last executing test programs: 16m59.027285119s ago: executing program 3 (id=829): prlimit64(0x0, 0xe, 0x0, 0x0) userfaultfd(0x80801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setresgid(0xee00, 0xee01, 0x0) unshare(0x400) setresgid(0x0, 0x0, 0xee01) listen(r1, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xffff, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, r3, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x82}, 0x0) r5 = semget$private(0x0, 0x4, 0x29b) semop(r5, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, r6, 0x0, 0x0, 0x50, 0xd49}, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) 16m56.66004384s ago: executing program 3 (id=836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 16m55.499142864s ago: executing program 3 (id=840): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), &(0x7f0000000200)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) 16m55.452936258s ago: executing program 3 (id=841): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) 16m54.233485966s ago: executing program 3 (id=845): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x20804, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x9, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x6f5e, 0x0) inotify_init() socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x20000090) 16m52.243942144s ago: executing program 3 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), &(0x7f0000000200)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) 16m35.35440613s ago: executing program 32 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), &(0x7f0000000200)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) 12m47.269965286s ago: executing program 1 (id=1336): syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) 12m45.983510251s ago: executing program 1 (id=1338): syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) 12m44.274943623s ago: executing program 1 (id=1346): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4a, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 12m42.682319504s ago: executing program 1 (id=1350): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB=',uid=', @ANYRESHEX, @ANYBLOB="2c4b454c8325e01cb24c2f3c7bd462c5b8f86ca56891f8085db68de13331ff83f0b12d3c55ab09898b831162e94af5aab93746cc9c2846172beff34b815944f62e60470cf4d16331b53bb359d1c446b18974ae35bced61d48cfc8149eb43bec86d871bc7c43763c6e7daebe349c300000001000000012dc90b9a5f8d0ff4117ef90aff1413e2e919558d4a6412b5fdaa2694c41bab32c5c81e01243ccef8dcd85a46cfb92323a8070db43b1ef562691c070e2749"], 0x1, 0x6f6, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3040, 0x40) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200400, 0x0, 0x1, 0x0, 0x0) 12m39.765968245s ago: executing program 1 (id=1355): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x244, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x4004000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_unix(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a183ffffffff00000000050000"], 0x20}}, 0x4c044) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x45, 0xc11, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) rename(0x0, &(0x7f0000000f00)='./file1\x00') bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 12m37.710384608s ago: executing program 1 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80009, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_pidfd_open(r0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m22.09992419s ago: executing program 33 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80009, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_pidfd_open(r0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.83586372s ago: executing program 0 (id=3187): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000600)={[{@type={'type', 0x3d, "9d24b47a"}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {}, {@umask={'umask', 0x3d, 0x9}}, {@creator={'creator', 0x3d, "811b705a"}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}]}, 0x1, 0x2db, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000002f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x111a00, 0x0) 4.811781092s ago: executing program 6 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10104, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x6c790d25}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 4.701905462s ago: executing program 0 (id=3190): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x1101, 0x0}) 4.624906768s ago: executing program 0 (id=3191): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x24060400) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) syncfs(r3) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 4.534225767s ago: executing program 5 (id=3192): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 3.753256686s ago: executing program 5 (id=3194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x67) syz_open_dev$ttys(0xc, 0x2, 0x1) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) 3.745632477s ago: executing program 6 (id=3195): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x24060400) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) syncfs(r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 3.744926697s ago: executing program 4 (id=3196): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {0x0}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23", 0x27}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.284666127s ago: executing program 5 (id=3198): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x3fffffff]}}], 0xffc8) 2.265734479s ago: executing program 0 (id=3199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="f8eb09bd60569cd02c8ac30000a4fa", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.263606279s ago: executing program 6 (id=3200): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xfd7) 2.162139458s ago: executing program 5 (id=3202): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @local, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcfe}}) 2.141424339s ago: executing program 2 (id=3203): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) close(r5) 2.13405457s ago: executing program 5 (id=3204): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x82002, 0x0) read(r0, &(0x7f0000000740)=""/4096, 0x1000) 2.114783562s ago: executing program 6 (id=3205): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 2.114102052s ago: executing program 0 (id=3215): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) 2.043951898s ago: executing program 5 (id=3206): syz_usb_connect$cdc_ncm(0x6, 0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902740002010420040904000001020d0000052406000105240000020006000806241a05ed0d0724140e00400005240100020c241b0300af20040401000809058103000258050809"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.043348819s ago: executing program 4 (id=3207): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f8", 0xd}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {0x0}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23", 0x27}], 0x8, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.366323119s ago: executing program 6 (id=3208): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="757466383d302c726f6469722c6e66732c636865636b3d7374726963742c636f6465706167653d3836392c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c756e695f786c6174653d312c696f636861727365743d6d6163726f6d616e69616e2c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d302c00b46de7eb9039f9a8616d51264a82ef6e1475a9e4eb76dad7283eb47a7ca34ccea685dd859dc17fa9ebb7d2650e12671c262acf272f25e9e4e593672e4f85744c0ebc2858e6c1e8346cd7021162573e1808e9401ac6afde2591871301085075e80457b07fe92dbf3b78e2146874282550ab57d50bc57b32ec58e342685311"], 0x26, 0x336, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 1.258102918s ago: executing program 0 (id=3209): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x24060400) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) syncfs(r3) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 1.255375528s ago: executing program 2 (id=3210): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x24060400) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2401) syncfs(r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x3fe00, @initdev={0xfe, 0x88, '\x00', 0xde, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 1.176861845s ago: executing program 4 (id=3211): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @default, @bpq0, 0xfe, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) 821.723187ms ago: executing program 4 (id=3212): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="00200000000100004bee50a48b48", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 372.759127ms ago: executing program 2 (id=3213): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f25c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xe7, 0x7ff}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) 245.864608ms ago: executing program 2 (id=3214): syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000009ec0)='./file1\x00', 0x3210441, &(0x7f0000000a00)=ANY=[@ANYBLOB="6561733d6e6f2c63686b64736b3d6e6f2c636173653d617369732c636865636b3d6e6f6e652c003e4909434021b44bbad01483c596fc4259372d14f45e881317658539e310f419a224330820632effbba134030483a43efe98e17b021e9e45f7470de36ffdaecc55a2573d03aa9ba2d7ca7e65a88cb8242bf7fdab4f856ab422d31784976acae6f95b173757492a2d45fa544b730fdf67f07175746d7dd9897a439a83b5394bcfe5f1f59c77de59ad8d473bda63cd1611d919af2438f975c63df2e8e391d74366690f73a4efef8437c13392d78f3da1a28fc40246d708254fa0acd482bcf4b9821a7bb1a66a080898eec148dc1aa87e3ce8b49382a8fae2fdd9cd6f0543214ac04ea8e0d7bb24d152a3d33e3e48d15014e8966310d3962982750df69c76acf78f3a3983d95551c11dd9ca8a88", @ANYRES16, @ANYRES16], 0x1, 0x9e36, &(0x7f000000a040)="$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") statfs(&(0x7f0000000200)='.\x00', 0x0) 245.620799ms ago: executing program 4 (id=3216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 180.522794ms ago: executing program 4 (id=3217): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") open(&(0x7f00000003c0)='./file2\x00', 0x430dc882a8a7f17, 0xc) 118.57135ms ago: executing program 2 (id=3218): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0xffff1432, 0x0, 0x4, 0x100000, 0x1ff, {}, {0x3, 0x2, 0x1, 0x43, 0x8, 0x4, "77bfc368"}, 0x4, 0x4, {0x0}, 0xf1}) 102.632421ms ago: executing program 6 (id=3219): socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b800000015000100000000000000000000000000000000000000006401010200000000000000000000000000000000fffe00000a00100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000fcffffffffffffff00"/84], 0xb8}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2024) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) lseek(r4, 0xfffffffffffffff5, 0x1) read$alg(r4, &(0x7f0000002540)=""/151, 0x97) socket$inet6(0xa, 0x3, 0x7) pipe2$9p(0x0, 0x84000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=3220): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r6) llistxattr(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): n is not specified [ 1055.824505][T14137] loop6: detected capacity change from 0 to 256 [ 1056.939005][T14146] loop6: detected capacity change from 0 to 1024 [ 1057.936291][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1058.012190][T14156] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1058.827933][T14164] loop6: detected capacity change from 0 to 128 [ 1059.567637][T14164] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1059.592413][T14164] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.686868][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2218'. [ 1061.321496][T14190] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.342462][T14190] xt_hashlimit: size too large, truncated to 1048576 [ 1061.357894][T14190] xt_hashlimit: overflow, try lower: 9223372036854775807/9 [ 1061.380658][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 1061.407868][T14190] 8021q: VLANs not supported on ip6tnl0 [ 1061.747786][T14197] loop0: detected capacity change from 0 to 1024 [ 1062.448442][T14197] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1062.483656][T14197] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1062.532285][T14197] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2222: Freeing blocks not in datazone - block = 0, count = 4096 [ 1062.669845][T14197] EXT4-fs (loop0): 1 orphan inode deleted [ 1062.682598][T14197] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1062.869320][T14205] loop4: detected capacity change from 0 to 1024 [ 1063.298228][T14213] hfsplus: found bad thread record in catalog [ 1063.451618][T14219] loop5: detected capacity change from 0 to 1024 [ 1063.682515][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2228'. [ 1067.287899][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1068.376693][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1068.512240][T14257] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2235'. [ 1068.803597][T14256] loop5: detected capacity change from 0 to 1024 [ 1068.898689][T14256] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1068.937244][T14256] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1068.999137][T14256] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.2238: Freeing blocks not in datazone - block = 0, count = 4096 [ 1069.223597][T14256] EXT4-fs (loop5): 1 orphan inode deleted [ 1069.289642][T14256] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1073.596988][T14315] loop0: detected capacity change from 0 to 1024 [ 1074.735780][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1075.264400][T14336] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2254'. [ 1077.626200][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1077.626216][ T26] audit: type=1326 audit(1771539338.564:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1078.211813][ T26] audit: type=1326 audit(1771539338.564:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1078.242593][ T26] audit: type=1326 audit(1771539338.564:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1078.285316][T14364] loop4: detected capacity change from 0 to 256 [ 1078.332625][ T26] audit: type=1326 audit(1771539338.564:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1078.520448][ T26] audit: type=1326 audit(1771539338.564:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1078.572799][ T26] audit: type=1326 audit(1771539338.564:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1078.605304][ T26] audit: type=1326 audit(1771539338.564:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1078.662002][ T26] audit: type=1326 audit(1771539338.564:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1079.605784][ T26] audit: type=1326 audit(1771539338.564:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1079.668037][ T26] audit: type=1326 audit(1771539338.564:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.2.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1079.880745][T14383] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2257'. [ 1080.454597][T14389] loop4: detected capacity change from 0 to 4096 [ 1080.495792][T14389] NILFS: invalid option "cp=0x0000000000000002": read-only option is not specified [ 1081.359518][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'. [ 1082.450667][T14409] loop5: detected capacity change from 0 to 1024 [ 1086.179722][T14418] loop6: detected capacity change from 0 to 1024 [ 1086.262048][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'. [ 1086.498691][T14418] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1086.575473][T14418] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1086.621341][T14418] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.2271: Freeing blocks not in datazone - block = 0, count = 4096 [ 1086.640254][T14428] device syzkaller0 entered promiscuous mode [ 1086.651292][T14418] EXT4-fs (loop6): 1 orphan inode deleted [ 1086.658043][T14418] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1089.591124][T14475] loop5: detected capacity change from 0 to 1024 [ 1089.700174][T14475] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1089.728842][T14475] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1089.776510][T14475] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.2285: Freeing blocks not in datazone - block = 0, count = 4096 [ 1089.879907][T14475] EXT4-fs (loop5): 1 orphan inode deleted [ 1089.892784][T14475] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1090.819418][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2288'. [ 1091.707295][T14501] loop6: detected capacity change from 0 to 1024 [ 1093.263110][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1093.441187][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2293'. [ 1093.825743][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1093.825757][ T26] audit: type=1326 audit(1771539355.054:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1093.900060][ T26] audit: type=1326 audit(1771539355.054:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1093.929715][ T26] audit: type=1326 audit(1771539355.054:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1093.959463][ T26] audit: type=1326 audit(1771539355.054:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1093.988233][ T26] audit: type=1326 audit(1771539355.054:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1094.011636][ T26] audit: type=1326 audit(1771539355.054:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1094.044220][ T26] audit: type=1326 audit(1771539355.054:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1094.182663][ T26] audit: type=1326 audit(1771539355.064:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1094.437279][ T26] audit: type=1326 audit(1771539355.064:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1094.556853][ T26] audit: type=1326 audit(1771539355.064:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.2.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1094.598551][T14522] loop0: detected capacity change from 0 to 1024 [ 1094.704229][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2297'. [ 1095.425775][T14522] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1095.444361][T14522] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1095.492766][T14522] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2296: Freeing blocks not in datazone - block = 0, count = 4096 [ 1095.552774][T14522] EXT4-fs (loop0): 1 orphan inode deleted [ 1095.579043][T14522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1095.584218][T14529] loop5: detected capacity change from 0 to 4096 [ 1095.859827][T14536] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2295'. [ 1096.887055][T14538] ntfs3: loop5: ino=21, "file1" fallocate(0x20) is not supported [ 1098.785224][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2305'. [ 1098.800383][T14568] loop5: detected capacity change from 0 to 128 [ 1098.979942][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2309'. [ 1099.380025][T14568] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1099.459949][T14568] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.388659][T14582] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2310'. [ 1101.461822][T14592] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2314'. [ 1101.982828][ T26] audit: type=1326 audit(1771539363.184:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1102.117300][ T26] audit: type=1326 audit(1771539363.184:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1102.166476][ T26] audit: type=1326 audit(1771539363.194:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1102.242614][ T26] audit: type=1326 audit(1771539363.204:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1102.419138][T14595] loop0: detected capacity change from 0 to 1024 [ 1102.426889][ T26] audit: type=1326 audit(1771539363.204:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1102.517134][T14600] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2311'. [ 1102.618052][ T26] audit: type=1326 audit(1771539363.204:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1102.652911][ T26] audit: type=1326 audit(1771539363.234:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1103.455224][ T26] audit: type=1326 audit(1771539363.244:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1103.477923][ T26] audit: type=1326 audit(1771539363.244:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1103.500569][ T26] audit: type=1326 audit(1771539363.244:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14586 comm="syz.4.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1103.701730][ T1174] hfsplus: b-tree write err: -5, ino 4 [ 1104.200024][T14616] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2318'. [ 1104.209742][T14616] openvswitch: netlink: ct_state flags 00030000 unsupported [ 1105.037114][T14617] loop0: detected capacity change from 0 to 1024 [ 1105.183690][ T1174] hfsplus: b-tree write err: -5, ino 4 [ 1105.888012][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2320'. [ 1106.395388][T14635] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2323'. [ 1107.519577][T14644] loop4: detected capacity change from 0 to 1024 [ 1107.535582][T14654] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2326'. [ 1107.728266][T14655] loop6: detected capacity change from 0 to 1024 [ 1107.880343][T14659] hfsplus: found bad thread record in catalog [ 1108.110949][T14658] loop0: detected capacity change from 0 to 1024 [ 1108.411917][T14662] hfsplus: found bad thread record in catalog [ 1108.581473][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1108.848656][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1109.264071][T14668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2332'. [ 1109.276242][T14668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2332'. [ 1109.849898][T14664] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2331'. [ 1111.532955][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1111.571005][T14683] netlink: 'syz.2.2336': attribute type 30 has an invalid length. [ 1111.602802][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 1111.671044][T14683] bond0: option arp_missed_max: invalid value (0) [ 1111.699402][T14683] bond0: option arp_missed_max: allowed values 1 - 255 [ 1111.835618][T14694] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2338'. [ 1112.637695][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 1113.420133][T14705] loop6: detected capacity change from 0 to 1024 [ 1114.310370][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1114.407153][T14714] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2339'. [ 1115.254188][T14733] loop4: detected capacity change from 0 to 1024 [ 1115.785162][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.791636][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.998308][T14738] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2350'. [ 1116.302278][T14743] hfsplus: found bad thread record in catalog [ 1116.637091][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1116.881205][T14748] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1117.731373][T14750] loop4: detected capacity change from 0 to 1024 [ 1117.851679][T14752] loop6: detected capacity change from 0 to 128 [ 1117.927756][T14752] FAT-fs (loop6): bogus number of reserved sectors [ 1117.958656][T14752] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1117.995678][T14752] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1118.070843][T14756] vivid-008: disconnect [ 1118.806035][T14753] vivid-008: reconnect [ 1119.132631][T14761] loop6: detected capacity change from 0 to 256 [ 1120.165134][T14765] hfsplus: found bad thread record in catalog [ 1121.167577][T14775] loop6: detected capacity change from 0 to 1024 [ 1122.863874][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1123.770262][T14792] loop6: detected capacity change from 0 to 256 [ 1125.701930][T14792] exfat: Deprecated parameter 'namecase' [ 1125.765969][T14792] exfat: Unknown parameter 'zero_size_dir' [ 1129.092766][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2368'. [ 1129.538828][T14820] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2369'. [ 1129.948809][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1130.671643][T14830] loop6: detected capacity change from 0 to 16 [ 1131.017445][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1131.018912][ T26] audit: type=1326 audit(1771539392.242:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1131.120792][ T26] audit: type=1326 audit(1771539392.242:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1131.155403][ T26] audit: type=1326 audit(1771539392.242:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1131.597284][T14830] erofs: (device loop6): mounted with root inode @ nid 36. [ 1131.630610][ T26] audit: type=1326 audit(1771539392.242:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1131.654635][T14825] erofs: (device loop6): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1131.686394][ T4191] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1132.008213][T14825] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 1132.146909][ T26] audit: type=1326 audit(1771539392.242:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1132.341511][ T26] audit: type=1326 audit(1771539392.252:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1132.372652][ T26] audit: type=1326 audit(1771539392.252:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1132.434875][ T26] audit: type=1326 audit(1771539392.252:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1132.511859][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2377'. [ 1132.551094][ T26] audit: type=1326 audit(1771539392.252:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1132.682659][ T26] audit: type=1326 audit(1771539392.252:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.5.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1135.565153][T14870] loop6: detected capacity change from 0 to 1024 [ 1135.869316][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'. [ 1137.835764][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1138.878552][T14898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2389'. [ 1139.420074][ T4548] hfsplus: b-tree write err: -5, ino 4 [ 1140.852582][T14922] loop0: detected capacity change from 0 to 32768 [ 1141.528462][T14926] loop6: detected capacity change from 0 to 1024 [ 1141.640610][T14922] XFS (loop0): Mounting V5 Filesystem [ 1143.186169][T14926] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1143.425660][T14926] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1143.551770][T14926] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.2397: Freeing blocks not in datazone - block = 0, count = 4096 [ 1143.781248][T14922] XFS (loop0): Ending clean mount [ 1143.835408][T14922] XFS (loop0): Quotacheck needed: Please wait. [ 1143.948639][T14926] EXT4-fs (loop6): 1 orphan inode deleted [ 1144.052205][T14926] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1144.796975][T14955] loop4: detected capacity change from 0 to 1024 [ 1144.873814][T14922] XFS (loop0): Quotacheck: Done. [ 1144.913074][ T4184] XFS (loop0): Unmounting Filesystem [ 1144.925813][T14957] loop6: detected capacity change from 0 to 1024 [ 1145.033517][T14961] device syzkaller0 entered promiscuous mode [ 1145.866428][T14969] loop5: detected capacity change from 0 to 1024 [ 1146.071987][T14972] hfsplus: found bad thread record in catalog [ 1146.255499][T14975] hfsplus: found bad thread record in catalog [ 1146.628431][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1148.241962][T14990] loop0: detected capacity change from 0 to 1024 [ 1148.461247][T14990] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1148.481043][T14990] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1148.522906][T14990] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2405: Freeing blocks not in datazone - block = 0, count = 4096 [ 1148.612171][T14990] EXT4-fs (loop0): 1 orphan inode deleted [ 1148.652702][T14990] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1149.257279][T15005] loop5: detected capacity change from 0 to 32768 [ 1149.440236][T15005] XFS (loop5): Mounting V5 Filesystem [ 1149.577010][T15005] XFS (loop5): Ending clean mount [ 1149.585909][T15005] XFS (loop5): Quotacheck needed: Please wait. [ 1149.822256][T15023] 9pnet_virtio: no channels available for device syz [ 1150.392041][T15005] XFS (loop5): Quotacheck: Done. [ 1150.956740][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1150.956847][ T26] audit: type=1800 audit(1771539412.122:493): pid=15026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2415" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 1151.179329][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1151.190538][ T7969] XFS (loop5): Unmounting Filesystem [ 1151.282460][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1151.375638][T15031] device syzkaller0 entered promiscuous mode [ 1153.967147][T15044] loop0: detected capacity change from 0 to 1024 [ 1156.352334][T15049] loop6: detected capacity change from 0 to 1024 [ 1156.767645][T15049] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1156.919411][T15049] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1156.930421][T15049] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.2424: Freeing blocks not in datazone - block = 0, count = 4096 [ 1157.073047][T15049] EXT4-fs (loop6): 1 orphan inode deleted [ 1157.082773][T15049] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1157.272733][T15073] loop4: detected capacity change from 0 to 1024 [ 1158.410780][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1158.464941][T15079] loop6: detected capacity change from 0 to 1024 [ 1159.286710][T15088] loop0: detected capacity change from 0 to 1024 [ 1159.878895][T15096] binder: BINDER_SET_CONTEXT_MGR already set [ 1159.885517][T15096] binder: 15092:15096 ioctl 4018620d 200000000040 returned -16 [ 1160.518231][T15088] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1161.092433][T15088] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1161.114305][T15088] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2431: Freeing blocks not in datazone - block = 0, count = 4096 [ 1162.211350][T15088] EXT4-fs (loop0): 1 orphan inode deleted [ 1162.249646][T15088] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1162.324850][ T1174] hfsplus: b-tree write err: -5, ino 4 [ 1162.333502][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1163.240619][T15127] loop4: detected capacity change from 0 to 1024 [ 1164.954209][T15129] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2441'. [ 1166.787037][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1167.955912][T15166] loop6: detected capacity change from 0 to 1024 [ 1168.010702][T15165] loop4: detected capacity change from 0 to 8 [ 1168.331360][T15166] hfsplus: unable to parse mount options [ 1168.506564][T15165] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1168.921594][T15174] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2452'. [ 1169.342472][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2451'. [ 1170.359533][T15197] loop5: detected capacity change from 0 to 1024 [ 1171.267588][T15219] loop4: detected capacity change from 0 to 1024 [ 1171.913689][T15219] hfsplus: unable to parse mount options [ 1176.857996][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1177.139433][T15260] loop0: detected capacity change from 0 to 1024 [ 1177.704430][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.710832][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.783427][T15260] hfsplus: unable to parse mount options [ 1177.903693][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 1178.921098][T15278] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2479'. [ 1179.773770][ T26] audit: type=1326 audit(1771539440.352:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1179.972136][ T26] audit: type=1326 audit(1771539440.352:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1180.127774][ T26] audit: type=1326 audit(1771539440.372:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1180.230916][ T26] audit: type=1326 audit(1771539440.382:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1180.788771][ T26] audit: type=1326 audit(1771539440.382:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1180.877789][ T26] audit: type=1326 audit(1771539440.392:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1181.327997][ T26] audit: type=1326 audit(1771539440.392:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1182.827357][ T26] audit: type=1326 audit(1771539440.392:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1182.851126][ T26] audit: type=1326 audit(1771539440.392:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1182.876496][ T26] audit: type=1326 audit(1771539440.402:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1182.973930][T15314] loop5: detected capacity change from 0 to 1024 [ 1184.337459][T15320] loop0: detected capacity change from 0 to 128 [ 1184.904480][ T26] audit: type=1326 audit(1771539440.402:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1184.930941][ T26] audit: type=1326 audit(1771539440.402:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1186.447607][T15327] 9pnet_virtio: no channels available for device syz [ 1186.461095][ T26] audit: type=1326 audit(1771539440.402:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1186.543230][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1186.548156][ T26] audit: type=1326 audit(1771539440.402:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1186.623414][ T26] audit: type=1326 audit(1771539440.412:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1186.676646][ T26] audit: type=1326 audit(1771539440.412:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1186.756889][ T26] audit: type=1326 audit(1771539440.412:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1186.865888][ T26] audit: type=1326 audit(1771539440.422:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1187.034180][ T26] audit: type=1326 audit(1771539440.422:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1187.270709][T15343] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2496'. [ 1187.421368][ T26] audit: type=1326 audit(1771539440.422:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.0.2477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1187.538774][T15348] loop0: detected capacity change from 0 to 128 [ 1187.657227][T15352] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2493'. [ 1188.362705][T15348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1188.375294][T15348] ext4 filesystem being mounted at /511/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.388202][T15367] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1190.396433][T15367] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1191.051185][T15374] loop4: detected capacity change from 0 to 1024 [ 1195.390924][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1196.988139][T15429] loop4: detected capacity change from 0 to 128 [ 1197.421422][T15429] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1198.258166][T15429] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1198.762461][T15455] loop0: detected capacity change from 0 to 2048 [ 1200.524886][T15455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1200.734282][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1200.734301][ T26] audit: type=1326 audit(1771539461.042:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1201.592979][T15463] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 1201.950573][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2525'. [ 1202.101743][T15477] loop6: detected capacity change from 0 to 1024 [ 1202.110946][ T26] audit: type=1326 audit(1771539461.042:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1202.133824][ T26] audit: type=1326 audit(1771539461.142:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1202.140611][T15475] loop4: detected capacity change from 0 to 1024 [ 1202.156334][ T26] audit: type=1326 audit(1771539461.142:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1202.156371][ T26] audit: type=1326 audit(1771539461.142:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1202.156396][ T26] audit: type=1326 audit(1771539461.242:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1202.156419][ T26] audit: type=1326 audit(1771539461.242:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1202.156443][ T26] audit: type=1326 audit(1771539461.242:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1202.278243][ T26] audit: type=1326 audit(1771539461.342:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1202.300930][ T26] audit: type=1326 audit(1771539461.342:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15446 comm="syz.2.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1202.431902][T15477] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1203.153900][T15477] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1203.184551][T15477] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.2526: Freeing blocks not in datazone - block = 0, count = 4096 [ 1203.269894][T15477] EXT4-fs (loop6): 1 orphan inode deleted [ 1203.301859][T15477] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1203.330718][T15492] device syzkaller0 entered promiscuous mode [ 1203.393806][ T4197] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1204.078637][ T4197] usb 6-1: Using ep0 maxpacket: 8 [ 1204.135195][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1204.317582][T15506] loop4: detected capacity change from 0 to 128 [ 1204.780296][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2532'. [ 1206.031254][ T4197] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1206.066000][ T4197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.135595][ T4197] usb 6-1: Product: syz [ 1206.184969][T15506] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1206.200449][T15506] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.236135][ T4197] usb 6-1: Manufacturer: syz [ 1206.240873][ T4197] usb 6-1: SerialNumber: syz [ 1206.482438][ T4197] usb 6-1: config 0 descriptor?? [ 1206.511651][ T4197] usb 6-1: can't set config #0, error -71 [ 1206.547016][ T4197] usb 6-1: USB disconnect, device number 3 [ 1209.651477][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2537'. [ 1210.295637][T15538] loop5: detected capacity change from 0 to 1024 [ 1210.665598][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1210.665881][ T26] audit: type=1326 audit(1771539471.892:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1210.927100][T15540] loop6: detected capacity change from 0 to 1024 [ 1210.934115][ T26] audit: type=1326 audit(1771539471.892:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1210.958301][ T26] audit: type=1326 audit(1771539471.892:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1211.213462][T15538] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1211.232840][ T26] audit: type=1326 audit(1771539471.892:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1211.250635][T15538] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1211.260753][ T26] audit: type=1326 audit(1771539471.892:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1211.301665][ T26] audit: type=1326 audit(1771539471.892:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1211.405056][ T26] audit: type=1326 audit(1771539471.902:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1211.479871][ T26] audit: type=1326 audit(1771539471.902:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1211.739762][ T26] audit: type=1326 audit(1771539471.902:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1211.803218][ T26] audit: type=1326 audit(1771539471.902:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15533 comm="syz.2.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1211.945647][T15538] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.2542: Freeing blocks not in datazone - block = 0, count = 4096 [ 1211.962752][T15538] EXT4-fs (loop5): 1 orphan inode deleted [ 1211.968766][T15538] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1212.219794][T15565] hfsplus: found bad thread record in catalog [ 1213.355884][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2548'. [ 1216.208161][T15586] loop0: detected capacity change from 0 to 1024 [ 1216.691693][T15589] loop5: detected capacity change from 0 to 1024 [ 1216.732385][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1216.740558][T15589] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1216.823784][T15589] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1216.860734][T15589] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.2551: Freeing blocks not in datazone - block = 0, count = 4096 [ 1216.907943][T15589] EXT4-fs (loop5): 1 orphan inode deleted [ 1218.412453][T15597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'. [ 1218.446545][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'. [ 1218.731634][T15589] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1219.403957][T15612] device syzkaller0 entered promiscuous mode [ 1219.780297][T15618] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2558'. [ 1220.251167][ T9] hfsplus: b-tree write err: -5, ino 4 [ 1221.057839][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2561'. [ 1222.856294][T15637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2564'. [ 1222.996657][T15642] loop6: detected capacity change from 0 to 512 [ 1223.957232][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2565'. [ 1223.972205][T15642] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1223.983441][T15642] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1224.982491][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 1225.821106][T15658] loop0: detected capacity change from 0 to 1024 [ 1225.980486][T15658] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1226.100620][T15658] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1226.108017][T15658] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2567: Freeing blocks not in datazone - block = 0, count = 4096 [ 1226.149889][T15669] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2570'. [ 1226.277383][T15658] EXT4-fs (loop0): 1 orphan inode deleted [ 1226.284001][T15658] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1226.476101][T15673] loop5: detected capacity change from 0 to 1024 [ 1226.653956][T15675] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2572'. [ 1228.653044][T15696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2576'. [ 1228.696085][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 1229.458199][T15695] hfsplus: found bad thread record in catalog [ 1229.842603][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 1232.142000][T15713] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1232.149597][T15713] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1232.890992][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'. [ 1233.503393][T15423] hfsplus: b-tree write err: -5, ino 4 [ 1234.109164][T15731] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2585'. [ 1235.472844][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2588'. [ 1235.943614][T15744] loop0: detected capacity change from 0 to 1024 [ 1236.219578][T15749] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2589'. [ 1237.420052][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1237.435630][T15752] loop6: detected capacity change from 0 to 1024 [ 1237.710907][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'. [ 1238.802673][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.814510][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.197097][T15423] hfsplus: b-tree write err: -5, ino 4 [ 1239.275014][T15769] loop0: detected capacity change from 0 to 1024 [ 1240.441689][T15778] hfsplus: found bad thread record in catalog [ 1240.570420][T15780] loop4: detected capacity change from 0 to 1024 [ 1240.870547][T15786] binder: binder_mmap: 15781 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 1241.446691][T15780] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1241.466459][T15780] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1241.473261][T15780] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2598: Freeing blocks not in datazone - block = 0, count = 4096 [ 1241.522764][T15780] EXT4-fs (loop4): 1 orphan inode deleted [ 1241.555953][T15780] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1241.654000][T15788] loop5: detected capacity change from 0 to 1024 [ 1241.840657][T15788] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1241.861487][T15788] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1242.138127][T15788] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.2600: Freeing blocks not in datazone - block = 0, count = 4096 [ 1242.242261][T15788] EXT4-fs (loop5): 1 orphan inode deleted [ 1242.268741][T15788] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1243.331509][T15802] loop5: detected capacity change from 0 to 1024 [ 1244.033980][T15322] hfsplus: b-tree write err: -5, ino 4 [ 1244.322013][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2603'. [ 1244.508666][T15423] hfsplus: b-tree write err: -5, ino 4 [ 1244.886144][T15812] loop6: detected capacity change from 0 to 40427 [ 1244.944436][T15812] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1244.952392][T15812] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1245.026781][T15812] F2FS-fs (loop6): invalid crc value [ 1245.107718][T15812] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1245.169069][T15812] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1245.176284][T15812] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1245.418585][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1245.418603][ T26] audit: type=1800 audit(1771539506.622:557): pid=15822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2607" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 1247.654443][T15836] loop4: detected capacity change from 0 to 1024 [ 1247.816975][T15836] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1247.886820][T15836] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1247.939871][T15843] loop0: detected capacity change from 0 to 1024 [ 1248.008539][T15836] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2611: Freeing blocks not in datazone - block = 0, count = 4096 [ 1248.335739][T15836] EXT4-fs (loop4): 1 orphan inode deleted [ 1248.468228][T15836] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1248.899530][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1250.034614][ T1174] attempt to access beyond end of device [ 1250.034614][ T1174] loop6: rw=1, want=79880, limit=40427 [ 1250.232017][T15873] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2620'. [ 1250.515883][ T1174] attempt to access beyond end of device [ 1250.515883][ T1174] loop6: rw=1, want=81920, limit=40427 [ 1250.639926][ T1174] attempt to access beyond end of device [ 1250.639926][ T1174] loop6: rw=1, want=51880, limit=40427 [ 1250.805977][ T1174] attempt to access beyond end of device [ 1250.805977][ T1174] loop6: rw=1, want=53248, limit=40427 [ 1251.346955][ T1174] attempt to access beyond end of device [ 1251.346955][ T1174] loop6: rw=1, want=58712, limit=40427 [ 1251.637915][T15883] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2623'. [ 1251.779614][T15887] loop4: detected capacity change from 0 to 1024 [ 1252.072780][ T4303] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1252.562871][ T4303] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1252.590486][ T4303] usb 6-1: can't read configurations, error -71 [ 1253.743337][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1253.893005][T15902] loop4: detected capacity change from 0 to 1024 [ 1253.983414][T15902] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1253.992305][T15902] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1254.025868][T15902] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2626: Freeing blocks not in datazone - block = 0, count = 4096 [ 1254.047049][T15902] EXT4-fs (loop4): 1 orphan inode deleted [ 1254.185405][T15902] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1255.478159][T15920] loop6: detected capacity change from 0 to 1024 [ 1255.969904][T15920] hfsplus: found bad thread record in catalog [ 1256.077095][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1256.875834][T15943] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2634'. [ 1258.857002][T15958] loop6: detected capacity change from 0 to 1024 [ 1258.874893][T15956] device syzkaller0 entered promiscuous mode [ 1259.654030][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1260.516128][T15970] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2639'. [ 1263.486042][T15995] loop4: detected capacity change from 0 to 256 [ 1263.533600][T15995] exfat: Deprecated parameter 'namecase' [ 1263.711314][T15995] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1263.780119][T16008] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2648'. [ 1264.656773][T16016] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2651'. [ 1266.750835][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2652'. [ 1266.919497][T16021] loop0: detected capacity change from 0 to 1024 [ 1269.179588][T12351] hfsplus: b-tree write err: -5, ino 4 [ 1270.612742][ T5300] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1270.936957][T16047] loop5: detected capacity change from 0 to 1024 [ 1271.134219][ T26] audit: type=1326 audit(1771539532.372:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1271.158552][ T5300] usb 1-1: device descriptor read/64, error -71 [ 1271.260217][ T26] audit: type=1326 audit(1771539532.372:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1271.285333][ T26] audit: type=1326 audit(1771539532.372:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1271.370031][T16070] loop4: detected capacity change from 0 to 512 [ 1271.722149][T16075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2667'. [ 1271.823493][ T5300] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1272.023898][ T5300] usb 1-1: device descriptor read/64, error -71 [ 1272.121811][ T26] audit: type=1326 audit(1771539532.372:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1272.145798][ T5300] usb usb1-port1: attempt power cycle [ 1272.340864][ T26] audit: type=1326 audit(1771539532.372:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1272.853181][T16070] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 1272.907755][ T26] audit: type=1326 audit(1771539532.392:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1272.933239][ T5300] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1272.946965][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1273.134682][ T26] audit: type=1326 audit(1771539532.392:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1273.182715][ T5300] usb 1-1: device not accepting address 9, error -71 [ 1273.410959][ T26] audit: type=1326 audit(1771539532.392:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1273.545618][ T26] audit: type=1326 audit(1771539532.402:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1273.696523][ T26] audit: type=1326 audit(1771539532.402:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16067 comm="syz.6.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc9f12629 code=0x7ffc0000 [ 1273.979278][T16112] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1274.025845][T16112] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1274.882793][T16118] loop6: detected capacity change from 0 to 1024 [ 1275.150266][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2680'. [ 1276.925935][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2681'. [ 1277.524885][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1277.702836][T16139] loop5: detected capacity change from 0 to 1024 [ 1280.555707][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1280.748226][T16160] loop4: detected capacity change from 0 to 764 [ 1280.819272][T16160] Symlink component flag not implemented [ 1280.826498][T16160] Symlink component flag not implemented [ 1280.832654][T16160] Symlink component flag not implemented (129) [ 1280.839011][T16160] Symlink component flag not implemented (6) [ 1281.780574][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1281.780589][ T26] audit: type=1326 audit(1771539543.012:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1282.217036][T16173] loop6: detected capacity change from 0 to 1024 [ 1282.392889][ T26] audit: type=1326 audit(1771539543.012:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1282.941572][ T26] audit: type=1326 audit(1771539543.012:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1283.009583][ T26] audit: type=1326 audit(1771539543.012:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1283.039687][ T26] audit: type=1326 audit(1771539543.012:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1283.911203][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1283.955097][ T26] audit: type=1326 audit(1771539543.012:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1283.998790][ T26] audit: type=1326 audit(1771539543.012:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1284.032627][ T26] audit: type=1326 audit(1771539543.012:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1284.206576][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2700'. [ 1284.857182][ T26] audit: type=1326 audit(1771539543.012:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1284.889722][ T26] audit: type=1326 audit(1771539543.012:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16162 comm="syz.5.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1285.038707][T16202] loop5: detected capacity change from 0 to 1024 [ 1285.495662][T16211] hfsplus: found bad thread record in catalog [ 1285.740645][T16213] loop0: detected capacity change from 0 to 1024 [ 1285.890783][T16213] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1285.901513][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1285.929708][T16213] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1285.937359][T16213] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2706: Freeing blocks not in datazone - block = 0, count = 4096 [ 1285.972981][T16213] EXT4-fs (loop0): 1 orphan inode deleted [ 1285.979628][T16213] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1286.178590][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2708'. [ 1288.807192][T16250] loop0: detected capacity change from 0 to 1024 [ 1288.919356][T16261] loop6: detected capacity change from 0 to 1024 [ 1289.011216][T15423] hfsplus: b-tree write err: -5, ino 4 [ 1289.413122][T16274] hfsplus: found bad thread record in catalog [ 1290.059724][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1290.270038][T16285] loop5: detected capacity change from 0 to 512 [ 1291.288707][T16305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1291.289556][T16285] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1291.309769][T16285] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1291.591681][T16309] device syzkaller0 entered promiscuous mode [ 1291.704954][T16316] loop4: detected capacity change from 0 to 1024 [ 1292.320783][T16319] hfsplus: found bad thread record in catalog [ 1294.268667][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1296.400622][T16341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2739'. [ 1296.904053][T16351] loop0: detected capacity change from 0 to 1024 [ 1297.601038][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2742'. [ 1298.133351][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1298.164324][T16362] loop4: detected capacity change from 0 to 8192 [ 1298.238293][T16365] loop6: detected capacity change from 0 to 2048 [ 1298.326964][T16365] FAT-fs (loop6): Unrecognized mount option " :" or missing value [ 1298.940238][T16362] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1298.954371][T16362] REISERFS (device loop4): using ordered data mode [ 1298.955438][T16365] loop6: detected capacity change from 0 to 256 [ 1298.961118][T16362] reiserfs: using flush barriers [ 1298.965765][T16362] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 1298.991020][T16362] REISERFS (device loop4): checking transaction log (loop4) [ 1299.009611][T16362] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.6* [1 2 0x0 SD], item_len 30764, item_location 3847, free_space(entry_count) 0 [ 1299.031784][T16362] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1299.044877][T16362] REISERFS (device loop4): Remounting filesystem read-only [ 1299.055732][T16362] REISERFS error (device loop4): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1299.122792][T16365] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1299.182659][T16365] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1299.234656][T16365] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1299.866206][T16382] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2745'. [ 1300.510271][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.518007][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.616862][T16384] loop4: detected capacity change from 0 to 1024 [ 1300.768042][T16384] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1300.783657][T16384] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1300.848874][T16384] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2749: Freeing blocks not in datazone - block = 0, count = 4096 [ 1300.909199][T16384] EXT4-fs (loop4): 1 orphan inode deleted [ 1301.016953][T16384] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1302.383798][T16402] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2754'. [ 1302.820827][T16063] Bluetooth: hci2: command 0x1003 tx timeout [ 1303.064589][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 1303.210275][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2757'. [ 1303.251597][T16383] Bluetooth: hci2: sending frame failed (-49) [ 1303.831532][T16420] loop5: detected capacity change from 0 to 1024 [ 1303.858858][T16426] loop4: detected capacity change from 0 to 1024 [ 1303.861664][T16425] loop0: detected capacity change from 0 to 1024 [ 1303.935653][T16420] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1303.971716][T16426] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1303.996301][T16420] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1304.017864][T16420] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.2758: Freeing blocks not in datazone - block = 0, count = 4096 [ 1304.042263][T16420] EXT4-fs (loop5): 1 orphan inode deleted [ 1304.093544][T16426] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1304.100406][T16426] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2760: Freeing blocks not in datazone - block = 0, count = 4096 [ 1304.110133][T16420] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1304.153777][T16425] hfsplus: found bad thread record in catalog [ 1304.160386][T16426] EXT4-fs (loop4): 1 orphan inode deleted [ 1304.168362][T16426] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1304.436114][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1305.070502][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1305.070515][ T26] audit: type=1326 audit(1771539566.302:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.165578][T16441] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2759'. [ 1305.185508][T16440] loop4: detected capacity change from 0 to 1024 [ 1305.276434][ T26] audit: type=1326 audit(1771539566.302:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.432371][ T26] audit: type=1326 audit(1771539566.322:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.458479][ T26] audit: type=1326 audit(1771539566.322:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.484491][ T26] audit: type=1326 audit(1771539566.322:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.508776][ T26] audit: type=1326 audit(1771539566.352:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.534284][ T26] audit: type=1326 audit(1771539566.352:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.560196][ T26] audit: type=1326 audit(1771539566.352:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.585333][ T26] audit: type=1326 audit(1771539566.352:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.618256][ T26] audit: type=1326 audit(1771539566.352:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.2762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1305.737313][T13704] Bluetooth: hci2: command 0x1001 tx timeout [ 1305.753708][T16383] Bluetooth: hci2: sending frame failed (-49) [ 1305.817257][T16440] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1305.842093][T16440] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1305.851905][T16440] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2763: Freeing blocks not in datazone - block = 0, count = 4096 [ 1305.869951][T16440] EXT4-fs (loop4): 1 orphan inode deleted [ 1305.879247][T16440] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1306.436516][T16456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2766'. [ 1306.833572][T16463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2767'. [ 1307.431133][T16465] loop4: detected capacity change from 0 to 1024 [ 1307.576627][T16467] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2769'. [ 1307.912427][ T4301] Bluetooth: hci2: command 0x1009 tx timeout [ 1307.979744][T16470] hfsplus: found bad thread record in catalog [ 1308.350763][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1309.219913][T16476] loop4: detected capacity change from 0 to 1024 [ 1309.347312][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2771'. [ 1309.895739][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2773'. [ 1309.976722][T16486] hfsplus: found bad thread record in catalog [ 1310.232701][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1310.232723][ T26] audit: type=1326 audit(1771539571.462:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1310.309916][ T26] audit: type=1326 audit(1771539571.462:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1310.310012][T15423] hfsplus: b-tree write err: -5, ino 4 [ 1310.333901][ T26] audit: type=1326 audit(1771539571.462:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1310.651493][ T26] audit: type=1326 audit(1771539571.462:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1310.675314][ T26] audit: type=1326 audit(1771539571.462:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1311.884505][ T26] audit: type=1326 audit(1771539571.462:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1311.956244][T16490] loop4: detected capacity change from 0 to 32768 [ 1312.006698][T16490] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1312.016062][T16490] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1312.048428][T16490] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 1312.048428][T16490] bh = 52 (type: exp=5, found=8) [ 1312.048428][T16490] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 1312.069475][T16490] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 1312.077554][T16490] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 1312.089117][T16490] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 1312.098368][T16490] gfs2: fsid=syz:syz.s: File system withdrawn [ 1312.105620][T16490] CPU: 0 PID: 16490 Comm: syz.4.2776 Not tainted syzkaller #0 [ 1312.113702][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1312.128389][T16490] Call Trace: [ 1312.131686][T16490] [ 1312.134916][T16490] dump_stack_lvl+0x188/0x250 [ 1312.140178][T16490] ? kobject_uevent_env+0x371/0x890 [ 1312.146221][T16490] ? show_regs_print_info+0x20/0x20 [ 1312.152276][T16490] ? load_image+0x400/0x400 [ 1312.157130][T16490] ? kobject_uevent_env+0x371/0x890 [ 1312.163791][T16490] gfs2_withdraw+0x1149/0x1490 [ 1312.169793][T16490] ? gfs2_lm+0x240/0x240 [ 1312.175144][T16490] ? gfs2_meta_read+0x8a9/0xa60 [ 1312.181163][T16490] ? gfs2_meta_new+0x160/0x160 [ 1312.186069][T16490] gfs2_metatype_check_ii+0x74/0x90 [ 1312.192343][T16490] gfs2_meta_buffer+0x262/0x310 [ 1312.199493][T16490] __fillup_metapath+0x14d/0x340 [ 1312.205541][T16490] __gfs2_iomap_get+0x709/0x1400 [ 1312.212218][T16490] ? gfs2_alloc_extent+0x580/0x580 [ 1312.218603][T16490] ? rcu_is_watching+0x11/0xa0 [ 1312.220178][ T26] audit: type=1326 audit(1771539571.462:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1312.224447][T16490] gfs2_block_map+0x2a0/0x740 [ 1312.224626][T16490] ? gfs2_iomap_end+0x6b0/0x6b0 [ 1312.224656][T16490] ? mark_lock+0x94/0x320 [ 1312.268970][T16490] ? verify_lock_unused+0x140/0x140 [ 1312.275085][T16490] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1312.283972][T16490] ? lockdep_hardirqs_on+0x94/0x140 [ 1312.289743][T16490] gfs2_write_alloc_required+0x3ae/0x680 [ 1312.297662][T16490] ? gfs2_map_journal_extents+0xb10/0xb10 [ 1312.304599][T16490] ? _raw_spin_unlock+0x24/0x40 [ 1312.310045][T16490] ? gfs2_glock_nq+0xcb0/0x1550 [ 1312.315640][T16490] gfs2_jdesc_check+0x1c3/0x290 [ 1312.320702][T16490] check_journal_clean+0x186/0x360 [ 1312.326492][T16490] ? gfs2_trans_remove_revoke+0x370/0x370 [ 1312.333189][T16490] ? check_journal_clean+0x142/0x360 [ 1312.340606][T16490] ? __rwlock_init+0x140/0x140 [ 1312.345923][T16490] ? do_raw_spin_unlock+0x11d/0x230 [ 1312.352332][T16490] ? _raw_spin_unlock+0x24/0x40 [ 1312.358243][T16490] ? gfs2_jdesc_find+0xa7/0xc0 [ 1312.364272][T16490] init_journal+0x17a5/0x22f0 [ 1312.372076][T16490] ? end_bio_io_page+0x100/0x100 [ 1312.379331][T16490] ? vsnprintf+0x1b21/0x1c20 [ 1312.380076][T16503] loop6: detected capacity change from 0 to 1024 [ 1312.385138][T16490] ? snprintf+0xe5/0x140 [ 1312.385172][T16490] ? init_journal+0x74d/0x22f0 [ 1312.385192][T16490] ? vscnprintf+0x80/0x80 [ 1312.385205][T16490] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 1312.385227][T16490] init_inodes+0xdb/0x320 [ 1312.385246][T16490] gfs2_fill_super+0x16b2/0x1f00 [ 1312.385277][T16490] ? gfs2_reconfigure+0xd30/0xd30 [ 1312.385305][T16490] ? gfs2_glock_nq_num+0x82/0x1b0 [ 1312.385332][T16490] ? sb_set_blocksize+0xa5/0xe0 [ 1312.446892][T16490] get_tree_bdev+0x3f1/0x610 [ 1312.452710][T16490] ? gfs2_reconfigure+0xd30/0xd30 [ 1312.458392][T16490] gfs2_get_tree+0x4d/0x1e0 [ 1312.463283][T16490] vfs_get_tree+0x88/0x270 [ 1312.467977][T16490] do_new_mount+0x24a/0xa40 [ 1312.473728][T16490] __se_sys_mount+0x2e3/0x3d0 [ 1312.483088][T16490] ? __x64_sys_mount+0xc0/0xc0 [ 1312.490943][T16490] ? lockdep_hardirqs_on+0x94/0x140 [ 1312.496612][T16490] ? __x64_sys_mount+0x1c/0xc0 [ 1312.505799][T16490] do_syscall_64+0x4c/0xa0 [ 1312.510499][T16490] ? clear_bhb_loop+0x30/0x80 [ 1312.516788][T16490] ? clear_bhb_loop+0x30/0x80 [ 1312.523254][T16490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1312.534698][T16490] RIP: 0033:0x7fc3a5c0a8ca [ 1312.543173][T16490] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.572649][T16490] RSP: 002b:00007fc3a3e62e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1312.585213][T16490] RAX: ffffffffffffffda RBX: 00007fc3a3e62ee0 RCX: 00007fc3a5c0a8ca [ 1312.597318][T16490] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fc3a3e62ea0 [ 1312.607194][T16490] RBP: 000020000001f680 R08: 00007fc3a3e62ee0 R09: 0000000000000084 [ 1312.618255][T16490] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 1312.631928][T16490] R13: 00007fc3a3e62ea0 R14: 000000000001f707 R15: 00002000000000c0 [ 1312.647018][T16490] [ 1312.653829][T16490] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 1312.740277][ T26] audit: type=1326 audit(1771539571.462:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1313.347916][T16512] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2782'. [ 1313.440182][ T26] audit: type=1326 audit(1771539571.462:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1313.482768][T16514] device geneve2 entered promiscuous mode [ 1313.604216][ T26] audit: type=1326 audit(1771539571.462:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16483 comm="syz.5.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7e5a0629 code=0x7ffc0000 [ 1313.737577][T16503] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1313.750259][T16503] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1313.758670][T16503] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.2778: Freeing blocks not in datazone - block = 0, count = 4096 [ 1313.781531][T16503] EXT4-fs (loop6): 1 orphan inode deleted [ 1313.794840][T16503] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1314.648146][T16534] loop4: detected capacity change from 0 to 1024 [ 1314.675655][T16533] loop6: detected capacity change from 0 to 2048 [ 1314.819502][T16533] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1315.066587][T16537] hfsplus: found bad thread record in catalog [ 1315.163782][T16538] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1315.221120][T16533] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1315.354461][T16533] Remounting filesystem read-only [ 1315.511616][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1315.642175][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2788'. [ 1315.880598][T16545] loop6: detected capacity change from 0 to 1024 [ 1315.905802][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1315.905816][ T26] audit: type=1326 audit(1771539577.142:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1316.079767][T16545] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1316.109428][T16545] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1316.116499][ T26] audit: type=1326 audit(1771539577.142:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1316.170135][T16545] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.2790: Freeing blocks not in datazone - block = 0, count = 4096 [ 1316.237270][ T26] audit: type=1326 audit(1771539577.182:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1316.247227][T16545] EXT4-fs (loop6): 1 orphan inode deleted [ 1316.264099][ T26] audit: type=1326 audit(1771539577.182:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1316.299005][T16545] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1316.319304][ T26] audit: type=1326 audit(1771539577.182:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1316.360432][ T26] audit: type=1326 audit(1771539577.182:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1316.392011][ T26] audit: type=1326 audit(1771539577.182:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1316.709590][ T26] audit: type=1326 audit(1771539577.182:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1316.752710][ T26] audit: type=1326 audit(1771539577.182:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1316.891052][ T26] audit: type=1326 audit(1771539577.182:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16541 comm="syz.4.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a5c09629 code=0x7ffc0000 [ 1317.422178][T16573] loop4: detected capacity change from 0 to 1024 [ 1318.721990][T16581] loop6: detected capacity change from 0 to 1024 [ 1319.823337][T16592] hfsplus: found bad thread record in catalog [ 1319.876340][T16593] hfsplus: found bad thread record in catalog [ 1320.129112][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1320.136380][ T8534] hfsplus: b-tree write err: -5, ino 4 [ 1321.029533][T16609] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2806'. [ 1321.549487][T16613] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2801'. [ 1322.534168][T16624] loop0: detected capacity change from 0 to 8192 [ 1322.768965][T16624] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1322.806039][T16624] REISERFS (device loop0): using ordered data mode [ 1322.824483][T16630] loop6: detected capacity change from 0 to 8 [ 1322.836917][T16624] reiserfs: using flush barriers [ 1322.866130][T16624] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1322.921427][T16634] loop5: detected capacity change from 0 to 1024 [ 1322.941653][T16624] REISERFS (device loop0): checking transaction log (loop0) [ 1322.984283][T16624] REISERFS warning (device loop0): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore [ 1323.541794][T16640] hfsplus: found bad thread record in catalog [ 1323.880530][T16642] loop4: detected capacity change from 0 to 128 [ 1324.000138][T16642] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1324.044751][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1324.055098][T16642] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1324.066652][T16642] hpfs: You really don't want any checks? You are crazy... [ 1324.074747][T16642] hpfs: hpfs_map_sector(): read error [ 1324.082062][T16642] hpfs: code page support is disabled [ 1324.117391][T16642] hpfs: hpfs_map_4sectors(): unaligned read [ 1324.147185][T16642] hpfs: hpfs_map_4sectors(): unaligned read [ 1324.240685][T16642] hpfs: filesystem error: unable to find root dir [ 1324.931026][T16658] loop5: detected capacity change from 0 to 1024 [ 1325.509891][T16667] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2820'. [ 1325.826558][T16669] hfsplus: found bad thread record in catalog [ 1325.924655][T16671] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2822'. [ 1326.022891][ T1174] hfsplus: b-tree write err: -5, ino 4 [ 1326.470709][T16682] loop0: detected capacity change from 0 to 1024 [ 1326.665506][T16682] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1327.080503][T16682] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1327.087594][T16682] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2827: Freeing blocks not in datazone - block = 0, count = 4096 [ 1327.119784][T16682] EXT4-fs (loop0): 1 orphan inode deleted [ 1327.141349][T16690] loop6: detected capacity change from 0 to 8 [ 1327.141734][T16682] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1327.193206][T16690] Filesystem uses "unknown" compression. This is not supported [ 1327.616220][T16698] loop4: detected capacity change from 0 to 8 [ 1327.684193][T16698] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1327.881761][T16698] cramfs: bad root offset 4 [ 1328.168885][T16712] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2835'. [ 1328.222533][T16713] loop4: detected capacity change from 0 to 1024 [ 1328.252038][T16715] loop6: detected capacity change from 0 to 64 [ 1328.625736][T16722] hfsplus: found bad thread record in catalog [ 1329.633350][T16724] loop6: detected capacity change from 0 to 1024 [ 1329.679007][T16730] __ntfs_error: 4 callbacks suppressed [ 1329.679023][T16730] ntfs: (device nbd0): ntfs_fill_super(): Unable to determine device size. [ 1329.708085][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1329.937046][T16737] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2841'. [ 1330.142868][T15322] hfsplus: bad catalog file entry [ 1330.149737][T15322] hfsplus: b-tree write err: -5, ino 3 [ 1330.167934][T16734] loop4: detected capacity change from 0 to 4096 [ 1330.192819][ T4197] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1330.381658][T16739] loop6: detected capacity change from 0 to 1024 [ 1330.431239][T16739] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1330.452406][T16739] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1330.459570][T16739] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.2846: Freeing blocks not in datazone - block = 0, count = 4096 [ 1330.474408][ T4197] usb 1-1: Using ep0 maxpacket: 8 [ 1330.574094][T16739] EXT4-fs (loop6): 1 orphan inode deleted [ 1330.585416][T16739] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1330.682797][T13704] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1330.767148][ T4197] usb 1-1: config 163 has an invalid interface number: 247 but max is 0 [ 1330.775853][ T4197] usb 1-1: config 163 has no interface number 0 [ 1330.782354][ T4197] usb 1-1: config 163 interface 247 has no altsetting 0 [ 1331.033170][ T4197] usb 1-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=dc.ba [ 1331.043660][ T4197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.051951][ T4197] usb 1-1: Product: syz [ 1331.059440][ T4197] usb 1-1: Manufacturer: syz [ 1331.088141][ T4197] usb 1-1: SerialNumber: syz [ 1331.317030][T16752] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2849'. [ 1331.544169][T13704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.564121][ T4197] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 1331.577356][T13704] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1331.585468][ T4197] dvb-usb: bulk message failed: -22 (2/0) [ 1331.783068][T13704] usb 5-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 1331.789816][ T4197] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1331.834019][ T4197] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 1331.837291][T13704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1331.853889][T13704] usb 5-1: Product: syz [ 1331.858145][T13704] usb 5-1: Manufacturer: syz [ 1331.863243][T13704] usb 5-1: SerialNumber: syz [ 1331.864006][ T4197] usb 1-1: media controller created [ 1331.878746][T13704] usb 5-1: config 0 descriptor?? [ 1331.902896][ T4197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1332.922485][ T4197] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1333.027670][T16767] loop0: detected capacity change from 0 to 256 [ 1333.035737][ T4197] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1333.486058][T13704] usb 5-1: USB disconnect, device number 2 [ 1333.493962][T16108] udevd[16108]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1333.920252][T16767] exFAT-fs (loop0): failed to read sector(0x800000080) [ 1333.920252][T16767] [ 1333.957690][T16767] exFAT-fs (loop0): failed to load upcase table [ 1333.972044][T16771] loop4: detected capacity change from 0 to 1024 [ 1333.979049][T16773] loop6: detected capacity change from 0 to 1024 [ 1333.997497][T16767] exFAT-fs (loop0): failed to recognize exfat type [ 1334.078779][T16771] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1334.104314][T16771] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1334.118256][T16771] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2857: Freeing blocks not in datazone - block = 0, count = 4096 [ 1334.140634][T16771] EXT4-fs (loop4): 1 orphan inode deleted [ 1334.148931][T16771] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1334.385570][T16781] hfsplus: found bad thread record in catalog [ 1334.893385][T15322] hfsplus: b-tree write err: -5, ino 4 [ 1335.107797][ T4197] rc_core: IR keymap rc-dtt200u not found [ 1335.116162][ T4197] Registered IR keymap rc-empty [ 1335.211609][ T4197] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1335.770740][ T4197] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 1335.949025][ T4197] dvb-usb: schedule remote query interval to 300 msecs. [ 1335.989461][T16801] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2859'. [ 1336.212775][ T4197] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 1336.246072][ T4197] usb 1-1: USB disconnect, device number 11 [ 1337.044496][T16814] loop6: detected capacity change from 0 to 1024 [ 1337.048189][T16817] loop0: detected capacity change from 0 to 1024 [ 1337.224877][ T4197] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 1337.282794][ T4301] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1337.460464][T16817] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1337.689930][T16817] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1337.721741][T16817] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2877: Freeing blocks not in datazone - block = 0, count = 4096 [ 1337.802514][T16823] hfsplus: found bad thread record in catalog [ 1338.233400][T15322] hfsplus: b-tree write err: -5, ino 4 [ 1338.292925][ T4301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.339704][ T4301] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1338.384401][T16817] EXT4-fs (loop0): 1 orphan inode deleted [ 1338.390800][T16817] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1339.463570][T16832] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2869'. [ 1339.604609][ T4301] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 1339.774358][ T4301] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1339.808124][ T4301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1339.828080][ T4301] usb 5-1: SerialNumber: syz [ 1339.830279][ T4229] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1339.939972][ T4301] cdc_acm 5-1:1.0: Zero length descriptor references [ 1340.160620][ T4301] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 1340.415652][ T4301] usb 5-1: USB disconnect, device number 3 [ 1340.569717][T16841] loop0: detected capacity change from 0 to 1024 [ 1340.637468][T16841] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1340.647131][T16841] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1340.655538][T16841] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2872: Freeing blocks not in datazone - block = 0, count = 4096 [ 1340.673926][T16841] EXT4-fs (loop0): 1 orphan inode deleted [ 1340.679905][T16841] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1341.043527][ T4229] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1341.070384][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.114225][ T4229] usb 6-1: Product: syz [ 1341.122940][ T4229] usb 6-1: Manufacturer: syz [ 1341.128047][ T4229] usb 6-1: SerialNumber: syz [ 1341.526419][ T4229] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1341.547487][ T4229] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1341.621022][ T4229] usb 6-1: USB disconnect, device number 6 [ 1342.788735][T16867] loop5: detected capacity change from 0 to 1024 [ 1342.869988][T16873] loop6: detected capacity change from 0 to 1024 [ 1342.881850][T16874] loop4: detected capacity change from 0 to 256 [ 1343.389543][ T26] audit: type=1326 audit(1771539604.532:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1344.515392][T16881] hfsplus: found bad thread record in catalog [ 1344.540002][ T26] audit: type=1326 audit(1771539604.532:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1344.702686][ T26] audit: type=1326 audit(1771539604.542:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1344.726137][ T26] audit: type=1326 audit(1771539604.542:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1344.749766][ T26] audit: type=1326 audit(1771539604.542:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1344.767863][ T1174] hfsplus: b-tree write err: -5, ino 4 [ 1344.773568][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1344.792274][ T26] audit: type=1326 audit(1771539604.542:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1344.859886][ T26] audit: type=1326 audit(1771539604.542:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1344.883556][ T26] audit: type=1326 audit(1771539604.552:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1344.907150][ T26] audit: type=1326 audit(1771539604.552:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1344.941406][T16892] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2881'. [ 1345.283143][ T26] audit: type=1326 audit(1771539604.552:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.2.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1345.350195][T16901] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2889'. [ 1345.502698][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1345.676569][T16904] loop0: detected capacity change from 0 to 1024 [ 1345.914793][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 1345.989996][T16907] hfsplus: found bad thread record in catalog [ 1346.253390][ T4229] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1346.277250][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.532513][ T4229] usb 5-1: config 0 descriptor?? [ 1346.576462][ T4229] gm12u320 5-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 1346.619797][T16911] loop5: detected capacity change from 0 to 2048 [ 1346.637572][ T4229] gm12u320: probe of 5-1:0.0 failed with error -5 [ 1346.652291][ T4229] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1346.683691][T16911] FAT-fs (loop5): Unrecognized mount option " :" or missing value [ 1346.694643][T15322] hfsplus: b-tree write err: -5, ino 4 [ 1346.971304][T16910] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2891'. [ 1346.992479][ T4229] usb-storage 5-1:0.0: device ignored [ 1347.071253][ T8534] Bluetooth: hci2: Frame reassembly failed (-84) [ 1347.139694][ T4229] usb 5-1: USB disconnect, device number 4 [ 1347.644705][T16926] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2894'. [ 1347.902724][T16928] loop4: detected capacity change from 0 to 1024 [ 1348.661393][T16935] loop0: detected capacity change from 0 to 1024 [ 1348.694872][T16936] loop6: detected capacity change from 0 to 128 [ 1348.779091][T16937] hfsplus: found bad thread record in catalog [ 1349.074209][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1349.142633][ T4229] Bluetooth: hci2: command 0x1003 tx timeout [ 1349.148960][T16383] Bluetooth: hci2: sending frame failed (-49) [ 1349.377623][T16942] hfsplus: found bad thread record in catalog [ 1349.752651][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1349.943135][T16957] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2900'. [ 1350.732283][T16964] loop4: detected capacity change from 0 to 512 [ 1350.772126][T16965] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2905'. [ 1350.795957][T16964] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1350.832902][T16964] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1351.100788][T16964] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0102] [ 1351.113004][T16964] System zones: 0-2, 18-18, 34-34 [ 1351.133397][T16964] EXT4-fs error (device loop4): ext4_quota_enable:6442: inode #4: comm syz.4.2906: iget: immutable or append flags not allowed on symlinks [ 1351.160226][T16964] EXT4-fs error (device loop4): ext4_quota_enable:6445: comm syz.4.2906: Bad quota inode: 4, type: 1 [ 1351.247474][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1351.247505][ T26] audit: type=1326 audit(1771539612.462:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1351.279054][ T4229] Bluetooth: hci2: command 0x1001 tx timeout [ 1351.287612][T16383] Bluetooth: hci2: sending frame failed (-49) [ 1351.366848][T16964] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1351.401098][ T26] audit: type=1326 audit(1771539612.462:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1351.431726][ T26] audit: type=1326 audit(1771539612.462:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1351.680597][ T26] audit: type=1326 audit(1771539612.472:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1351.699423][T16964] EXT4-fs (loop4): mount failed [ 1351.703789][ T26] audit: type=1326 audit(1771539612.472:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1351.753114][ T26] audit: type=1326 audit(1771539612.472:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1351.899944][ T26] audit: type=1326 audit(1771539612.472:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1352.027553][ T26] audit: type=1326 audit(1771539612.472:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1352.118086][ T26] audit: type=1326 audit(1771539612.472:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1352.206628][ T26] audit: type=1326 audit(1771539612.482:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16966 comm="syz.0.2907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1352.260725][T16983] loop4: detected capacity change from 0 to 1024 [ 1352.291059][T16983] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1352.300321][T16983] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1352.328580][T16983] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2911: Freeing blocks not in datazone - block = 0, count = 4096 [ 1352.947470][T16983] EXT4-fs (loop4): 1 orphan inode deleted [ 1353.000298][T16983] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1353.397148][ T4229] Bluetooth: hci2: command 0x1009 tx timeout [ 1353.683418][ T4229] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1353.851951][T17008] loop4: detected capacity change from 0 to 4096 [ 1353.934432][T17008] ntfs: volume version 3.1. [ 1353.942808][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 1354.246529][ T4229] usb 1-1: config 0 has an invalid interface number: 100 but max is 0 [ 1354.255766][ T4229] usb 1-1: config 0 has no interface number 0 [ 1354.763625][ T4229] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1354.805401][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.001750][ T4229] usb 1-1: Product: syz [ 1355.006506][ T4229] usb 1-1: Manufacturer: syz [ 1355.011624][ T4229] usb 1-1: SerialNumber: syz [ 1355.019364][ T4229] usb 1-1: config 0 descriptor?? [ 1355.070322][T17020] loop4: detected capacity change from 0 to 1024 [ 1355.080340][ T4229] go7007: probe of 1-1:0.100 failed with error -12 [ 1355.701704][ T4277] usb 1-1: USB disconnect, device number 12 [ 1356.350939][T17039] loop6: detected capacity change from 0 to 256 [ 1356.433093][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1358.213131][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2933'. [ 1359.624204][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1359.624223][ T26] audit: type=1326 audit(1771539620.422:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1359.781215][ T26] audit: type=1326 audit(1771539620.422:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1359.804484][ T26] audit: type=1326 audit(1771539620.462:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1359.831566][ T26] audit: type=1326 audit(1771539620.472:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1359.850075][T17069] device syzkaller0 entered promiscuous mode [ 1359.898668][T17075] loop0: detected capacity change from 0 to 1024 [ 1359.939703][ T26] audit: type=1326 audit(1771539620.472:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1360.067938][ T26] audit: type=1326 audit(1771539620.492:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1360.142743][ T26] audit: type=1326 audit(1771539620.492:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1360.216267][ T26] audit: type=1326 audit(1771539620.502:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1360.576085][ T26] audit: type=1326 audit(1771539620.512:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1360.606640][ T26] audit: type=1326 audit(1771539620.512:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17050 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db01c1629 code=0x7ffc0000 [ 1360.874115][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1361.049099][T17091] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2938'. [ 1361.795188][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.801614][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.442599][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2948'. [ 1364.706907][T17129] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2952'. [ 1364.727362][T17130] loop5: detected capacity change from 0 to 1024 [ 1364.927551][T17135] loop6: detected capacity change from 0 to 1024 [ 1365.114698][T17135] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1365.151690][T17135] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1365.282210][T17140] hfsplus: found bad thread record in catalog [ 1365.382508][T17135] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.2956: Freeing blocks not in datazone - block = 0, count = 4096 [ 1365.646671][T17135] EXT4-fs (loop6): 1 orphan inode deleted [ 1365.707000][T17135] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1365.742084][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1367.550316][T17161] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2959'. [ 1369.124202][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2965'. [ 1369.156347][T17176] loop6: detected capacity change from 0 to 1024 [ 1369.244730][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2966'. [ 1369.971866][T17185] loop0: detected capacity change from 0 to 1024 [ 1369.983911][T17187] loop4: detected capacity change from 0 to 512 [ 1370.678887][T17185] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1370.679931][T17185] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1370.680357][T17185] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.2971: Freeing blocks not in datazone - block = 0, count = 4096 [ 1370.688115][T17185] EXT4-fs (loop0): 1 orphan inode deleted [ 1370.716882][T17185] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1370.717184][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1370.837810][T17187] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1372.644059][T17231] loop5: detected capacity change from 0 to 8 [ 1372.699433][T17231] squashfs image failed sanity check [ 1372.799880][T17239] netlink: 'syz.0.2982': attribute type 28 has an invalid length. [ 1372.820882][T17238] loop4: detected capacity change from 0 to 1024 [ 1372.821774][T17239] netlink: 'syz.0.2982': attribute type 3 has an invalid length. [ 1372.866375][T17239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2982'. [ 1372.982218][T17238] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1373.009781][T17238] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1373.095574][T17238] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.2983: Freeing blocks not in datazone - block = 0, count = 4096 [ 1373.163732][T17238] EXT4-fs (loop4): 1 orphan inode deleted [ 1373.174671][T17238] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1373.182907][T17244] loop0: detected capacity change from 0 to 512 [ 1373.853750][T17258] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2988'. [ 1373.972875][T17244] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1375.907130][T17294] loop6: detected capacity change from 0 to 1024 [ 1375.928381][T17293] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1375.955468][T17294] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1375.976897][T17294] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1375.982667][T17293] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1376.026812][T17294] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.2999: Freeing blocks not in datazone - block = 0, count = 4096 [ 1376.060569][T17293] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1376.074537][T17297] loop5: detected capacity change from 0 to 1024 [ 1376.082942][T17293] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1376.092059][T17294] EXT4-fs (loop6): 1 orphan inode deleted [ 1376.097945][T17294] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1376.110435][T17293] device geneve2 entered promiscuous mode [ 1377.155351][ T4612] hfsplus: b-tree write err: -5, ino 4 [ 1378.099046][T17335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3012'. [ 1378.104595][T17334] loop6: detected capacity change from 0 to 64 [ 1378.123750][T17336] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3011'. [ 1378.341978][T17338] loop4: detected capacity change from 0 to 1024 [ 1378.389983][T17338] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1378.437123][T17341] loop6: detected capacity change from 0 to 1024 [ 1378.445155][T17338] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1378.452122][T17338] EXT4-fs error (device loop4): ext4_free_blocks:6234: comm syz.4.3014: Freeing blocks not in datazone - block = 0, count = 4096 [ 1378.473486][T17338] EXT4-fs (loop4): 1 orphan inode deleted [ 1378.480368][T17338] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1378.493998][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3016'. [ 1379.273722][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1380.394497][T17381] loop6: detected capacity change from 0 to 512 [ 1381.072333][T17381] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback. [ 1381.120163][T17381] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.147126][T17381] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #12: block 32: comm syz.6.3027: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1381.182671][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1381.197043][T17381] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #12: comm syz.6.3027: directory missing '.' [ 1381.657784][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3030'. [ 1383.162801][ T13] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1383.171905][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.180546][ T13] usb 5-1: Product: syz [ 1383.184783][ T13] usb 5-1: Manufacturer: syz [ 1383.217803][ T13] usb 5-1: can't set config #118, error -71 [ 1383.411184][ T13] usb 5-1: USB disconnect, device number 5 [ 1384.029363][T17425] loop6: detected capacity change from 0 to 1024 [ 1384.943365][T17425] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1384.952312][T17425] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1385.038202][T17425] EXT4-fs error (device loop6): ext4_free_blocks:6234: comm syz.6.3038: Freeing blocks not in datazone - block = 0, count = 4096 [ 1385.192859][T17425] EXT4-fs (loop6): 1 orphan inode deleted [ 1385.261285][T17425] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1386.245715][ T2386] Bluetooth: hci0: command 0x0401 tx timeout [ 1386.340548][T17458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3048'. [ 1387.421422][T17479] loop0: detected capacity change from 0 to 1024 [ 1387.496404][T17484] loop5: detected capacity change from 0 to 1024 [ 1387.633836][T17479] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1387.655237][T17479] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1388.440789][T17479] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.3055: Freeing blocks not in datazone - block = 0, count = 4096 [ 1388.457345][T17479] EXT4-fs (loop0): 1 orphan inode deleted [ 1388.464445][T17479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1388.582208][T17492] hfsplus: found bad thread record in catalog [ 1389.019777][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 1389.370838][T17499] loop5: detected capacity change from 0 to 1024 [ 1389.418824][T17499] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1389.547030][T17499] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1389.584964][T17499] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.3059: Freeing blocks not in datazone - block = 0, count = 4096 [ 1389.664255][T17499] EXT4-fs (loop5): 1 orphan inode deleted [ 1389.670029][T17499] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1389.694401][T17508] netlink: 'syz.0.3063': attribute type 10 has an invalid length. [ 1391.361575][T17528] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3067'. [ 1392.400703][T17533] loop0: detected capacity change from 0 to 1024 [ 1392.934037][T17533] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1393.067221][T17533] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1393.107912][T17533] EXT4-fs error (device loop0): ext4_free_blocks:6234: comm syz.0.3070: Freeing blocks not in datazone - block = 0, count = 4096 [ 1393.144342][T17533] EXT4-fs (loop0): 1 orphan inode deleted [ 1393.152738][T17533] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1395.776897][T17570] netlink: 'syz.5.3082': attribute type 1 has an invalid length. [ 1395.876142][T17570] netlink: 'syz.5.3082': attribute type 2 has an invalid length. [ 1397.133026][T17595] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3088'. [ 1397.567373][T17590] loop0: detected capacity change from 0 to 256 [ 1397.833968][T17590] FAT-fs (loop0): Directory bread(block 64) failed [ 1397.840895][T17590] FAT-fs (loop0): Directory bread(block 65) failed [ 1397.852385][T17590] FAT-fs (loop0): Directory bread(block 66) failed [ 1397.860440][T17590] FAT-fs (loop0): Directory bread(block 67) failed [ 1397.909786][T17590] FAT-fs (loop0): Directory bread(block 68) failed [ 1397.972870][T17590] FAT-fs (loop0): Directory bread(block 69) failed [ 1398.015087][T17600] loop6: detected capacity change from 0 to 1024 [ 1398.023679][T17590] FAT-fs (loop0): Directory bread(block 70) failed [ 1398.030392][T17590] FAT-fs (loop0): Directory bread(block 71) failed [ 1398.058233][T17590] FAT-fs (loop0): Directory bread(block 72) failed [ 1398.065268][T17590] FAT-fs (loop0): Directory bread(block 73) failed [ 1398.657851][T17613] hfsplus: found bad thread record in catalog [ 1400.535662][ T8471] hfsplus: b-tree write err: -5, ino 4 [ 1400.947528][T17621] overlayfs: conflicting options: nfs_export=on,index=off [ 1401.178969][T17635] comedi comedi0: Minor 2 could not be opened [ 1401.263671][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3098'. [ 1402.582255][T17648] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1403.640228][T17678] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 1403.732983][T17686] comedi comedi0: Minor 48 is invalid! [ 1403.747335][T17688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3124'. [ 1403.855103][T17688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3124'. [ 1404.488493][T17691] libceph: resolve '4.' (ret=-3): failed [ 1407.671891][T17735] device wlan0 entered promiscuous mode [ 1407.698431][T17735] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1409.173595][T17749] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1409.229126][T17759] netlink: 'syz.0.3150': attribute type 2 has an invalid length. [ 1409.229176][T17759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3150'. [ 1411.414334][T17761] loop6: detected capacity change from 0 to 32768 [ 1411.601785][T17761] XFS (loop6): Mounting V5 Filesystem [ 1411.604695][T17791] loop0: detected capacity change from 0 to 2048 [ 1411.653942][T17794] loop5: detected capacity change from 0 to 16 [ 1411.681143][T17791] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1411.751597][T17794] erofs: (device loop5): mounted with root inode @ nid 36. [ 1411.761298][T17761] XFS (loop6): Ending clean mount [ 1413.171556][T17810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1413.406132][T17812] device syzkaller0 entered promiscuous mode [ 1413.433765][T17791] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1413.465667][T10483] XFS (loop6): Unmounting Filesystem [ 1413.530260][T17791] Remounting filesystem read-only [ 1413.581590][T17791] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1414.567768][T17818] loop5: detected capacity change from 0 to 4096 [ 1414.802724][T17818] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1415.491181][T17818] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1416.219476][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1416.232892][ T26] audit: type=1326 audit(1771539677.442:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1416.327047][ T26] audit: type=1326 audit(1771539677.442:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1416.440270][ T26] audit: type=1326 audit(1771539677.442:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1416.513266][ T26] audit: type=1326 audit(1771539677.442:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1416.703107][ T26] audit: type=1326 audit(1771539677.442:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1416.726220][ T26] audit: type=1326 audit(1771539677.442:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1416.752042][ T26] audit: type=1326 audit(1771539677.442:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1416.787719][T17859] loop6: detected capacity change from 0 to 16 [ 1416.796549][T17862] loop0: detected capacity change from 0 to 256 [ 1416.872680][T17862] exFAT-fs (loop0): bogus data start sector [ 1416.878899][T17862] exFAT-fs (loop0): failed to read boot sector [ 1416.914085][T17861] loop5: detected capacity change from 0 to 8 [ 1416.948935][T17862] exFAT-fs (loop0): failed to recognize exfat type [ 1416.962127][ T26] audit: type=1326 audit(1771539677.442:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1416.985464][ T26] audit: type=1326 audit(1771539677.442:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1417.008676][ T26] audit: type=1326 audit(1771539677.442:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17838 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98674a2629 code=0x7ffc0000 [ 1417.040778][T17865] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1417.043405][T17861] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1417.080640][T16808] udevd[16808]: incorrect cramfs checksum on /dev/loop5 [ 1417.128436][T16808] udevd[16808]: incorrect cramfs checksum on /dev/loop5 [ 1417.160434][T16808] udevd[16808]: incorrect cramfs checksum on /dev/loop5 [ 1417.191260][T16808] udevd[16808]: incorrect cramfs checksum on /dev/loop5 [ 1417.252450][T17861] cramfs: Error -3 while decompressing! [ 1417.262250][T17859] erofs: (device loop6): mounted with root inode @ nid 36. [ 1417.315238][T17861] cramfs: ffffffff964020a8(26)->ffff88805af26000(4096) [ 1417.358199][T17861] cramfs: Error -3 while decompressing! [ 1417.363953][T17861] cramfs: ffffffff964020c2(26)->ffff88804cb62000(4096) [ 1417.371476][T17861] cramfs: Error -3 while decompressing! [ 1417.378318][T17861] cramfs: ffffffff964020dc(16)->ffff888056563000(4096) [ 1417.385535][T17861] cramfs: Error -3 while decompressing! [ 1417.395362][T17861] cramfs: ffffffff964020a8(26)->ffff88805af26000(4096) [ 1417.406589][T17872] loop0: detected capacity change from 0 to 64 [ 1417.495116][T17874] device veth0_macvtap left promiscuous mode [ 1417.639535][T17874] macvtap0: refused to change device tx_queue_len [ 1417.723560][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'. [ 1420.125901][T17919] loop0: detected capacity change from 0 to 8 [ 1420.898106][T17932] loop6: detected capacity change from 0 to 256 [ 1421.012747][T16063] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1421.070101][T17932] FAT-fs (loop6): Directory bread(block 64) failed [ 1421.118674][T17932] FAT-fs (loop6): Directory bread(block 65) failed [ 1421.296743][T17942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3209'. [ 1421.770725][T17932] FAT-fs (loop6): Directory bread(block 66) failed [ 1421.784838][T17932] FAT-fs (loop6): Directory bread(block 67) failed [ 1421.804294][T17932] FAT-fs (loop6): Directory bread(block 68) failed [ 1421.811085][T17932] FAT-fs (loop6): Directory bread(block 69) failed [ 1421.818122][T17932] FAT-fs (loop6): Directory bread(block 70) failed [ 1421.840229][T17932] FAT-fs (loop6): Directory bread(block 71) failed [ 1421.870683][T17947] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1421.877678][T17932] FAT-fs (loop6): Directory bread(block 72) failed [ 1421.932813][T17932] FAT-fs (loop6): Directory bread(block 73) failed [ 1421.992810][T16063] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1422.001176][T16063] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.062689][T16063] usb 6-1: config 220 has no interface number 2 [ 1422.069247][T16063] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1422.112948][T16063] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1422.128167][T17953] loop4: detected capacity change from 0 to 2048 [ 1422.133079][T16063] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1422.168186][T16063] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1422.178335][T16063] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1422.205306][T16063] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1422.242064][T17957] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1422.345013][T17953] NILFS (loop4): error -2 truncating bmap (ino=16) [ 1422.372654][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1422.372671][ T26] audit: type=1800 audit(1771539683.542:754): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3217" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1422.420107][T17957] ------------[ cut here ]------------ [ 1422.426320][T17957] WARNING: CPU: 1 PID: 17957 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 1422.436061][T17957] Modules linked in: [ 1422.440117][T17957] CPU: 1 PID: 17957 Comm: segctord Not tainted syzkaller #0 [ 1422.447571][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1422.458185][T17957] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 1422.464350][T17957] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 d3 63 6a fe e8 ae be f1 fd e9 b8 fc ff ff e8 c4 63 6a fe <0f> 0b e9 16 fc ff ff e8 b8 63 6a fe e8 93 be f1 fd e9 74 fe ff ff [ 1422.484427][T17957] RSP: 0018:ffffc90002f0f390 EFLAGS: 00010293 [ 1422.490600][T17957] RAX: ffffffff830ebe7c RBX: ffff88801f4161a0 RCX: ffff88807ca63b80 [ 1422.498797][T17957] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 1422.506904][T17957] RBP: 0000000000000003 R08: ffff888061f38917 R09: 1ffff1100c3e7122 [ 1422.515020][T17957] R10: dffffc0000000000 R11: ffffed100c3e7123 R12: ffff88807ca65308 [ 1422.517502][T16063] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1422.523119][T17957] R13: ffff888076c279e0 R14: 00000000003f0002 R15: ffff8880786cc430 [ 1422.536755][T16063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.540416][T17957] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1422.557671][T17957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1422.564737][T17957] CR2: 0000555567b83a28 CR3: 0000000064fb3000 CR4: 00000000003506e0 [ 1422.573049][T17957] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1422.582459][T17957] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1422.590651][T17957] Call Trace: [ 1422.594018][T17957] [ 1422.597008][T17957] nilfs_dat_commit_update+0x24/0x40 [ 1422.602388][T17957] nilfs_btree_commit_update_v+0x93/0x410 [ 1422.608256][T17957] nilfs_btree_propagate+0x95a/0xcf0 [ 1422.608265][T16063] usb 6-1: Product: syz [ 1422.608293][T17957] nilfs_bmap_propagate+0x70/0x120 [ 1422.623341][T17957] nilfs_segctor_apply_buffers+0x15d/0x320 [ 1422.628739][T16063] usb 6-1: Manufacturer: syz [ 1422.629774][T17957] ? nilfs_collect_file_data+0xc0/0xc0 [ 1422.639965][T17957] nilfs_segctor_scan_file+0x7af/0x9d0 [ 1422.645725][T17957] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 1422.648995][T16063] usb 6-1: SerialNumber: syz [ 1422.653070][T17957] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 1422.653107][T17957] ? rcu_is_watching+0x11/0xa0 [ 1422.653129][T17957] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 1422.674865][T17957] ? add_chain_block+0x940/0x940 [ 1422.680055][T17957] ? verify_lock_unused+0x140/0x140 [ 1422.685403][T17957] ? nilfs_transaction_unlock+0x220/0x220 [ 1422.691322][T17957] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 1422.697633][T17957] ? clear_nonspinnable+0x60/0x60 [ 1422.702759][T17957] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 1422.708341][T17957] ? __lock_acquire+0x7d10/0x7d10 [ 1422.713490][T17957] ? __rwlock_init+0x140/0x140 [ 1422.718355][T17957] ? do_raw_spin_unlock+0x11d/0x230 [ 1422.723663][T17957] ? _raw_spin_unlock+0x24/0x40 [ 1422.728613][T17957] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 1422.734588][T17957] nilfs_segctor_construct+0x17b/0x690 [ 1422.740163][T17957] nilfs_segctor_thread+0x523/0x1180 [ 1422.745589][T17957] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1422.752247][T17957] ? nilfs_iput_work_func+0x70/0x70 [ 1422.757581][T17957] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1422.763586][T17957] ? _raw_spin_unlock+0x40/0x40 [ 1422.768525][T17957] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1422.774632][T17957] ? init_wait_entry+0xd0/0xd0 [ 1422.779482][T17957] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1422.785528][T17957] ? __kthread_parkme+0x157/0x1b0 [ 1422.790777][T17957] kthread+0x436/0x520 [ 1422.795085][T17957] ? nilfs_iput_work_func+0x70/0x70 [ 1422.800389][T17957] ? kthread_blkcg+0xd0/0xd0 [ 1422.805117][T17957] ret_from_fork+0x1f/0x30 [ 1422.809657][T17957] [ 1422.812766][T17957] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1422.820043][T17957] CPU: 1 PID: 17957 Comm: segctord Not tainted syzkaller #0 [ 1422.827342][T17957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1422.837763][T17957] Call Trace: [ 1422.841056][T17957] [ 1422.844006][T17957] dump_stack_lvl+0x188/0x250 [ 1422.848702][T17957] ? show_regs_print_info+0x20/0x20 [ 1422.853913][T17957] ? load_image+0x400/0x400 [ 1422.858450][T17957] panic+0x2e5/0x810 [ 1422.862360][T17957] ? bpf_jit_dump+0xd0/0xd0 [ 1422.866887][T17957] ? ret_from_fork+0x1f/0x30 [ 1422.871493][T17957] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 1422.876885][T17957] __warn+0x248/0x2b0 [ 1422.880884][T17957] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 1422.886368][T17957] report_bug+0x1b7/0x2e0 [ 1422.890794][T17957] handle_bug+0x3a/0x70 [ 1422.894963][T17957] exc_invalid_op+0x16/0x40 [ 1422.899473][T17957] asm_exc_invalid_op+0x16/0x20 [ 1422.904332][T17957] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 1422.910507][T17957] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 d3 63 6a fe e8 ae be f1 fd e9 b8 fc ff ff e8 c4 63 6a fe <0f> 0b e9 16 fc ff ff e8 b8 63 6a fe e8 93 be f1 fd e9 74 fe ff ff [ 1422.930123][T17957] RSP: 0018:ffffc90002f0f390 EFLAGS: 00010293 [ 1422.936214][T17957] RAX: ffffffff830ebe7c RBX: ffff88801f4161a0 RCX: ffff88807ca63b80 [ 1422.944193][T17957] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 1422.952277][T17957] RBP: 0000000000000003 R08: ffff888061f38917 R09: 1ffff1100c3e7122 [ 1422.960272][T17957] R10: dffffc0000000000 R11: ffffed100c3e7123 R12: ffff88807ca65308 [ 1422.968467][T17957] R13: ffff888076c279e0 R14: 00000000003f0002 R15: ffff8880786cc430 [ 1422.976462][T17957] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 1422.981877][T17957] nilfs_dat_commit_update+0x24/0x40 [ 1422.986190][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.987244][T17957] nilfs_btree_commit_update_v+0x93/0x410 [ 1422.993688][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.999289][T17957] nilfs_btree_propagate+0x95a/0xcf0 [ 1422.999323][T17957] nilfs_bmap_propagate+0x70/0x120 [ 1422.999345][T17957] nilfs_segctor_apply_buffers+0x15d/0x320 [ 1423.021951][T17957] ? nilfs_collect_file_data+0xc0/0xc0 [ 1423.027436][T17957] nilfs_segctor_scan_file+0x7af/0x9d0 [ 1423.032992][T17957] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 1423.040139][T17957] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 1423.046055][T17957] ? rcu_is_watching+0x11/0xa0 [ 1423.050988][T17957] nilfs_segctor_do_construct+0x1c26/0x6ca0 [ 1423.057077][T17957] ? add_chain_block+0x940/0x940 [ 1423.062079][T17957] ? verify_lock_unused+0x140/0x140 [ 1423.067307][T17957] ? nilfs_transaction_unlock+0x220/0x220 [ 1423.073047][T17957] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 1423.079325][T17957] ? clear_nonspinnable+0x60/0x60 [ 1423.083269][T16063] usb 6-1: selecting invalid altsetting 0 [ 1423.084358][T17957] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 1423.095655][T17957] ? __lock_acquire+0x7d10/0x7d10 [ 1423.100811][T17957] ? __rwlock_init+0x140/0x140 [ 1423.101091][T16063] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1423.105694][T17957] ? do_raw_spin_unlock+0x11d/0x230 [ 1423.105722][T17957] ? _raw_spin_unlock+0x24/0x40 [ 1423.105735][T17957] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 1423.105756][T17957] nilfs_segctor_construct+0x17b/0x690 [ 1423.105780][T17957] nilfs_segctor_thread+0x523/0x1180 [ 1423.105816][T17957] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1423.105832][T17957] ? nilfs_iput_work_func+0x70/0x70 [ 1423.105851][T17957] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1423.105866][T17957] ? _raw_spin_unlock+0x40/0x40 [ 1423.105879][T17957] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1423.105893][T17957] ? init_wait_entry+0xd0/0xd0 [ 1423.171010][T17957] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1423.176994][T17957] ? __kthread_parkme+0x157/0x1b0 [ 1423.182449][T17957] kthread+0x436/0x520 [ 1423.186507][T17957] ? nilfs_iput_work_func+0x70/0x70 [ 1423.191702][T17957] ? kthread_blkcg+0xd0/0xd0 [ 1423.196287][T17957] ret_from_fork+0x1f/0x30 [ 1423.200699][T17957] [ 1423.204288][T17957] Kernel Offset: disabled [ 1423.212975][T17957] Rebooting in 86400 seconds..