.492186][ T28] audit: type=1800 audit(1754644972.786:23): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.379" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 219.528637][ T6139] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.536473][ T6139] hfsplus: request for non-existent node 16777216 in B*Tree [ 219.581590][ T5831] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 219.777927][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.834019][ T5831] usb 1-1: config 0 has no interfaces? [ 219.855775][ T5831] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 219.908540][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.063438][ T5831] usb 1-1: config 0 descriptor?? [ 221.455257][ T7320] tap0: tun_chr_ioctl cmd 1074025677 [ 221.461358][ T7320] tap0: linktype set to 823 [ 221.801716][ T5831] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 222.036004][ T5831] usb 4-1: config 252 has an invalid interface number: 107 but max is 0 [ 222.101173][ T5831] usb 4-1: config 252 has no interface number 0 [ 222.226987][ T5831] usb 4-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 222.381382][ T5831] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 222.574215][ T5831] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 222.598471][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.624933][ T5831] usb 4-1: Product: syz [ 222.636224][ T5831] usb 4-1: Manufacturer: syz [ 222.649659][ T5831] usb 4-1: SerialNumber: syz [ 222.661615][ T55] usb 1-1: USB disconnect, device number 7 [ 222.925050][ T55] usb 4-1: USB disconnect, device number 10 [ 223.662950][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 223.732958][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 225.167097][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.228319][ T7389] batadv_slave_0: entered promiscuous mode [ 225.290956][ T7393] loop0: detected capacity change from 0 to 512 [ 225.321826][ T7393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.376165][ T7393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.415389][ T7393] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.226869][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.565476][ T7425] loop1: detected capacity change from 0 to 2048 [ 228.716725][ T7425] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.737481][ T7425] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.431: iget: bad i_size value: 8796093031208 [ 229.151617][ T5797] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 229.164455][ T7434] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 229.454006][ T5797] usb 1-1: config 252 has an invalid interface number: 107 but max is 0 [ 229.511601][ T5797] usb 1-1: config 252 has no interface number 0 [ 229.518298][ T5797] usb 1-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 229.530305][ T5797] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 229.547897][ T5797] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 229.591546][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.682836][ T5797] usb 1-1: Product: syz [ 229.716458][ T5797] usb 1-1: Manufacturer: syz [ 231.472932][ T5797] usb 1-1: SerialNumber: syz [ 231.816009][ T5831] usb 1-1: USB disconnect, device number 8 [ 232.509289][ T5786] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 232.899317][ T7452] loop3: detected capacity change from 0 to 256 [ 232.944539][ T7452] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 232.975297][ T7452] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 233.739965][ T7466] loop3: detected capacity change from 0 to 512 [ 233.765855][ T7466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.001372][ T7466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.001811][ T7466] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.462180][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.445'. [ 236.954324][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.128883][ T7485] Zero length message leads to an empty skb [ 237.491682][ T5831] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 237.592351][ T7493] loop3: detected capacity change from 0 to 128 [ 237.644874][ T7493] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.711997][ T7493] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.939416][ T7493] EXT4-fs error (device loop3): ext4_resize_begin:62: comm syz.3.448: resize_inode disabled but reserved GDT blocks non-zero [ 238.831718][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.039515][ T7545] loop0: detected capacity change from 0 to 512 [ 242.060874][ T7545] EXT4-fs: Ignoring removed nobh option [ 242.087950][ T7545] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.468: iget: bad i_size value: 38620345925642 [ 242.112429][ T7545] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.468: couldn't read orphan inode 15 (err -117) [ 242.150344][ T7545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.109204][ T59] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 243.161363][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 243.174953][ T59] EXT4-fs (loop0): This should not happen!! Data will be lost [ 243.174953][ T59] [ 243.185228][ T59] EXT4-fs (loop0): Total free blocks count 0 [ 243.191287][ T59] EXT4-fs (loop0): Free/Dirty block details [ 243.200637][ T59] EXT4-fs (loop0): free_blocks=0 [ 243.206045][ T59] EXT4-fs (loop0): dirty_blocks=16001 [ 243.215498][ T59] EXT4-fs (loop0): Block reservation details [ 243.222116][ T59] EXT4-fs (loop0): i_reserved_data_blocks=16001 [ 243.307145][ T7553] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 243.397080][ T7557] loop3: detected capacity change from 0 to 2048 [ 243.524091][ T7557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.572212][ T7557] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.847481][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.339202][ T7559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.275047][ T7588] loop3: detected capacity change from 0 to 512 [ 245.287737][ T7588] EXT4-fs: Ignoring removed nobh option [ 245.318178][ T7588] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.484: iget: bad i_size value: 38620345925642 [ 245.391945][ T7588] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.484: couldn't read orphan inode 15 (err -117) [ 245.445640][ T7588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.653070][ T7596] loop1: detected capacity change from 0 to 256 [ 246.073118][ T7549] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 247.274728][ T2876] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 247.305917][ T2876] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 117 [ 247.393968][ T2876] EXT4-fs (loop3): This should not happen!! Data will be lost [ 247.393968][ T2876] [ 247.510675][ T7600] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 247.523309][ T7600] EXT4-fs (loop3): This should not happen!! Data will be lost [ 247.523309][ T7600] [ 247.533011][ T7600] EXT4-fs (loop3): Total free blocks count 0 [ 247.539053][ T7600] EXT4-fs (loop3): Free/Dirty block details [ 247.545036][ T7600] EXT4-fs (loop3): free_blocks=0 [ 247.549990][ T7600] EXT4-fs (loop3): dirty_blocks=15996 [ 247.555409][ T7600] EXT4-fs (loop3): Block reservation details [ 248.671592][ T5831] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 249.641970][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.685282][ T5831] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 249.758344][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.815199][ T7625] loop0: detected capacity change from 0 to 1024 [ 249.822799][ T5831] usb 4-1: config 0 descriptor?? [ 250.012553][ T7625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.436154][ T7629] loop1: detected capacity change from 0 to 512 [ 250.464886][ T7625] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.482765][ T7629] EXT4-fs: Ignoring removed nobh option [ 250.529550][ T7629] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.495: iget: bad i_size value: 38620345925642 [ 250.644512][ T7629] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.495: couldn't read orphan inode 15 (err -117) [ 250.693435][ T5831] holtek_mouse 0003:04D9:A04A.0001: unbalanced collection at end of report description [ 250.704848][ T5831] holtek_mouse 0003:04D9:A04A.0001: hid parse failed: -22 [ 250.712225][ T5831] holtek_mouse: probe of 0003:04D9:A04A.0001 failed with error -22 [ 250.756119][ T7629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.697346][ T28] audit: type=1800 audit(1754645004.836:24): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.494" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 251.736773][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.757696][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.770735][ T787] usb 4-1: USB disconnect, device number 11 [ 251.919171][ T7637] loop1: detected capacity change from 0 to 128 [ 253.164409][ T8] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 253.373314][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.400454][ T8] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 253.422258][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.445193][ T8] usb 4-1: config 0 descriptor?? [ 256.226307][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.471686][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.879566][ T787] usb 4-1: USB disconnect, device number 12 [ 260.541756][ T55] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 260.754667][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.807424][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.832598][ T55] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.846171][ T55] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.856079][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.898517][ T55] usb 1-1: config 0 descriptor?? [ 262.283028][ T55] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 262.303662][ T55] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 263.093878][ T55] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 263.121286][ T55] usb 1-1: USB disconnect, device number 10 [ 263.554933][ T7724] fido_id[7724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 263.908592][ T7738] loop3: detected capacity change from 0 to 512 [ 263.967104][ T7738] EXT4-fs: Ignoring removed nobh option [ 265.212291][ T7738] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.526: iget: bad i_size value: 38620345925642 [ 265.381358][ T7738] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.526: couldn't read orphan inode 15 (err -117) [ 265.395770][ T7738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.415578][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.426070][ T7753] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 266.447882][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 266.621712][ T5791] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 266.801645][ T5791] usb 1-1: device descriptor read/64, error -71 [ 267.071651][ T5791] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 267.271645][ T5791] usb 1-1: device descriptor read/64, error -71 [ 267.425676][ T5791] usb usb1-port1: attempt power cycle [ 267.481668][ T55] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 267.505963][ T7768] loop1: detected capacity change from 0 to 512 [ 267.538382][ T7768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.628755][ T7768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.668649][ T7768] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.691613][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 267.698576][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 267.715776][ T55] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 267.726197][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.749546][ T55] usb 4-1: Product: syz [ 267.763930][ T55] usb 4-1: Manufacturer: syz [ 267.778840][ T55] usb 4-1: SerialNumber: syz [ 267.800463][ T55] usb 4-1: config 0 descriptor?? [ 267.820986][ T55] hub 4-1:0.0: bad descriptor, ignoring hub [ 267.829390][ T55] hub: probe of 4-1:0.0 failed with error -5 [ 267.855438][ T55] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 267.913343][ T5791] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 268.151012][ T7776] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 268.349546][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.457338][ T5791] usb 1-1: device descriptor read/8, error -71 [ 270.164926][ T7794] loop0: detected capacity change from 0 to 1024 [ 270.259426][ T7794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.432654][ T7801] loop3: detected capacity change from 0 to 512 [ 270.481854][ T27] usb 4-1: USB disconnect, device number 13 [ 270.527051][ T7801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 270.610513][ T7801] EXT4-fs (loop3): 1 truncate cleaned up [ 270.633102][ T7801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.340988][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.362607][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.951048][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 272.705180][ T7822] loop3: detected capacity change from 0 to 256 [ 272.918558][ T7822] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 272.986453][ T7822] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 273.086130][ T28] audit: type=1800 audit(1754645026.386:25): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.549" name="file1" dev="loop3" ino=1048676 res=0 errno=0 [ 273.221658][ T5797] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 273.421704][ T5797] usb 1-1: device descriptor read/64, error -71 [ 273.691586][ T5797] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 273.871622][ T5797] usb 1-1: device descriptor read/64, error -71 [ 274.004698][ T5797] usb usb1-port1: attempt power cycle [ 274.262559][ T5803] Bluetooth: Wrong link type (-71) [ 274.431633][ T5797] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 274.462516][ T5797] usb 1-1: device descriptor read/8, error -71 [ 274.761649][ T5797] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 275.174480][ T5797] usb 1-1: device descriptor read/8, error -71 [ 275.304396][ T5797] usb usb1-port1: unable to enumerate USB device [ 276.378820][ T55] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 276.593697][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.613885][ T55] usb 2-1: not running at top speed; connect to a high speed hub [ 276.634668][ T55] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 276.653336][ T55] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 276.693059][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.750155][ T55] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.773752][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.813785][ T55] usb 2-1: Product: syz [ 276.827219][ T55] usb 2-1: Manufacturer: syz [ 276.852700][ T55] usb 2-1: SerialNumber: syz [ 277.710969][ T55] usb 2-1: 0:2 : does not exist [ 277.803038][ T7858] loop3: detected capacity change from 0 to 512 [ 277.832074][ T7858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.900913][ T7858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.921823][ T55] usb 2-1: USB disconnect, device number 9 [ 277.951614][ T7858] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.106845][ T7865] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 278.134320][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 279.761860][ T787] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 279.854430][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.961686][ T787] usb 2-1: device descriptor read/64, error -71 [ 280.265064][ T787] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 280.266224][ T7892] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 280.293115][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 280.441735][ T787] usb 2-1: device descriptor read/64, error -71 [ 280.602541][ T787] usb usb2-port1: attempt power cycle [ 280.651613][ T55] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 280.870340][ T5803] Bluetooth: Wrong link type (-71) [ 281.033645][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 281.048514][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 281.101597][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.156466][ T787] usb 2-1: device descriptor read/8, error -71 [ 281.378100][ T55] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 281.411960][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.436994][ T55] usb 4-1: Product: syz [ 281.441228][ T55] usb 4-1: Manufacturer: syz [ 281.441796][ T787] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 281.461680][ T55] usb 4-1: SerialNumber: syz [ 281.479121][ T55] usb 4-1: config 0 descriptor?? [ 281.512369][ T55] hub 4-1:0.0: bad descriptor, ignoring hub [ 281.518448][ T55] hub: probe of 4-1:0.0 failed with error -5 [ 281.533084][ T787] usb 2-1: device descriptor read/8, error -71 [ 281.626037][ T55] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 281.670992][ T787] usb usb2-port1: unable to enumerate USB device [ 281.869054][ T7910] loop0: detected capacity change from 0 to 512 [ 281.937002][ T7910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.055944][ T7910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.069045][ T7910] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.051165][ T7922] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 283.166947][ T28] audit: type=1326 audit(1754645036.466:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.199445][ T28] audit: type=1326 audit(1754645036.466:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.224202][ T28] audit: type=1326 audit(1754645036.496:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.271571][ T28] audit: type=1326 audit(1754645036.496:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.303948][ T28] audit: type=1326 audit(1754645036.496:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.326806][ T28] audit: type=1326 audit(1754645036.496:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.378413][ T28] audit: type=1326 audit(1754645036.516:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.444536][ T28] audit: type=1326 audit(1754645036.516:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.527555][ T28] audit: type=1326 audit(1754645036.526:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.606302][ T28] audit: type=1326 audit(1754645036.526:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ee78ebe9 code=0x7ffc0000 [ 283.946449][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.312251][ T5876] usb 4-1: USB disconnect, device number 14 [ 284.448262][ T7947] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 284.665877][ T7955] loop3: detected capacity change from 0 to 512 [ 284.686973][ T7955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.768847][ T7955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.808151][ T7955] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.273148][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.599'. [ 286.030205][ T7979] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 286.261740][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 286.537098][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 286.645306][ T7992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.609'. [ 286.932444][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'. [ 287.813572][ T8008] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 287.972498][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.199671][ T8017] loop1: detected capacity change from 0 to 1024 [ 288.233022][ T8017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.692194][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.010768][ T8040] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 290.098416][ T8042] loop1: detected capacity change from 0 to 512 [ 290.109017][ T8042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.161248][ T8042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.174673][ T8042] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.609408][ T8047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 292.152822][ T8063] trusted_key: encrypted_key: insufficient parameters specified [ 292.164458][ T8063] trusted_key: encrypted_key: insufficient parameters specified [ 293.695928][ T8074] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 294.093057][ T8081] loop0: detected capacity change from 0 to 1024 [ 294.191415][ T8081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.205184][ T8081] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.338489][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.373969][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.118555][ T8106] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 296.198636][ T8108] loop0: detected capacity change from 0 to 128 [ 296.237500][ T8108] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 296.286958][ T8108] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 296.329972][ T8112] loop1: detected capacity change from 0 to 2048 [ 296.422642][ T8112] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.486925][ T8112] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.646: iget: bad i_size value: 8796093031208 [ 296.536096][ T8119] loop3: detected capacity change from 0 to 512 [ 296.628395][ T8123] loop0: detected capacity change from 0 to 512 [ 296.641345][ T8123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.677092][ T8119] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.648: corrupted in-inode xattr: invalid ea_ino [ 296.737328][ T8119] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.648: couldn't read orphan inode 15 (err -117) [ 296.764253][ T8123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.781958][ T8123] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.796855][ T8119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.058952][ T8129] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 297.404077][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.229017][ T5786] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 298.889038][ T8148] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 298.967573][ T8150] loop3: detected capacity change from 0 to 1024 [ 299.133667][ T8150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.124046][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.365942][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.050115][ T8168] loop3: detected capacity change from 0 to 2048 [ 301.211706][ T8174] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 301.274410][ T8168] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.386231][ T8168] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.661: iget: bad i_size value: 8796093031208 [ 301.899676][ T8188] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 304.283569][ T5787] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 304.922063][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.673'. [ 305.044560][ T8210] loop3: detected capacity change from 0 to 2048 [ 305.079758][ T8210] EXT4-fs (loop3): cluster size (2048) smaller than block size (4096) [ 305.671896][ T8208] loop3: detected capacity change from 0 to 1024 [ 305.723612][ T8208] hfsplus: unable to find HFS+ superblock [ 305.775533][ T8219] loop0: detected capacity change from 0 to 512 [ 305.808326][ T8219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.867783][ T8219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.885495][ T8219] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.877880][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.141814][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 309.141832][ T28] audit: type=1326 audit(1754645062.426:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbd58ebe9 code=0x7ffc0000 [ 309.612536][ T28] audit: type=1326 audit(1754645062.426:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbd58ebe9 code=0x7ffc0000 [ 309.722927][ T28] audit: type=1326 audit(1754645062.506:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f1bbd58ebe9 code=0x7ffc0000 [ 309.751607][ T28] audit: type=1326 audit(1754645062.506:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8242 comm="syz.3.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbd58ebe9 code=0x7ffc0000 [ 310.716924][ T8252] loop0: detected capacity change from 0 to 1764 [ 311.440543][ T8263] loop0: detected capacity change from 0 to 128 [ 311.453056][ T8263] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.645488][ T8263] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 312.472750][ T8274] loop3: detected capacity change from 0 to 256 [ 312.514386][ T8274] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 312.535032][ T8274] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 312.566245][ T8278] loop1: detected capacity change from 0 to 256 [ 312.584010][ T8278] exfat: Deprecated parameter 'namecase' [ 312.601196][ T28] audit: type=1800 audit(1754645065.896:41): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.693" name="file1" dev="loop3" ino=1048687 res=0 errno=0 [ 312.673579][ T8278] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 312.726737][ T8278] exFAT-fs (loop1): Invalid exboot-signature(sector = 1): 0xaa000000 [ 312.791363][ T8278] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1219aba6) [ 312.817174][ T8278] exFAT-fs (loop1): invalid boot region [ 312.823179][ T8278] exFAT-fs (loop1): failed to recognize exfat type [ 316.511395][ T8289] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 317.546633][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.554421][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.806365][ T8308] loop3: detected capacity change from 0 to 256 [ 318.911266][ T8308] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 318.959764][ T8308] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 319.165708][ T28] audit: type=1800 audit(1754645072.466:42): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.703" name="file1" dev="loop3" ino=1048697 res=0 errno=0 [ 319.198054][ T5791] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 319.417072][ T5791] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 319.446573][ T5791] usb 2-1: config 252 has no interface number 0 [ 319.487896][ T5791] usb 2-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 319.541789][ T5791] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 319.621787][ T5791] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 319.631230][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.678138][ T5791] usb 2-1: Product: syz [ 319.689634][ T5791] usb 2-1: Manufacturer: syz [ 319.699216][ T8317] loop0: detected capacity change from 0 to 128 [ 319.699710][ T5791] usb 2-1: SerialNumber: syz [ 319.728693][ T8317] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 319.786805][ T8317] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 319.908504][ T8322] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 319.959515][ T5791] usb 2-1: USB disconnect, device number 14 [ 321.431115][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 321.542001][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 321.959146][ T8344] loop1: detected capacity change from 0 to 256 [ 322.166176][ T8344] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 322.296425][ T8344] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 322.447814][ T28] audit: type=1800 audit(1754645075.746:43): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.713" name="file1" dev="loop1" ino=1048707 res=0 errno=0 [ 324.595327][ T8359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.718'. [ 324.706277][ T8361] loop0: detected capacity change from 0 to 1024 [ 324.871156][ T8361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.909236][ T8363] loop3: detected capacity change from 0 to 2048 [ 324.965204][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 325.031300][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 325.103882][ T8363] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.656028][ T8377] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 326.189360][ T8379] loop1: detected capacity change from 0 to 256 [ 326.254963][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.269063][ T5787] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 326.300306][ T8379] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 326.349374][ T8379] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 326.488885][ T28] audit: type=1800 audit(1754645079.776:44): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.724" name="file1" dev="loop1" ino=1048717 res=0 errno=0 [ 327.216689][ T8405] loop1: detected capacity change from 0 to 512 [ 327.257210][ T8405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.303799][ T8405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.404656][ T8405] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.456904][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 328.539725][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 328.887911][ T8421] loop3: detected capacity change from 0 to 1024 [ 329.036926][ T8421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.896957][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.627277][ T8436] loop0: detected capacity change from 0 to 256 [ 330.733256][ T8436] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 330.761898][ T8436] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 330.964973][ T28] audit: type=1800 audit(1754645084.236:45): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.739" name="file1" dev="loop0" ino=1048727 res=0 errno=0 [ 331.010258][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.652397][ T5797] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 333.855800][ T5797] usb 1-1: config 252 has an invalid interface number: 107 but max is 0 [ 333.894500][ T5797] usb 1-1: config 252 has no interface number 0 [ 333.916513][ T5797] usb 1-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 333.920696][ T8481] loop1: detected capacity change from 0 to 256 [ 333.961979][ T5797] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 333.997544][ T5797] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 334.023045][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.035331][ T8481] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 334.042486][ T5797] usb 1-1: Product: syz [ 334.072426][ T5797] usb 1-1: Manufacturer: syz [ 334.092259][ T8481] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 334.097643][ T5797] usb 1-1: SerialNumber: syz [ 334.236139][ T28] audit: type=1800 audit(1754645087.536:46): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.753" name="file1" dev="loop1" ino=1048737 res=0 errno=0 [ 334.378982][ T23] usb 1-1: USB disconnect, device number 19 [ 335.872581][ T8511] loop1: detected capacity change from 0 to 512 [ 335.886842][ T8511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.054664][ T8511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.173257][ T8511] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.431557][ T5803] Bluetooth: Wrong link type (-71) [ 336.514116][ T8521] loop0: detected capacity change from 0 to 256 [ 336.671723][ T8521] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 336.762101][ T8521] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 336.916558][ T28] audit: type=1800 audit(1754645090.216:47): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.765" name="file1" dev="loop0" ino=1048747 res=0 errno=0 [ 339.097901][ T8540] loop0: detected capacity change from 0 to 512 [ 339.121219][ T8540] EXT4-fs: Ignoring removed nobh option [ 339.204027][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.783500][ T8540] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.769: iget: bad i_size value: 38620345925642 [ 340.473039][ T8540] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.769: couldn't read orphan inode 15 (err -117) [ 340.840274][ T8540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.259799][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.384758][ T8575] loop3: detected capacity change from 0 to 512 [ 344.541576][ T8575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.673094][ T8575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.726366][ T8575] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.171656][ T5831] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 348.382096][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 348.524000][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.731602][ T5831] usb 2-1: config 0 has no interfaces? [ 348.745071][ T5831] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 348.765294][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.795767][ T5831] usb 2-1: Product: syz [ 348.800093][ T5831] usb 2-1: Manufacturer: syz [ 348.811943][ T5831] usb 2-1: SerialNumber: syz [ 348.843021][ T5831] usb 2-1: config 0 descriptor?? [ 349.832669][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.058522][ T8610] fuse: Bad value for 'fd' [ 353.691233][ T5797] usb 2-1: USB disconnect, device number 15 [ 355.209412][ T8649] loop3: detected capacity change from 0 to 1024 [ 355.294131][ T8649] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 355.896192][ T8649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.909607][ T8649] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.931698][ T8665] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 357.191906][ T8665] EXT4-fs (loop3): Remounting filesystem read-only [ 357.396642][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.446797][ T8668] netlink: 36 bytes leftover after parsing attributes in process `syz.0.803'. [ 357.796556][ T8670] loop0: detected capacity change from 0 to 1024 [ 357.909677][ T8670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.939762][ T8670] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.852056][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.582333][ T5791] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 360.271775][ T5791] usb 4-1: Using ep0 maxpacket: 16 [ 360.302735][ T5791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.344246][ T5791] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.393146][ T5791] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 360.433891][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.471295][ T5791] usb 4-1: Product: syz [ 360.479831][ T5791] usb 4-1: Manufacturer: syz [ 360.495273][ T5791] usb 4-1: SerialNumber: syz [ 360.585272][ T5791] usb 4-1: config 0 descriptor?? [ 361.533162][ T8705] loop1: detected capacity change from 0 to 256 [ 361.728833][ T8705] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 361.747991][ T8705] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 361.876867][ T28] audit: type=1800 audit(1754645115.176:48): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.813" name="file1" dev="loop1" ino=1048759 res=0 errno=0 [ 362.518981][ T8713] loop0: detected capacity change from 0 to 2048 [ 362.634592][ T8713] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.668973][ T8713] EXT4-fs error (device loop0): ext4_lookup:1858: inode #16: comm syz.0.815: iget: bad i_size value: 8796093031208 [ 362.979269][ T8721] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 363.252191][ T8719] loop1: detected capacity change from 0 to 1024 [ 363.584852][ T5788] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 363.607726][ T8719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.677367][ T8719] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.444338][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.600960][ T8730] loop1: detected capacity change from 0 to 1024 [ 364.658832][ T8730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.694101][ T8730] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.991880][ T5831] usb 4-1: USB disconnect, device number 15 [ 365.427736][ T8735] syz.1.818 (8735) used greatest stack depth: 20304 bytes left [ 365.697999][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.166632][ T8755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.825'. [ 366.233202][ T8757] loop3: detected capacity change from 0 to 1024 [ 366.280869][ T8757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.295718][ T8757] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.326313][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.143652][ T8781] netlink: 36 bytes leftover after parsing attributes in process `syz.1.834'. [ 374.672425][ T8819] netlink: 36 bytes leftover after parsing attributes in process `syz.0.843'. [ 378.987856][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.002478][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.182467][ T8845] loop0: detected capacity change from 0 to 1024 [ 379.348067][ T8845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.402375][ T8845] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.723128][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.223919][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 381.621858][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.654268][ T8875] batadv_slave_0: entered promiscuous mode [ 383.829118][ T8894] loop0: detected capacity change from 0 to 256 [ 383.848240][ T8894] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 383.865831][ T8894] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 383.951215][ T28] audit: type=1800 audit(1754645137.246:49): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.867" name="file1" dev="loop0" ino=1048769 res=0 errno=0 [ 384.243919][ T8903] loop3: detected capacity change from 0 to 1024 [ 384.286754][ T8903] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 384.414154][ T8903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.450889][ T8903] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.953251][ T8917] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 386.141666][ T8917] EXT4-fs (loop3): Remounting filesystem read-only [ 386.623981][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.715078][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 387.741556][ T55] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 387.973629][ T55] usb 1-1: config 252 has an invalid interface number: 107 but max is 0 [ 388.027086][ T55] usb 1-1: config 252 has no interface number 0 [ 388.042630][ T55] usb 1-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 388.113723][ T55] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 388.182329][ T55] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 388.251737][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.321633][ T55] usb 1-1: Product: syz [ 388.333153][ T55] usb 1-1: Manufacturer: syz [ 388.364045][ T55] usb 1-1: SerialNumber: syz [ 388.603671][ T55] usb 1-1: USB disconnect, device number 20 [ 388.715713][ T8940] loop1: detected capacity change from 0 to 256 [ 388.773774][ T8940] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 388.810157][ T8940] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 389.678208][ T28] audit: type=1800 audit(1754645142.716:50): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="file1" dev="loop1" ino=1048779 res=0 errno=0 [ 389.940768][ T8957] loop0: detected capacity change from 0 to 1024 [ 390.015664][ T8957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.061111][ T8957] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.818753][ T8971] netlink: 892 bytes leftover after parsing attributes in process `syz.3.887'. [ 390.925316][ T8973] netlink: 892 bytes leftover after parsing attributes in process `syz.3.887'. [ 391.053603][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.338745][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'. [ 391.613250][ T8987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.627140][ T8987] batadv_slave_0: entered promiscuous mode [ 393.948646][ T9003] loop1: detected capacity change from 0 to 256 [ 394.186567][ T9003] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 394.219682][ T9003] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 394.493151][ T28] audit: type=1800 audit(1754645147.796:51): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.896" name="file1" dev="loop1" ino=1048789 res=0 errno=0 [ 395.143964][ T9015] netlink: 892 bytes leftover after parsing attributes in process `syz.3.900'. [ 395.214392][ T9016] netlink: 892 bytes leftover after parsing attributes in process `syz.3.900'. [ 396.708652][ T9029] loop1: detected capacity change from 0 to 1024 [ 396.900942][ T5791] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 396.922651][ T9029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.936772][ T9029] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.802281][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.824136][ T5791] usb 4-1: config 252 has an invalid interface number: 107 but max is 0 [ 397.841359][ T5791] usb 4-1: config 252 has no interface number 0 [ 397.849153][ T5791] usb 4-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 397.860149][ T5791] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 397.873288][ T5791] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 397.896704][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.915122][ T5791] usb 4-1: Product: syz [ 397.919372][ T5791] usb 4-1: Manufacturer: syz [ 397.936482][ T5791] usb 4-1: SerialNumber: syz [ 398.309609][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 398.918950][ T8] usb 4-1: USB disconnect, device number 16 [ 399.351325][ T9056] netlink: 892 bytes leftover after parsing attributes in process `syz.1.911'. [ 399.451097][ T9056] netlink: 892 bytes leftover after parsing attributes in process `syz.1.911'. [ 400.218752][ T9066] loop0: detected capacity change from 0 to 1024 [ 400.267223][ T9066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.291648][ T9066] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.381578][ T9073] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 401.401189][ T9073] EXT4-fs (loop0): Remounting filesystem read-only [ 401.497635][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.455971][ T9092] loop0: detected capacity change from 0 to 1024 [ 402.600883][ T9092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.705035][ T9092] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.982628][ T9103] netlink: 892 bytes leftover after parsing attributes in process `syz.2.925'. [ 403.004379][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.924'. [ 403.522927][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.543727][ T9107] loop3: detected capacity change from 0 to 1024 [ 403.576888][ T9109] netlink: 892 bytes leftover after parsing attributes in process `syz.2.925'. [ 403.596346][ T9107] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 403.662133][ T9107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.676933][ T9107] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.992379][ T9119] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 405.283425][ T9116] fuse: Bad value for 'group_id' [ 405.306405][ T9119] EXT4-fs (loop3): Remounting filesystem read-only [ 405.613976][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.894990][ T9125] loop3: detected capacity change from 0 to 1024 [ 405.963357][ T9125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.996860][ T9125] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.942061][ T28] audit: type=1800 audit(1754645160.016:52): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.929" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 407.094722][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.279503][ T9140] loop1: detected capacity change from 0 to 1024 [ 407.373400][ T9140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.597375][ T9144] netlink: 892 bytes leftover after parsing attributes in process `syz.2.936'. [ 407.679643][ T9149] netlink: 892 bytes leftover after parsing attributes in process `syz.2.936'. [ 408.317041][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.503187][ T9160] fuse: Bad value for 'group_id' [ 409.944983][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 410.001852][ T9172] loop3: detected capacity change from 0 to 1024 [ 410.055013][ T9172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.114979][ T9172] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.409013][ T2191] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 410.834978][ T28] audit: type=1800 audit(1754645164.116:53): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.942" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 411.102432][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.181663][ T2191] usb 1-1: config 252 has an invalid interface number: 107 but max is 0 [ 411.190103][ T2191] usb 1-1: config 252 has no interface number 0 [ 411.226688][ T2191] usb 1-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 411.287778][ T2191] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 411.312378][ T2191] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 411.340580][ T2191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.376569][ T2191] usb 1-1: Product: syz [ 411.392565][ T2191] usb 1-1: Manufacturer: syz [ 411.405745][ T2191] usb 1-1: SerialNumber: syz [ 411.406027][ T9187] netlink: 892 bytes leftover after parsing attributes in process `syz.2.948'. [ 411.677237][ T9188] netlink: 892 bytes leftover after parsing attributes in process `syz.2.948'. [ 411.693701][ T2191] usb 1-1: USB disconnect, device number 21 [ 412.076750][ T9192] loop3: detected capacity change from 0 to 1024 [ 412.100596][ T9192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.374097][ T9200] fuse: Bad value for 'group_id' [ 412.536559][ T9202] loop0: detected capacity change from 0 to 1024 [ 412.571206][ T9202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.607321][ T9202] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.616543][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.638006][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.931029][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 413.945625][ T9216] loop3: detected capacity change from 0 to 1024 [ 413.978990][ T9216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.001992][ T9216] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.280935][ T9226] netlink: 868 bytes leftover after parsing attributes in process `syz.2.959'. [ 414.727727][ T28] audit: type=1800 audit(1754645168.026:54): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.955" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 414.994401][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.024295][ T9229] netlink: 868 bytes leftover after parsing attributes in process `syz.2.959'. [ 416.277665][ T23] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 416.396608][ T9241] loop1: detected capacity change from 0 to 512 [ 416.437761][ T9241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 416.471062][ T23] usb 4-1: config 252 has an invalid interface number: 107 but max is 0 [ 416.480372][ T23] usb 4-1: config 252 has no interface number 0 [ 416.498312][ T9241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.501504][ T23] usb 4-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 416.524945][ T9241] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.533969][ T9243] loop0: detected capacity change from 0 to 1024 [ 416.553467][ T23] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 416.569544][ T23] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 416.579159][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.587457][ T23] usb 4-1: Product: syz [ 416.591987][ T23] usb 4-1: Manufacturer: syz [ 416.596677][ T23] usb 4-1: SerialNumber: syz [ 416.839803][ T23] usb 4-1: USB disconnect, device number 17 [ 416.861757][ T9243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.886795][ T9243] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.763767][ T9195] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 417.800261][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.821350][ T9195] EXT4-fs (loop0): Remounting filesystem read-only [ 418.048202][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.159132][ T9259] loop3: detected capacity change from 0 to 1024 [ 418.246544][ T9259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.255627][ T9267] netlink: 868 bytes leftover after parsing attributes in process `syz.2.970'. [ 418.330297][ T9271] netlink: 868 bytes leftover after parsing attributes in process `syz.2.970'. [ 418.356713][ T9270] loop0: detected capacity change from 0 to 1024 [ 418.528166][ T9270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.577237][ T9270] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.321580][ T28] audit: type=1800 audit(1754645172.516:55): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.968" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 419.392752][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.673676][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.746986][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 420.596403][ T9292] loop0: detected capacity change from 0 to 512 [ 420.629300][ T9292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.675501][ T9292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.734336][ T9292] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.709772][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.894634][ T9312] netlink: 868 bytes leftover after parsing attributes in process `syz.3.981'. [ 423.052405][ T9315] netlink: 868 bytes leftover after parsing attributes in process `syz.3.981'. [ 423.776126][ T9322] loop0: detected capacity change from 0 to 1024 [ 423.831566][ T9322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.868401][ T9322] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.908866][ T9326] loop1: detected capacity change from 0 to 1024 [ 425.146973][ T9326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.683682][ T9265] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 425.735469][ T28] audit: type=1800 audit(1754645179.036:56): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.982" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 425.915905][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.938706][ T9265] EXT4-fs (loop0): Remounting filesystem read-only [ 425.963592][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.183690][ T9344] loop1: detected capacity change from 0 to 512 [ 426.198297][ T9346] loop0: detected capacity change from 0 to 1024 [ 426.235525][ T9344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.272540][ T9346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.319139][ T9344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.372765][ T9346] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.381819][ T9344] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.793248][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.805246][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.815965][ T9364] loop3: detected capacity change from 0 to 128 [ 427.848058][ T9364] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 427.873896][ T9364] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 428.067905][ T9367] netlink: 860 bytes leftover after parsing attributes in process `syz.0.993'. [ 429.812395][ T9374] netlink: 860 bytes leftover after parsing attributes in process `syz.0.993'. [ 429.866040][ T9375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 430.368795][ T9380] loop0: detected capacity change from 0 to 1024 [ 430.466968][ T9380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.526281][ T9380] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.572318][ T9384] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 430.620070][ T9384] EXT4-fs (loop0): Remounting filesystem read-only [ 431.764043][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.435092][ T9396] loop3: detected capacity change from 0 to 1024 [ 432.687789][ T9396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.526994][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.605644][ T9408] loop1: detected capacity change from 0 to 512 [ 433.621541][ T9408] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.687486][ T9408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.748812][ T9408] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.948421][ T9412] loop3: detected capacity change from 0 to 1024 [ 434.023895][ T9412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.073704][ T9412] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.723732][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.142136][ T9401] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 435.203018][ T9401] EXT4-fs (loop3): Remounting filesystem read-only [ 435.308429][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.104768][ T9426] loop0: detected capacity change from 0 to 1024 [ 437.124262][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 437.186368][ T9426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.260406][ T9426] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.755077][ T27] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 438.155287][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.323153][ T27] usb 4-1: config 252 has an invalid interface number: 107 but max is 0 [ 438.354021][ T27] usb 4-1: config 252 has no interface number 0 [ 438.374390][ T27] usb 4-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 438.399158][ T27] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 438.423175][ T27] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 438.432899][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.451567][ T27] usb 4-1: Product: syz [ 438.455983][ T27] usb 4-1: Manufacturer: syz [ 438.603176][ T27] usb 4-1: SerialNumber: syz [ 438.889687][ T27] usb 4-1: USB disconnect, device number 18 [ 440.217926][ T9453] loop1: detected capacity change from 0 to 512 [ 440.246400][ T9453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.353027][ T9453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.380638][ T9453] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.428160][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.434622][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.796799][ T9466] loop3: detected capacity change from 0 to 256 [ 441.903813][ T9466] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 441.992999][ T9466] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 442.358007][ T28] audit: type=1800 audit(1754645195.556:57): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1014" name="file1" dev="loop3" ino=1048799 res=0 errno=0 [ 442.415032][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.729598][ T9471] loop1: detected capacity change from 0 to 2048 [ 442.827114][ T9471] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.913883][ T9471] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.1016: iget: bad i_size value: 8796093031208 [ 443.455273][ T9471] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 443.487881][ T9481] loop3: detected capacity change from 0 to 1024 [ 444.098159][ T9481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.161594][ T9481] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.567006][ T5786] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 444.802825][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1021'. [ 445.031541][ T23] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 446.055679][ T23] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 446.101509][ T23] usb 2-1: config 252 has no interface number 0 [ 446.121711][ T23] usb 2-1: config 252 interface 107 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 446.151534][ T23] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 446.175920][ T23] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 446.185981][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.201521][ T23] usb 2-1: Product: syz [ 446.212270][ T23] usb 2-1: Manufacturer: syz [ 446.226089][ T23] usb 2-1: SerialNumber: syz [ 446.459726][ T23] usb 2-1: USB disconnect, device number 16 [ 446.557566][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.839047][ T9515] loop3: detected capacity change from 0 to 1024 [ 447.055759][ T9515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.511238][ T9526] ================================================================== [ 448.519379][ T9526] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 448.527166][ T9526] Read of size 18446744073709551572 at addr ffff88801cf7b050 by task syz.3.1030/9526 [ 448.536653][ T9526] [ 448.539029][ T9526] CPU: 1 PID: 9526 Comm: syz.3.1030 Not tainted 6.6.101-syzkaller #0 [ 448.547584][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.557693][ T9526] Call Trace: [ 448.561087][ T9526] [ 448.564057][ T9526] dump_stack_lvl+0x16c/0x230 [ 448.568869][ T9526] ? read_lock_is_recursive+0x20/0x20 [ 448.574291][ T9526] ? show_regs_print_info+0x20/0x20 [ 448.579624][ T9526] ? load_image+0x3b0/0x3b0 [ 448.584301][ T9526] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 448.589723][ T9526] ? __virt_addr_valid+0x18c/0x540 [ 448.594972][ T9526] ? __virt_addr_valid+0x469/0x540 [ 448.600210][ T9526] print_report+0xac/0x220 [ 448.604663][ T9526] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 448.610323][ T9526] kasan_report+0x117/0x150 [ 448.614956][ T9526] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 448.620548][ T9526] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 448.626055][ T9526] kasan_check_range+0x288/0x290 [ 448.631201][ T9526] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 448.636745][ T9526] __asan_memmove+0x29/0x70 [ 448.641329][ T9526] ext4_xattr_set_entry+0x94b/0x1e90 [ 448.646907][ T9526] ext4_xattr_block_set+0xae3/0x32a0 [ 448.652347][ T9526] ? ext4_destroy_inode+0xe8/0x1b0 [ 448.657601][ T9526] ? ext4_destroy_inode+0x1b0/0x1b0 [ 448.662854][ T9526] ? proc_nr_inodes+0x230/0x230 [ 448.667931][ T9526] ? preempt_schedule_thunk+0x1a/0x30 [ 448.673470][ T9526] ? _raw_spin_unlock+0x3a/0x40 [ 448.678416][ T9526] ? ext4_xattr_block_find+0x350/0x350 [ 448.683942][ T9526] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 448.689369][ T9526] ext4_xattr_set_handle+0x10a1/0x1290 [ 448.694905][ T9526] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 448.701384][ T9526] ? __ext4_journal_start_sb+0x259/0x570 [ 448.707089][ T9526] ext4_xattr_set+0x22d/0x320 [ 448.711839][ T9526] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 448.717553][ T9526] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 448.723148][ T9526] ? __vfs_setxattr+0x2e3/0x470 [ 448.728036][ T9526] ? ext4_xattr_security_get+0x40/0x40 [ 448.733710][ T9526] __vfs_setxattr+0x431/0x470 [ 448.738738][ T9526] __vfs_setxattr_noperm+0x12d/0x5e0 [ 448.744076][ T9526] vfs_setxattr+0x16c/0x2f0 [ 448.748621][ T9526] ? xattr_permission+0x470/0x470 [ 448.753702][ T9526] ? __mnt_want_write+0x223/0x2a0 [ 448.758768][ T9526] ? path_setxattr+0x314/0x550 [ 448.765319][ T9526] path_setxattr+0x362/0x550 [ 448.770136][ T9526] ? simple_xattrs_free+0x150/0x150 [ 448.775518][ T9526] ? lockdep_hardirqs_on+0x98/0x150 [ 448.780764][ T9526] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 448.786670][ T9526] __x64_sys_lsetxattr+0xb8/0xd0 [ 448.791825][ T9526] do_syscall_64+0x55/0xb0 [ 448.796337][ T9526] ? clear_bhb_loop+0x40/0x90 [ 448.801059][ T9526] ? clear_bhb_loop+0x40/0x90 [ 448.805848][ T9526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.811806][ T9526] RIP: 0033:0x7f1bbd58ebe9 [ 448.816455][ T9526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.836108][ T9526] RSP: 002b:00007f1bbb7d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 448.844666][ T9526] RAX: ffffffffffffffda RBX: 00007f1bbd7b6090 RCX: 00007f1bbd58ebe9 [ 448.852687][ T9526] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 448.860792][ T9526] RBP: 00007f1bbd611e19 R08: 0000000000000001 R09: 0000000000000000 [ 448.865782][ T9535] loop0: detected capacity change from 0 to 1024 [ 448.868784][ T9526] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 448.868802][ T9526] R13: 00007f1bbd7b6128 R14: 00007f1bbd7b6090 R15: 00007ffca383c618 [ 448.868828][ T9526] [ 448.868836][ T9526] [ 448.868841][ T9526] Allocated by task 9526: [ 448.868860][ T9526] kasan_set_track+0x4e/0x70 [ 448.905993][ T9526] __kasan_kmalloc+0x8f/0xa0 [ 448.910639][ T9526] __kmalloc_node_track_caller+0xb2/0x230 [ 448.912643][ T9535] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 448.916392][ T9526] kmemdup+0x2b/0x70 [ 448.916422][ T9526] ext4_xattr_block_set+0x9e5/0x32a0 [ 448.916450][ T9526] ext4_xattr_set_handle+0x10a1/0x1290 [ 448.942637][ T9526] ext4_xattr_set+0x22d/0x320 [ 448.947459][ T9526] __vfs_setxattr+0x431/0x470 [ 448.952197][ T9526] __vfs_setxattr_noperm+0x12d/0x5e0 [ 448.957702][ T9526] vfs_setxattr+0x16c/0x2f0 [ 448.962265][ T9526] path_setxattr+0x362/0x550 [ 448.966991][ T9526] __x64_sys_lsetxattr+0xb8/0xd0 [ 448.972063][ T9526] do_syscall_64+0x55/0xb0 [ 448.976560][ T9526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.982521][ T9526] [ 448.984877][ T9526] The buggy address belongs to the object at ffff88801cf7b000 [ 448.984877][ T9526] which belongs to the cache kmalloc-1k of size 1024 [ 448.998978][ T9526] The buggy address is located 80 bytes inside of [ 448.998978][ T9526] 1024-byte region [ffff88801cf7b000, ffff88801cf7b400) [ 449.012626][ T9526] [ 449.015004][ T9526] The buggy address belongs to the physical page: [ 449.021463][ T9526] page:ffffea000073de00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cf78 [ 449.031661][ T9526] head:ffffea000073de00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 449.040817][ T9526] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 449.048862][ T9526] page_type: 0xffffffff() [ 449.053236][ T9526] raw: 00fff00000000840 ffff888017841dc0 ffffea0001fc9e00 dead000000000002 [ 449.061950][ T9526] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 449.070574][ T9526] page dumped because: kasan: bad access detected [ 449.077030][ T9526] page_owner tracks the page as allocated [ 449.082779][ T9526] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5532, tgid 5532 (start-stop-daem), ts 55726551219, free_ts 55710906176 [ 449.103755][ T9526] post_alloc_hook+0x1cd/0x210 [ 449.108757][ T9526] get_page_from_freelist+0x195c/0x19f0 [ 449.114362][ T9526] __alloc_pages+0x1e3/0x460 [ 449.119003][ T9526] alloc_slab_page+0x5d/0x170 [ 449.123732][ T9526] new_slab+0x87/0x2e0 [ 449.127852][ T9526] ___slab_alloc+0xc6d/0x12f0 [ 449.131034][ T9535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.132561][ T9526] __kmem_cache_alloc_node+0x1a2/0x260 [ 449.132593][ T9526] __kmalloc+0xa4/0x240 [ 449.132619][ T9526] tomoyo_init_log+0x1a52/0x1f10 [ 449.132642][ T9526] tomoyo_supervisor+0x32d/0x1080 [ 449.132664][ T9526] tomoyo_env_perm+0x14a/0x1e0 [ 449.132688][ T9526] tomoyo_find_next_domain+0x1594/0x1a60 [ 449.132715][ T9526] tomoyo_bprm_check_security+0x116/0x170 [ 449.132733][ T9526] security_bprm_check+0x62/0xa0 [ 449.132757][ T9526] bprm_execve+0xa51/0x16f0 [ 449.132781][ T9526] do_execveat_common+0x51b/0x6c0 [ 449.132805][ T9526] page last free stack trace: [ 449.132812][ T9526] free_unref_page_prepare+0x7ce/0x8e0 [ 449.132839][ T9526] free_unref_page+0x32/0x2e0 [ 449.150207][ T9535] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.150389][ T9526] __slab_free+0x35e/0x410 [ 449.225519][ T9526] qlist_free_all+0x75/0xe0 [ 449.230172][ T9526] kasan_quarantine_reduce+0x143/0x160 [ 449.235698][ T9526] __kasan_slab_alloc+0x22/0x80 [ 449.240677][ T9526] slab_post_alloc_hook+0x6e/0x4d0 [ 449.245840][ T9526] kmem_cache_alloc+0x11e/0x2e0 [ 449.250910][ T9526] alloc_pid+0xa1/0xc20 [ 449.255198][ T9526] copy_process+0x1967/0x3d70 [ 449.259919][ T9526] kernel_clone+0x21b/0x840 [ 449.264553][ T9526] __ia32_sys_vfork+0xad/0x100 [ 449.269358][ T9526] do_syscall_64+0x55/0xb0 [ 449.273813][ T9526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.279740][ T9526] [ 449.282075][ T9526] Memory state around the buggy address: [ 449.287723][ T9526] ffff88801cf7af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 449.295903][ T9526] ffff88801cf7af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 449.303996][ T9526] >ffff88801cf7b000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.312084][ T9526] ^ [ 449.318854][ T9526] ffff88801cf7b080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.326932][ T9526] ffff88801cf7b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.335093][ T9526] ================================================================== [ 449.408757][ T9526] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 449.416639][ T9526] CPU: 0 PID: 9526 Comm: syz.3.1030 Not tainted 6.6.101-syzkaller #0 [ 449.424746][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.435098][ T9526] Call Trace: [ 449.438460][ T9526] [ 449.441430][ T9526] dump_stack_lvl+0x16c/0x230 [ 449.446160][ T9526] ? show_regs_print_info+0x20/0x20 [ 449.451397][ T9526] ? load_image+0x3b0/0x3b0 [ 449.455945][ T9526] panic+0x2c0/0x710 [ 449.459867][ T9526] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 449.466058][ T9526] ? bpf_jit_dump+0xd0/0xd0 [ 449.470608][ T9526] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 449.476712][ T9526] ? _raw_spin_unlock+0x40/0x40 [ 449.481682][ T9526] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 449.487226][ T9526] check_panic_on_warn+0x84/0xa0 [ 449.492190][ T9526] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 449.497755][ T9526] end_report+0x6f/0x140 [ 449.502012][ T9526] kasan_report+0x128/0x150 [ 449.506537][ T9526] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 449.512118][ T9526] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 449.517777][ T9526] kasan_check_range+0x288/0x290 [ 449.522736][ T9526] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 449.528243][ T9526] __asan_memmove+0x29/0x70 [ 449.532858][ T9526] ext4_xattr_set_entry+0x94b/0x1e90 [ 449.538194][ T9526] ext4_xattr_block_set+0xae3/0x32a0 [ 449.543515][ T9526] ? ext4_destroy_inode+0xe8/0x1b0 [ 449.548695][ T9526] ? ext4_destroy_inode+0x1b0/0x1b0 [ 449.553922][ T9526] ? proc_nr_inodes+0x230/0x230 [ 449.558790][ T9526] ? preempt_schedule_thunk+0x1a/0x30 [ 449.564282][ T9526] ? _raw_spin_unlock+0x3a/0x40 [ 449.569164][ T9526] ? ext4_xattr_block_find+0x350/0x350 [ 449.574648][ T9526] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 449.580051][ T9526] ext4_xattr_set_handle+0x10a1/0x1290 [ 449.585626][ T9526] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 449.591658][ T9526] ? __ext4_journal_start_sb+0x259/0x570 [ 449.597365][ T9526] ext4_xattr_set+0x22d/0x320 [ 449.602072][ T9526] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 449.607759][ T9526] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 449.613517][ T9526] ? __vfs_setxattr+0x2e3/0x470 [ 449.618422][ T9526] ? ext4_xattr_security_get+0x40/0x40 [ 449.623984][ T9526] __vfs_setxattr+0x431/0x470 [ 449.628689][ T9526] __vfs_setxattr_noperm+0x12d/0x5e0 [ 449.633995][ T9526] vfs_setxattr+0x16c/0x2f0 [ 449.638522][ T9526] ? xattr_permission+0x470/0x470 [ 449.643567][ T9526] ? __mnt_want_write+0x223/0x2a0 [ 449.648619][ T9526] ? path_setxattr+0x314/0x550 [ 449.653415][ T9526] path_setxattr+0x362/0x550 [ 449.658027][ T9526] ? simple_xattrs_free+0x150/0x150 [ 449.663270][ T9526] ? lockdep_hardirqs_on+0x98/0x150 [ 449.668506][ T9526] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 449.674180][ T9526] __x64_sys_lsetxattr+0xb8/0xd0 [ 449.679151][ T9526] do_syscall_64+0x55/0xb0 [ 449.683585][ T9526] ? clear_bhb_loop+0x40/0x90 [ 449.688426][ T9526] ? clear_bhb_loop+0x40/0x90 [ 449.693123][ T9526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.699049][ T9526] RIP: 0033:0x7f1bbd58ebe9 [ 449.703484][ T9526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.723108][ T9526] RSP: 002b:00007f1bbb7d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 449.731544][ T9526] RAX: ffffffffffffffda RBX: 00007f1bbd7b6090 RCX: 00007f1bbd58ebe9 [ 449.739536][ T9526] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 449.747524][ T9526] RBP: 00007f1bbd611e19 R08: 0000000000000001 R09: 0000000000000000 [ 449.755509][ T9526] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 449.763492][ T9526] R13: 00007f1bbd7b6128 R14: 00007f1bbd7b6090 R15: 00007ffca383c618 [ 449.771495][ T9526] [ 449.774818][ T9526] Kernel Offset: disabled [ 449.779149][ T9526] Rebooting in 86400 seconds..