last executing test programs: 3m13.990278504s ago: executing program 4 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000300)={r5, 0x0, 0x9, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0x100, 0xd], [0x1000000000000, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r7, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/76, 0x4c}]}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) 3m8.958258997s ago: executing program 4 (id=88): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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") 3m4.606418241s ago: executing program 4 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r3, 0x0, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2m58.979741123s ago: executing program 4 (id=103): sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000180)={[{@errors_remount}]}, 0x3, 0x43b, &(0x7f0000000300)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7c2ee5e5ca0000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x40000000200]}) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz0\x00', {0x3, 0x6, 0x7}, 0x49, [0x3, 0x0, 0x4, 0x1, 0x1, 0x2, 0xf3, 0x0, 0x8, 0xf, 0x7, 0x3, 0xfffffffe, 0x101, 0x400, 0x3, 0x4, 0x3, 0xa, 0x4, 0xfc, 0xfffffffe, 0x400, 0x100, 0x8000, 0xfff, 0x400, 0x0, 0x3, 0x401, 0x9, 0xfffffffe, 0x10, 0x3, 0x4, 0x0, 0x27, 0x7, 0x0, 0x8, 0x1195, 0x8, 0x5, 0x8, 0x3, 0x2, 0x10001, 0x3, 0x2b2, 0x4, 0x1ad0, 0x9, 0x6, 0x4, 0xedbe, 0x4, 0x2, 0x7, 0xa3, 0xfffffff8, 0x6, 0x80, 0x10000022, 0x81], [0x1, 0x8001, 0x563, 0x80000001, 0x0, 0x0, 0x4, 0x854f002, 0x2, 0x8, 0x8001, 0xd2, 0x8b, 0x8ab, 0x3, 0x2a6d2895, 0x5, 0x3, 0x100, 0x201, 0x6, 0x0, 0x5, 0x7, 0x4a63, 0x1, 0x9, 0x8, 0x1000, 0x9, 0x4, 0xf, 0x7, 0x401, 0x7, 0x8, 0x8000, 0xff, 0x4, 0xb0f, 0x8001, 0xdfcf, 0xc1f40800, 0x9, 0x2, 0x2, 0x6, 0x0, 0x9, 0x1000f, 0x0, 0x2, 0xfffff2a1, 0x2000009, 0x3cb, 0x5bda, 0x1, 0x40defe, 0x7, 0x7, 0x4, 0x524, 0x8001, 0x41], [0x6, 0x4, 0x7, 0xe000, 0x7, 0x3, 0x123, 0xc, 0x1, 0x4, 0x6, 0xfffffff8, 0x9, 0x300000, 0x80000001, 0x4, 0x8008, 0x4, 0xd, 0x9, 0x8001, 0x2, 0x2, 0x4, 0x6, 0x1, 0x6, 0x2, 0x400, 0x20400, 0xff, 0x166, 0x7, 0xc8f, 0x3, 0x8, 0x3, 0x1, 0x1000, 0x7fffffff, 0x9, 0x8, 0x1000, 0x10, 0x6, 0xfeb, 0x100, 0x8, 0x3ff, 0x3a, 0xa18858f, 0x9, 0x1, 0x9, 0xffc00000, 0x4841, 0x4, 0x10, 0x4, 0x3, 0xf, 0x40, 0x5ff, 0x3a], [0xaeaf, 0x6, 0x2, 0x7ff, 0x3ff, 0x800, 0x8, 0x6, 0x1, 0x5, 0x9, 0x2, 0x8a4, 0xd5, 0xdd, 0xb5, 0x2, 0x1, 0x2, 0xcb32, 0x3, 0xf018, 0x9, 0x0, 0xda19, 0x80000001, 0x10001, 0x0, 0x4, 0x0, 0x5, 0xcc1, 0x8, 0x1, 0x2, 0xb, 0x3, 0x1, 0x0, 0xb7b, 0xffffff4a, 0x4, 0x7886, 0xbf8d, 0x9, 0x46dc, 0x1, 0x40, 0x9, 0x8, 0x10000, 0x1, 0x8, 0x10, 0x770, 0x0, 0x10001, 0x3ff, 0x5, 0x7, 0x8, 0x7d1, 0x1, 0x8]}, 0x45c) 2m56.993997582s ago: executing program 4 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESOCT, @ANYBLOB="e6d96c8fa41236869e8d88e08903947c550de36d3749c398dca5c2662feb7c7e633d169f3b3540a7b7d27c1a51fbaacef0089af14216453e614370a26599e0bd752db93214aee8e0e7ed370904b299ecea40258bdc6e80de10aa7387537a1c2b826fc09c00b41f5082546a2e190b3d89b5cba8edd41852dfbfe2917578fe835316", @ANYRES64], 0x1, 0x4432, &(0x7f00000088c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 2m51.727525329s ago: executing program 4 (id=126): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2m51.029812839s ago: executing program 32 (id=126): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 8.042891643s ago: executing program 5 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)) 7.658449818s ago: executing program 2 (id=500): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 6.82493763s ago: executing program 5 (id=502): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1000000, 0x1) 6.714475532s ago: executing program 0 (id=504): r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x235c, 0x3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000580)=""/248) 6.699358242s ago: executing program 2 (id=505): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009040402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.643296613s ago: executing program 1 (id=506): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x480, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz0\x00', 0x0}) read(r0, &(0x7f0000000200)=""/193, 0xc1) 6.558535584s ago: executing program 5 (id=507): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 6.482362265s ago: executing program 0 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6.461234566s ago: executing program 1 (id=510): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 6.381268967s ago: executing program 5 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, 0x0, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 5.014413587s ago: executing program 3 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, 0x0, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r1, 0x0, 0x0) 4.678568192s ago: executing program 3 (id=516): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) 3.717773545s ago: executing program 3 (id=517): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000740)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8, 0x100000081}) 3.382939281s ago: executing program 2 (id=518): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setgroups(0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) 3.094478785s ago: executing program 3 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x0, 0x0}, 0x10) socket$inet(0x2, 0x2, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Dd', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(r2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x1) r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 3.093767665s ago: executing program 1 (id=520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7, 0x0, 0x0, 0xd78e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x7, 0xfffffffffffffffc, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x91, &(0x7f0000000240)=""/145}, 0x94) 2.983457626s ago: executing program 1 (id=521): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)="ec0e3f81bc000300000000000000007f000027ca3462b832", 0x18) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000085c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x7, 0x0, 0x0, 0xf, 0x4, "fee8a2ab78fc179fd1f8a0e91ddaaca79a00c6a4b4010d9683dda1af1ea89de2b703000000000000000000002200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b4203c5240f45f819e01177d3d458dd4992861ac00000000000000000400", "90306000d80000000000005d5400000000001900", [0x6]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2.959334577s ago: executing program 2 (id=522): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0086c43, &(0x7f0000000080)=0x700) 2.05312799s ago: executing program 5 (id=523): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@bh}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0xa6002, 0x129) pwritev2(r0, &(0x7f0000000bc0)=[{&(0x7f0000000000)="85", 0x1}, {0x0}], 0x2, 0x2000, 0x9, 0x3) 2.015660181s ago: executing program 0 (id=524): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04030b00c800ce5dd37d19965fc01aff701b650101000000000000000000be0fd2b9228fdd729d2e844f66b0148e71729157fb7c50a2989575f160fc528c56d6af7f52ea4658fd464746d2e5480edb141a43f8e0cbfd424089c91e71b0eae1bab0"], 0xe) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) 1.910384722s ago: executing program 3 (id=525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4054}, 0x0) gettid() timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) 1.844600653s ago: executing program 1 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r3, 0x0, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r3, 0x0, 0x0) 1.535463997s ago: executing program 2 (id=527): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, 0x0}, 0x20) 1.332105411s ago: executing program 0 (id=528): mlock2(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) 1.33120474s ago: executing program 1 (id=529): openat(0xffffffffffffff9c, 0x0, 0x204401, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x20, 0x4, 0x2, {0x2, 0x23}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 1.209248263s ago: executing program 2 (id=530): r0 = syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.113623374s ago: executing program 0 (id=531): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 1.024983035s ago: executing program 5 (id=532): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x68b, &(0x7f0000000a40)="$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") open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) truncate(&(0x7f0000000040)='./file2\x00', 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 10.89851ms ago: executing program 3 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, 0x0, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 0s ago: executing program 0 (id=534): syz_mount_image$hfsplus(&(0x7f0000000380), &(0x7f0000000640)='./file0\x00', 0x40, &(0x7f0000001800)=ANY=[@ANYRES32=0x0, @ANYBLOB="9730fd0106d78656cdf85f3db00be882ad306974e8d0f0e32c878f660c348ce520bf42e4e501856219617b9dc2c3605b9aae8c5f10ecbe11a2025fda5260d1bc45f4bc6a8dd743c8cdce6c612a7f44b8f6f58cbd5e8d1268ab70713119da41398d783365d4aba9138dda8655c1b161304187610af807efc30a0360d325f1b8ea54098f738130d92cd8a3136e7dcb824b0063e483c6ffb4b2745f58aaf6b917ea578de0a177242ed336419be6547592f167cf4f9a529a6c77a7600878a538d8999bf730a08a21e39ecf446beb1241c9"], 0x1, 0x639, &(0x7f0000000680)="$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") mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) kernel console output (not intermixed with test programs): m0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231433][ T4174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.241796][ T4174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.251348][ T4174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.287924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.358918][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.373009][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.383583][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.394940][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.425232][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.437112][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.447593][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.458326][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.470663][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.500405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.513933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.542370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 67.566503][ T4279] sd 0:0:1:0: device reset [ 68.133241][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.236408][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.258908][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.295501][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.330909][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.373976][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.410583][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.447622][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.486265][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.509127][ T4279] loop1: detected capacity change from 0 to 32768 [ 68.527391][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.542526][ T4279] ======================================================= [ 68.542526][ T4279] WARNING: The mand mount option has been deprecated and [ 68.542526][ T4279] and is ignored by this kernel. Remove the mand [ 68.542526][ T4279] option from the mount to silence this warning. [ 68.542526][ T4279] ======================================================= [ 68.593226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.616424][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.625387][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!! [ 68.640189][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.649222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 68.669150][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 68.690544][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.701138][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.717030][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 68.745836][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.756676][ T4223] Bluetooth: hci1: command 0x0419 tx timeout [ 68.762788][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.770962][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 68.789592][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.815340][ T4279] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 68.835624][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 68.926860][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 68.945022][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.243276][ T4279] syz.1.7 (4279) used greatest stack depth: 21136 bytes left [ 69.257220][ T4223] Bluetooth: hci3: command 0x0419 tx timeout [ 69.269410][ T4177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.294709][ T4177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.303698][ T4177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.312605][ T4177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.426380][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 69.454618][ T493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.494199][ T493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.532000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.540158][ T4256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.566701][ T4256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.756816][ T26] audit: type=1326 audit(1751120301.007:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 69.833973][ T4292] ax25_connect(): syz.0.1 uses autobind, please contact jreuter@yaina.de [ 69.961250][ T26] audit: type=1326 audit(1751120301.077:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 70.093386][ T26] audit: type=1326 audit(1751120301.077:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 70.261970][ T26] audit: type=1326 audit(1751120301.077:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 70.416080][ T26] audit: type=1326 audit(1751120301.097:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 70.437930][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.445512][ T26] audit: type=1326 audit(1751120301.097:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 70.467518][ T26] audit: type=1326 audit(1751120301.097:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 70.489345][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.497060][ T26] audit: type=1326 audit(1751120301.097:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 70.503079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.524202][ T26] audit: type=1326 audit(1751120301.097:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 70.549116][ T26] audit: type=1326 audit(1751120301.097:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4288 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 70.571018][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.624599][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.676676][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.729032][ T493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.747943][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.909908][ T493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.930526][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.955125][ T493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.955177][ T493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.957316][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.002015][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.002069][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.006305][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.043202][ T4296] device syzkaller1 entered promiscuous mode [ 72.141428][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.148123][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.202312][ T4311] Zero length message leads to an empty skb [ 73.476326][ T4322] loop1: detected capacity change from 0 to 131072 [ 74.830155][ T4322] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 74.838698][ T4322] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 74.868298][ T4327] input: syz1 as /devices/virtual/input/input5 [ 74.870074][ T4322] F2FS-fs (loop1): invalid crc value [ 75.070492][ T4322] F2FS-fs (loop1): Found nat_bits in checkpoint [ 75.118278][ T4322] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 75.140436][ T4322] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 75.147710][ T4322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 75.493517][ T4335] loop4: detected capacity change from 0 to 1024 [ 78.712908][ T4282] hfsplus: b-tree write err: -5, ino 4 [ 78.782588][ T4352] loop1: detected capacity change from 0 to 1024 [ 80.125604][ T4366] loop0: detected capacity change from 0 to 512 [ 80.133629][ T4352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.017344][ T4366] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noauto_da_alloc,. Quota mode: writeback. [ 81.037136][ T4374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 81.448942][ T4366] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.771200][ T4384] loop2: detected capacity change from 0 to 128 [ 82.828615][ T4384] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.985308][ T4384] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.337909][ T4391] loop4: detected capacity change from 0 to 1024 [ 85.500772][ T4391] EXT4-fs (loop4): Ignoring removed nobh option [ 85.515419][ T4391] EXT4-fs (loop4): Ignoring removed oldalloc option [ 85.522112][ T4391] EXT4-fs (loop4): Ignoring removed orlov option [ 85.603708][ T4339] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.343072][ T4407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 86.363003][ T4400] loop1: detected capacity change from 0 to 4096 [ 86.416728][ T4391] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,journal_dev=0x0000000000001045,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,user_xattr,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 86.434782][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 86.463506][ T4407] netlink: 'syz.2.31': attribute type 7 has an invalid length. [ 86.690295][ T23] cfg80211: failed to load regulatory.db [ 87.125360][ T4400] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 88.723377][ T4438] loop4: detected capacity change from 0 to 64 [ 89.014604][ T4438] hfs: unable to locate alternate MDB [ 89.245868][ T4438] hfs: continuing without an alternate MDB [ 89.877944][ T4449] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 90.141114][ T4180] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 90.151088][ T4180] CPU: 1 PID: 4180 Comm: kworker/u5:3 Not tainted 5.15.186-syzkaller #0 [ 90.159454][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.169541][ T4180] Workqueue: hci1 hci_rx_work [ 90.174283][ T4180] Call Trace: [ 90.177580][ T4180] [ 90.180532][ T4180] dump_stack_lvl+0x168/0x230 [ 90.185236][ T4180] ? show_regs_print_info+0x20/0x20 [ 90.190452][ T4180] ? load_image+0x3b0/0x3b0 [ 90.194997][ T4180] sysfs_create_dir_ns+0x252/0x280 [ 90.200143][ T4180] ? __lock_acquire+0x7c60/0x7c60 [ 90.205198][ T4180] ? sysfs_warn_dup+0xa0/0xa0 [ 90.209876][ T4180] ? le_conn_complete_evt+0xcbc/0x1590 [ 90.215354][ T4180] ? hci_event_packet+0xe05/0x12f0 [ 90.220474][ T4180] ? process_one_work+0x863/0x1000 [ 90.225601][ T4180] ? do_raw_spin_unlock+0x11d/0x230 [ 90.230808][ T4180] kobject_add_internal+0x662/0xd00 [ 90.236028][ T4180] kobject_add+0x152/0x210 [ 90.240458][ T4180] ? kobject_init+0x1d0/0x1d0 [ 90.245143][ T4180] ? klist_children_get+0x50/0x50 [ 90.250172][ T4180] ? get_device_parent+0x121/0x3f0 [ 90.255293][ T4180] device_add+0x483/0xfb0 [ 90.259640][ T4180] hci_conn_add_sysfs+0xd1/0x1e0 [ 90.264592][ T4180] le_conn_complete_evt+0xcbc/0x1590 [ 90.269899][ T4180] ? cs_le_create_conn+0x5e0/0x5e0 [ 90.275115][ T4180] ? __mutex_trylock_common+0x14f/0x250 [ 90.280689][ T4180] hci_le_meta_evt+0x289/0x3b80 [ 90.285549][ T4180] ? hci_event_packet+0x36d/0x12f0 [ 90.290683][ T4180] ? hci_event_packet+0x2e2/0x12f0 [ 90.295799][ T4180] ? __lock_acquire+0x7c60/0x7c60 [ 90.300846][ T4180] ? hci_remote_host_features_evt+0x280/0x280 [ 90.306919][ T4180] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 90.312558][ T4180] ? mark_lock+0x94/0x320 [ 90.316896][ T4180] ? mutex_unlock+0x10/0x10 [ 90.321406][ T4180] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 90.327397][ T4180] ? lock_chain_count+0x20/0x20 [ 90.332255][ T4180] ? __rwlock_init+0x140/0x140 [ 90.337024][ T4180] hci_event_packet+0xe05/0x12f0 [ 90.341973][ T4180] ? lockdep_hardirqs_on+0x94/0x140 [ 90.347182][ T4180] ? rcu_lock_release+0x20/0x20 [ 90.352044][ T4180] ? hci_send_to_monitor+0x9c/0x4a0 [ 90.357252][ T4180] hci_rx_work+0x255/0xa10 [ 90.361691][ T4180] process_one_work+0x863/0x1000 [ 90.366650][ T4180] ? worker_detach_from_pool+0x240/0x240 [ 90.372294][ T4180] ? lockdep_hardirqs_off+0x70/0x100 [ 90.377592][ T4180] ? _raw_spin_lock_irq+0xab/0xe0 [ 90.382642][ T4180] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 90.388026][ T4180] ? wq_worker_running+0x97/0x170 [ 90.393057][ T4180] worker_thread+0xaa8/0x12a0 [ 90.397741][ T4180] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 90.403640][ T4180] ? lockdep_hardirqs_on+0x94/0x140 [ 90.408858][ T4180] ? lockdep_hardirqs_on+0x94/0x140 [ 90.414063][ T4180] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 90.419970][ T4180] kthread+0x436/0x520 [ 90.424046][ T4180] ? rcu_lock_release+0x20/0x20 [ 90.428897][ T4180] ? kthread_blkcg+0xd0/0xd0 [ 90.433490][ T4180] ret_from_fork+0x1f/0x30 [ 90.437923][ T4180] [ 90.444208][ T4180] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 90.457553][ T4180] Bluetooth: hci1: failed to register connection device [ 91.093076][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 91.093092][ T26] audit: type=1326 audit(1751120322.337:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 91.201110][ T4467] loop0: detected capacity change from 0 to 16 [ 91.290493][ T4467] erofs: (device loop0): mounted with root inode @ nid 36. [ 91.393107][ T4467] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 91.438252][ T4472] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 91.440331][ T4467] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 91.511679][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 91.589497][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 91.643073][ T4472] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 91.725044][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 91.846037][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 92.265061][ T4477] netlink: 'syz.1.52': attribute type 6 has an invalid length. [ 92.313331][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 92.343410][ T4479] loop3: detected capacity change from 0 to 256 [ 92.365885][ T4479] exfat: Deprecated parameter 'namecase' [ 92.936571][ T4479] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 92.952236][ T4472] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 92.961917][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 92.973882][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 92.983443][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 93.762581][ T4213] Bluetooth: hci2: command 0x0409 tx timeout [ 93.777185][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 93.817932][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 93.867699][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 93.881132][ T4472] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 93.892889][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 93.902588][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 93.913846][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 93.924196][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36 [ 93.934296][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 93.945725][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36 [ 93.955818][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 93.967359][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36 [ 94.046882][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 94.056760][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 94.074952][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 94.105973][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 94.233871][ T4472] attempt to access beyond end of device [ 94.233871][ T4472] loop0: rw=524288, want=312, limit=16 [ 94.295779][ T4492] sd 0:0:1:0: device reset [ 95.151513][ T4492] loop3: detected capacity change from 0 to 32768 [ 95.862431][ T4494] input: syz1 as /devices/virtual/input/input6 [ 95.969041][ T4492] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.001050][ T4472] attempt to access beyond end of device [ 96.001050][ T4472] loop0: rw=524288, want=1049280, limit=16 [ 96.197475][ T4472] attempt to access beyond end of device [ 96.197475][ T4472] loop0: rw=524288, want=24, limit=16 [ 96.510109][ T4472] attempt to access beyond end of device [ 96.510109][ T4472] loop0: rw=524288, want=736, limit=16 [ 96.558977][ T4472] attempt to access beyond end of device [ 96.558977][ T4472] loop0: rw=524288, want=776, limit=16 [ 96.589413][ T4174] ocfs2: Unmounting device (7,3) on (node local) [ 96.669839][ T4472] attempt to access beyond end of device [ 96.669839][ T4472] loop0: rw=524288, want=848, limit=16 [ 96.781945][ T4472] attempt to access beyond end of device [ 96.781945][ T4472] loop0: rw=524288, want=13478624104, limit=16 [ 97.288171][ T4213] Bluetooth: hci1: command 0x0406 tx timeout [ 97.299818][ T4472] attempt to access beyond end of device [ 97.299818][ T4472] loop0: rw=524288, want=13478624080, limit=16 [ 97.903119][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 97.980451][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 98.014605][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 98.142813][ T4472] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 98.318188][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 99.071788][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 99.104402][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 99.125745][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 99.145303][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 99.163522][ T4472] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 99.173477][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 99.190111][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 99.203554][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 99.267664][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 99.322652][ T4515] loop3: detected capacity change from 0 to 64 [ 99.357354][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 99.359502][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 99.359526][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 99.359549][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 99.359567][ T4472] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 99.359584][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 99.359602][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 99.359623][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 99.359646][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 99.359668][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 99.359687][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 99.359704][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 99.359724][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 99.359846][ T4472] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 99.359867][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 99.359884][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 99.359903][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 99.359920][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 99.362837][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 99.783217][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 99.814026][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 99.834847][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 99.844528][ T4472] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 99.854158][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 99.863507][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 99.874679][ T4515] device bridge_slave_1 left promiscuous mode [ 100.816287][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.882254][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 101.075545][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 101.087385][ T4515] device bridge_slave_0 left promiscuous mode [ 101.094536][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.110406][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 101.159310][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 101.262406][ T4533] loop2: detected capacity change from 0 to 256 [ 101.394743][ T4472] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36 [ 101.842543][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 101.873311][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 101.883941][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 101.895675][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 101.909722][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 101.925561][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 101.938545][ T4472] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 101.965423][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 102.001984][ T4472] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.042477][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 102.089207][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 102.122371][ T4472] erofs: (device loop0): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 102.148245][ T4472] attempt to access beyond end of device [ 102.148245][ T4472] loop0: rw=524288, want=56, limit=16 [ 102.205665][ T4472] attempt to access beyond end of device [ 102.205665][ T4472] loop0: rw=524288, want=24, limit=16 [ 102.244660][ T4546] sd 0:0:1:0: device reset [ 102.932696][ T4472] attempt to access beyond end of device [ 102.932696][ T4472] loop0: rw=524288, want=40, limit=16 [ 103.072136][ T4546] loop2: detected capacity change from 0 to 32768 [ 103.838714][ T4546] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.924304][ T4472] attempt to access beyond end of device [ 103.924304][ T4472] loop0: rw=524288, want=96, limit=16 [ 104.041566][ T4472] attempt to access beyond end of device [ 104.041566][ T4472] loop0: rw=524288, want=32, limit=16 [ 104.231394][ T4172] ocfs2: Unmounting device (7,2) on (node local) [ 105.278235][ T4565] IPVS: Unknown mcast interface: pim6reg1 [ 105.478575][ T26] audit: type=1326 audit(1751120336.717:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4566 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 105.503955][ T4569] ax25_connect(): syz.3.73 uses autobind, please contact jreuter@yaina.de [ 105.743082][ T26] audit: type=1326 audit(1751120336.757:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4566 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 106.141156][ T26] audit: type=1326 audit(1751120336.757:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4566 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 106.348301][ T26] audit: type=1326 audit(1751120336.757:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4566 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 107.305674][ T4213] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 107.482519][ T4572] loop1: detected capacity change from 0 to 32768 [ 107.578224][ T4572] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 107.611894][ T4572] (syz.1.79,4572,0):ocfs2_clear_journal_error:1085 ERROR: File system error -318767104 recorded in journal 0. [ 107.640586][ T4572] (syz.1.79,4572,0):ocfs2_clear_journal_error:1087 ERROR: File system on device loop1 needs checking. [ 107.656486][ T4572] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 107.735763][ T4213] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.749262][ T4213] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.763218][ T4213] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.772628][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.047659][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 108.055520][ T4213] usb 1-1: GET_CAPABILITIES returned 0 [ 108.061584][ T4213] usbtmc 1-1:16.0: can't read capabilities [ 108.800933][ T4338] usb 1-1: USB disconnect, device number 2 [ 109.155774][ T4609] sd 0:0:1:0: device reset [ 110.924554][ T4609] loop4: detected capacity change from 0 to 32768 [ 113.128966][ T4609] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 113.345431][ T4206] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.659484][ T4619] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 113.678115][ T4619] File: /dev/nullb0 PID: 4619 Comm: syz.1.91 [ 113.755998][ T4177] ocfs2: Unmounting device (7,4) on (node local) [ 114.259015][ T4623] loop0: detected capacity change from 0 to 4096 [ 117.888247][ T4645] loop1: detected capacity change from 0 to 32768 [ 118.765625][ T4645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.100 (4645) [ 118.831170][ T4645] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 118.840387][ T4645] BTRFS info (device loop1): setting nodatacow, compression disabled [ 118.849224][ T4645] BTRFS info (device loop1): max_inline at 0 [ 118.855314][ T4645] BTRFS info (device loop1): enabling disk space caching [ 118.862421][ T4645] BTRFS info (device loop1): turning off barriers [ 118.868875][ T4645] BTRFS info (device loop1): turning on flush-on-commit [ 118.875873][ T4645] BTRFS info (device loop1): doing ref verification [ 118.882487][ T4645] BTRFS info (device loop1): force clearing of disk cache [ 118.889763][ T4645] BTRFS info (device loop1): enabling ssd optimizations [ 118.896808][ T4645] BTRFS info (device loop1): max_inline at 4096 [ 118.903050][ T4645] BTRFS info (device loop1): disk space caching is enabled [ 118.910333][ T4645] BTRFS info (device loop1): has skinny extents [ 119.091694][ T4675] loop4: detected capacity change from 0 to 512 [ 119.207765][ T4645] BTRFS info (device loop1): clearing free space tree [ 119.215649][ T4645] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.226514][ T4645] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.299673][ T26] audit: type=1326 audit(1751120350.547:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 119.326311][ T4678] ax25_connect(): syz.3.92 uses autobind, please contact jreuter@yaina.de [ 119.347478][ T4675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.633871][ T4675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.740878][ T26] audit: type=1326 audit(1751120350.577:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 119.949859][ T26] audit: type=1326 audit(1751120350.587:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 119.951931][ T4675] EXT4-fs (loop4): 1 truncate cleaned up [ 120.010016][ T26] audit: type=1326 audit(1751120350.587:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 120.115598][ T4675] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 120.144527][ T26] audit: type=1800 audit(1751120351.257:51): pid=4645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.100" name="bus" dev="loop1" ino=261 res=0 errno=0 [ 120.274249][ T4675] loop_set_status: loop4 () has still dirty pages (nrpages=1) [ 120.923227][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 14: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=0, rec_len=0, size=1024 fake=1 [ 120.945169][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.024762][ T4694] loop3: detected capacity change from 0 to 1024 [ 121.054171][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 121.077069][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 121.098595][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.259550][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 121.273349][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 121.323707][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 14: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=0, rec_len=0, size=1024 fake=1 [ 121.371185][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 121.413229][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 121.540347][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 121.605024][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 121.665833][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 14: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=0, rec_len=0, size=1024 fake=1 [ 121.789375][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 121.819382][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 121.842044][ T4667] loop2: detected capacity change from 0 to 32768 [ 121.897774][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 121.904661][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 121.917218][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 14: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=0, rec_len=0, size=1024 fake=1 [ 122.008911][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 122.052637][ T4667] (syz.2.104,4667,1):ocfs2_initialize_super:2313 ERROR: status = -12 [ 122.061004][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 122.113559][ T4667] (syz.2.104,4667,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 122.132251][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 122.159494][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 122.162984][ T4711] loop1: detected capacity change from 0 to 16 [ 122.249075][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 14: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=0, rec_len=0, size=1024 fake=1 [ 122.318044][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 122.342207][ T4177] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 122.379776][ T4177] EXT4-fs (loop4): Remounting filesystem read-only [ 122.411406][ T4711] erofs: (device loop1): mounted with root inode @ nid 36. [ 122.430725][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 122.646667][ T4711] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.749790][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 122.917775][ T4711] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 123.121463][ T4697] loop0: detected capacity change from 0 to 40427 [ 123.140350][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 123.209616][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 123.265816][ T4697] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 123.268752][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 123.291003][ T4177] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 123.312449][ T4697] F2FS-fs (loop0): invalid crc value [ 123.554320][ T4697] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.472593][ T4734] ax25_connect(): syz.1.117 uses autobind, please contact jreuter@yaina.de [ 125.860849][ T4751] loop2: detected capacity change from 0 to 32768 [ 125.892476][ T4751] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.124 (4751) [ 125.947671][ T4751] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 125.956597][ T4751] BTRFS info (device loop2): setting nodatacow, compression disabled [ 125.964756][ T4751] BTRFS info (device loop2): max_inline at 0 [ 125.970794][ T4751] BTRFS info (device loop2): enabling disk space caching [ 125.977877][ T4751] BTRFS info (device loop2): turning off barriers [ 125.984285][ T4751] BTRFS info (device loop2): turning on flush-on-commit [ 125.991290][ T4751] BTRFS info (device loop2): doing ref verification [ 125.997908][ T4751] BTRFS info (device loop2): force clearing of disk cache [ 126.005056][ T4751] BTRFS info (device loop2): enabling ssd optimizations [ 126.012142][ T4751] BTRFS info (device loop2): max_inline at 4096 [ 126.018846][ T4751] BTRFS info (device loop2): disk space caching is enabled [ 126.026079][ T4751] BTRFS info (device loop2): has skinny extents [ 126.277512][ T4324] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.341226][ T4751] BTRFS info (device loop2): clearing free space tree [ 126.348470][ T4751] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.359007][ T4751] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.406386][ T4324] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.550882][ T4747] loop1: detected capacity change from 0 to 32768 [ 126.573785][ T4324] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.574164][ T4750] loop3: detected capacity change from 0 to 32768 [ 126.705528][ T4775] overlayfs: './file1' not a directory [ 126.758724][ T26] audit: type=1800 audit(1751120358.007:52): pid=4775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.124" name="bus" dev="loop2" ino=264 res=0 errno=0 [ 126.851855][ T4747] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.122 (4747) [ 127.112337][ T4750] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.347246][ T4324] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.409559][ T4775] syz.2.124 (4775) used greatest stack depth: 21064 bytes left [ 127.627829][ T4174] ocfs2: Unmounting device (7,3) on (node local) [ 128.198090][ T4793] syz.3.130 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.783063][ T4795] ax25_connect(): syz.1.131 uses autobind, please contact jreuter@yaina.de [ 129.585591][ T4281] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.589308][ T4789] chnl_net:caif_netlink_parms(): no params data found [ 130.928572][ T4214] Bluetooth: hci4: command 0x0409 tx timeout [ 131.014371][ T4848] loop2: detected capacity change from 0 to 64 [ 131.040336][ T4848] hfs: unable to locate alternate MDB [ 131.155455][ T4848] hfs: continuing without an alternate MDB [ 131.245524][ T4281] usb 2-1: Using ep0 maxpacket: 16 [ 131.333406][ T4856] tmpfs: Unknown parameter 'usrquota' [ 132.759782][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766266][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.448589][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 133.499278][ T4857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.140'. [ 133.725858][ T4281] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 133.759164][ T4281] usb 2-1: can't read configurations, error -71 [ 134.947839][ T4869] ax25_connect(): syz.0.142 uses autobind, please contact jreuter@yaina.de [ 135.124818][ T4871] loop1: detected capacity change from 0 to 256 [ 135.167067][ T4871] exfat: Deprecated parameter 'namecase' [ 135.177945][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.185812][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.194025][ T4789] device bridge_slave_0 entered promiscuous mode [ 135.206707][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.213980][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.226451][ T4789] device bridge_slave_1 entered promiscuous mode [ 135.315605][ T4871] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 135.475806][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 136.810732][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.923413][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.567272][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 137.678822][ T4789] team0: Port device team_slave_0 added [ 137.768419][ T4789] team0: Port device team_slave_1 added [ 139.114514][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.495518][ T26] audit: type=1326 audit(1751120371.737:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 140.522326][ T4930] ax25_connect(): syz.0.155 uses autobind, please contact jreuter@yaina.de [ 141.280296][ T4932] sd 0:0:1:0: device reset [ 142.059416][ T4932] loop3: detected capacity change from 0 to 32768 [ 142.723016][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.870203][ T4932] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.967313][ T26] audit: type=1326 audit(1751120371.767:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 143.156642][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.205346][ T26] audit: type=1326 audit(1751120371.767:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 143.360919][ T26] audit: type=1326 audit(1751120371.767:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 143.472207][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.512186][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.535940][ T26] audit: type=1326 audit(1751120371.777:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 143.538191][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.568084][ T4174] ocfs2: Unmounting device (7,3) on (node local) [ 143.738399][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.775675][ T26] audit: type=1326 audit(1751120371.777:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4924 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 143.872373][ T4946] loop0: detected capacity change from 0 to 1024 [ 144.447933][ T4946] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.504262][ T4956] loop3: detected capacity change from 0 to 256 [ 144.639963][ T4789] device hsr_slave_0 entered promiscuous mode [ 144.665780][ T4789] device hsr_slave_1 entered promiscuous mode [ 144.681721][ T4956] exfat: Deprecated parameter 'namecase' [ 144.702243][ T4956] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 144.714886][ T4789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.731807][ T4789] Cannot create hsr debugfs directory [ 147.445653][ T26] audit: type=1326 audit(1751120378.687:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 147.470670][ T4983] ax25_connect(): syz.2.168 uses autobind, please contact jreuter@yaina.de [ 148.175994][ T4977] ODEBUG: Out of memory. ODEBUG disabled [ 148.413653][ T4977] syz.1.169 (4977): drop_caches: 2 [ 148.462211][ T4984] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 148.462211][ T4984] program syz.0.165 not setting count and/or reply_len properly [ 148.638132][ T26] audit: type=1326 audit(1751120378.727:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 148.721703][ T26] audit: type=1326 audit(1751120378.727:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 148.885358][ T26] audit: type=1326 audit(1751120378.727:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 149.083254][ T26] audit: type=1326 audit(1751120378.727:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 149.121810][ T26] audit: type=1326 audit(1751120378.737:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 149.361437][ T4324] device hsr_slave_0 left promiscuous mode [ 149.370157][ T26] audit: type=1326 audit(1751120378.737:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4974 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 150.012264][ T4324] device hsr_slave_1 left promiscuous mode [ 150.112658][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.156060][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.236126][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.243794][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.359109][ T4324] device bridge_slave_1 left promiscuous mode [ 150.371432][ T5012] loop1: detected capacity change from 0 to 256 [ 150.384346][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.466292][ T5012] exfat: Deprecated parameter 'namecase' [ 150.475692][ T4324] device bridge_slave_0 left promiscuous mode [ 150.481958][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.662977][ T4324] device veth1_macvtap left promiscuous mode [ 150.670402][ T4324] device veth0_macvtap left promiscuous mode [ 150.677570][ T4324] device veth1_vlan left promiscuous mode [ 150.684211][ T4324] device veth0_vlan left promiscuous mode [ 150.927337][ T5012] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 151.400804][ T5019] loop3: detected capacity change from 0 to 2048 [ 151.533045][ T5019] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 151.576134][ T5019] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 151.639043][ T5019] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 151.685696][ T5019] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 151.693499][ T5019] UDF-fs: Scanning with blocksize 512 failed [ 151.752871][ T5019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.220510][ T26] audit: type=1326 audit(1751120383.467:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 152.246625][ T5033] ax25_connect(): syz.1.181 uses autobind, please contact jreuter@yaina.de [ 152.914816][ T26] audit: type=1326 audit(1751120383.487:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 152.937502][ T26] audit: type=1326 audit(1751120383.497:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 152.959585][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.967372][ T26] audit: type=1326 audit(1751120383.497:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 152.989372][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.048193][ T26] audit: type=1326 audit(1751120383.507:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 153.079371][ T4324] team0 (unregistering): Port device team_slave_1 removed [ 153.103554][ T4324] team0 (unregistering): Port device team_slave_0 removed [ 153.115598][ T26] audit: type=1326 audit(1751120383.507:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5027 comm="syz.1.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 153.143298][ T4324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.403553][ T5035] xt_CT: No such helper "netbios-ns" [ 153.635046][ T4324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.900748][ T4324] bond0 (unregistering): Released all slaves [ 153.990528][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 154.301194][ T4789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.380757][ T4789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.539127][ T4789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.561369][ T4789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.447632][ T5054] sched: RT throttling activated [ 157.030350][ T5072] sctp: [Deprecated]: syz.1.189 (pid 5072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.030350][ T5072] Use struct sctp_sack_info instead [ 158.902534][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.038527][ T26] audit: type=1326 audit(1751120390.287:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 159.041453][ T26] audit: type=1326 audit(1751120390.287:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 159.042264][ T26] audit: type=1326 audit(1751120390.287:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 159.043390][ T26] audit: type=1326 audit(1751120390.287:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 159.043488][ T5086] ax25_connect(): syz.3.194 uses autobind, please contact jreuter@yaina.de [ 159.044279][ T26] audit: type=1326 audit(1751120390.287:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 159.046210][ T26] audit: type=1326 audit(1751120390.297:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5083 comm="syz.3.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 159.166509][ T4789] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.195980][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.198212][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.314881][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.319233][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.320107][ T4881] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.320168][ T4881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.320652][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.431534][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.432729][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.433117][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.433153][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.455996][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.468635][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.478027][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.479052][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.755957][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.756782][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.757778][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.804469][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.806406][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.811646][ T4789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.861971][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.938565][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.007361][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.210655][ T5115] loop1: detected capacity change from 0 to 4096 [ 163.627485][ T5128] loop2: detected capacity change from 0 to 2048 [ 163.853489][ T5128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.169901][ T26] audit: type=1326 audit(1751120395.417:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 164.198288][ T5143] ax25_connect(): syz.3.206 uses autobind, please contact jreuter@yaina.de [ 164.476904][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.528659][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.556718][ T26] audit: type=1326 audit(1751120395.447:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 164.766924][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.935306][ T26] audit: type=1326 audit(1751120395.447:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 165.356283][ T26] audit: type=1326 audit(1751120395.447:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 165.723663][ T26] audit: type=1326 audit(1751120395.457:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 166.325600][ T26] audit: type=1326 audit(1751120395.457:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5136 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 166.438656][ T26] audit: type=1326 audit(1751120397.067:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x0 [ 169.340493][ T5176] 9pnet_virtio: no channels available for device syz [ 169.673280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.706022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.853702][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.869541][ T5189] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 169.878214][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.902199][ T5189] overlayfs: failed to set xattr on upper [ 169.902511][ T5193] loop3: detected capacity change from 0 to 256 [ 169.908472][ T5189] overlayfs: ...falling back to index=off,metacopy=off. [ 169.927513][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.943486][ T26] audit: type=1326 audit(1751120401.187:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 169.967887][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.997240][ T5193] exfat: Deprecated parameter 'namecase' [ 170.004962][ T4789] device veth0_vlan entered promiscuous mode [ 170.029692][ T26] audit: type=1326 audit(1751120401.187:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 170.064571][ T4789] device veth1_vlan entered promiscuous mode [ 170.083766][ T5193] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 170.308017][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.318270][ T26] audit: type=1326 audit(1751120401.197:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 170.686867][ T5203] ax25_connect(): syz.1.218 uses autobind, please contact jreuter@yaina.de [ 170.697941][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.157935][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.186123][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.217258][ T4789] device veth0_macvtap entered promiscuous mode [ 172.240118][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.268877][ T26] audit: type=1326 audit(1751120401.197:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 172.394389][ T26] audit: type=1326 audit(1751120401.197:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 172.434817][ T4789] device veth1_macvtap entered promiscuous mode [ 172.535568][ T2285] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.767865][ T26] audit: type=1326 audit(1751120401.197:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 172.815347][ T2285] usb 3-1: Using ep0 maxpacket: 16 [ 172.935987][ T2285] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.105157][ T26] audit: type=1326 audit(1751120401.197:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 173.153615][ T2285] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.178318][ T26] audit: type=1326 audit(1751120401.197:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 173.275564][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.307863][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.336798][ T2285] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.346219][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.365276][ T2285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.393699][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.404149][ T26] audit: type=1326 audit(1751120401.197:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 173.435095][ T2285] usb 3-1: Product: syz [ 173.439738][ T2285] usb 3-1: Manufacturer: syz [ 173.469836][ T5242] loop0: detected capacity change from 0 to 256 [ 173.470952][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.479648][ T26] audit: type=1326 audit(1751120401.197:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5196 comm="syz.2.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 173.487660][ T2285] usb 3-1: SerialNumber: syz [ 173.534320][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.559031][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.581285][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.635066][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.656113][ T5242] exfat: Deprecated parameter 'namecase' [ 173.686776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.710317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.712921][ T5242] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 173.752462][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.780617][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.808452][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.851410][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.873181][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.884097][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.894275][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.905047][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.919689][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.930456][ T4789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.961079][ T4789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.987773][ T4789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.014071][ T4789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.116315][ T5248] loop3: detected capacity change from 0 to 32768 [ 174.137429][ T2285] usb 3-1: 0:2 : does not exist [ 174.206243][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.215057][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.330111][ T5248] XFS (loop3): Mounting V5 Filesystem [ 174.667291][ T5248] XFS (loop3): Ending clean mount [ 175.271834][ T493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.311592][ T493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.375522][ T4702] usb 3-1: USB disconnect, device number 3 [ 175.919981][ T1108] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 176.001219][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.054362][ T1108] XFS (loop3): Unmount and run xfs_repair [ 176.200648][ T1108] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 176.262848][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.307529][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.337822][ T1108] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 176.451324][ T1108] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 176.512838][ T1108] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 176.533793][ T1108] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 176.715374][ T1108] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 176.766081][ T1108] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 176.797539][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 176.858403][ T1108] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 176.916054][ T5248] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x14 len 4 error 74 [ 176.969117][ T5248] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1556/0x1b60 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 176.987320][ T5248] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 176.997793][ T5248] syz.3.230 (5248) used greatest stack depth: 20520 bytes left [ 177.012671][ T4412] Bluetooth: hci5: Frame reassembly failed (-84) [ 177.028422][ T493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.102797][ T4174] XFS (loop3): Unmounting Filesystem [ 177.280981][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 177.280996][ T26] audit: type=1326 audit(1751120408.527:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24810d4b19 code=0x7ffc0000 [ 178.845949][ T4705] Bluetooth: hci5: command 0x1003 tx timeout [ 178.869366][ T4169] Bluetooth: hci5: sending frame failed (-49) [ 179.073485][ T26] audit: type=1326 audit(1751120408.537:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 179.226169][ T26] audit: type=1326 audit(1751120408.537:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 179.397909][ T26] audit: type=1326 audit(1751120408.567:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 180.355453][ T5303] tmpfs: Unknown parameter 'quot”–l [ 180.355453][ T5303] Ra³ÆÈ9“´g­»tpHû}b¹.ç:4úÎY¦¶™ [ 180.355453][ T5303] o–{Íeú¢«é¨£9}Ùܼâ&þ­ôl:•' [ 181.359389][ T5302] overlayfs: missing 'lowerdir' [ 181.405161][ T1108] Bluetooth: hci5: command 0x1001 tx timeout [ 181.455643][ T26] audit: type=1326 audit(1751120408.567:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 181.471068][ T4169] Bluetooth: hci5: sending frame failed (-49) [ 181.498631][ T26] audit: type=1326 audit(1751120408.567:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 181.603571][ T26] audit: type=1326 audit(1751120408.567:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 181.861416][ T26] audit: type=1326 audit(1751120408.567:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 181.895637][ T26] audit: type=1326 audit(1751120408.567:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 182.702389][ T5313] loop1: detected capacity change from 0 to 256 [ 182.725271][ T26] audit: type=1326 audit(1751120408.567:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24810d4b19 code=0x7ffc0000 [ 182.730006][ T5313] exfat: Deprecated parameter 'namecase' [ 182.814311][ T26] audit: type=1326 audit(1751120408.567:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 182.846932][ T5313] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 182.903914][ T26] audit: type=1326 audit(1751120408.567:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 182.927220][ T26] audit: type=1326 audit(1751120408.567:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24810d4b19 code=0x7ffc0000 [ 182.950401][ T26] audit: type=1326 audit(1751120408.567:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24810d4b19 code=0x7ffc0000 [ 182.972931][ T26] audit: type=1326 audit(1751120408.567:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 183.042074][ T26] audit: type=1326 audit(1751120408.567:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 183.131400][ T26] audit: type=1326 audit(1751120408.567:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 183.157392][ T26] audit: type=1326 audit(1751120408.567:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 183.186203][ T26] audit: type=1326 audit(1751120408.577:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5283 comm="syz.0.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24810d4b19 code=0x7ffc0000 [ 183.364805][ T5331] sd 0:0:1:0: device reset [ 183.768652][ T4705] Bluetooth: hci5: command 0x1009 tx timeout [ 183.925966][ T5306] loop3: detected capacity change from 0 to 32768 [ 184.226220][ T5306] XFS (loop3): Mounting V5 Filesystem [ 184.663382][ T5331] loop1: detected capacity change from 0 to 32768 [ 185.421699][ T5306] XFS (loop3): Ending clean mount [ 185.517013][ T5306] XFS (loop3): Quotacheck needed: Please wait. [ 185.580559][ T5331] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 185.920486][ T5306] XFS (loop3): Quotacheck: Done. [ 186.035395][ T4704] Bluetooth: hci0: command 0x0406 tx timeout [ 186.041528][ T4704] Bluetooth: hci3: command 0x0406 tx timeout [ 186.050879][ T4174] XFS (loop3): Unmounting Filesystem [ 186.098642][ T4704] Bluetooth: hci2: command 0x0406 tx timeout [ 186.120263][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 186.131226][ T4704] Bluetooth: hci1: command 0x0406 tx timeout [ 186.208606][ T5356] lo speed is unknown, defaulting to 1000 [ 186.215893][ T5356] lo speed is unknown, defaulting to 1000 [ 186.235134][ T5356] lo speed is unknown, defaulting to 1000 [ 186.267822][ T5356] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.312123][ T5356] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 186.538908][ T5356] lo speed is unknown, defaulting to 1000 [ 186.553185][ T5356] lo speed is unknown, defaulting to 1000 [ 186.566474][ T5356] lo speed is unknown, defaulting to 1000 [ 186.578645][ T5356] lo speed is unknown, defaulting to 1000 [ 186.592151][ T5356] lo speed is unknown, defaulting to 1000 [ 186.900347][ T5360] capability: warning: `syz.1.246' uses deprecated v2 capabilities in a way that may be insecure [ 187.192713][ T4705] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 187.479885][ T4705] usb 2-1: Using ep0 maxpacket: 16 [ 188.115554][ T4705] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 188.144502][ T4705] usb 2-1: config 8 has no interface number 0 [ 188.186963][ T4705] usb 2-1: config 8 interface 206 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 188.258856][ T4705] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 188.335482][ T4705] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 188.370314][ T4705] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 188.411014][ T4705] usb 2-1: config 8 interface 206 has no altsetting 0 [ 188.582320][ T5388] loop0: detected capacity change from 0 to 256 [ 188.626284][ T4705] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 189.026205][ T4705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.053951][ T4705] usb 2-1: Product: syz [ 189.060268][ T4705] usb 2-1: Manufacturer: syz [ 189.065177][ T4705] usb 2-1: SerialNumber: syz [ 189.336504][ T5388] exfat: Deprecated parameter 'namecase' [ 189.431160][ T5388] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 189.588989][ T5360] udc-core: couldn't find an available UDC or it's busy [ 189.644173][ T5360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 189.801920][ T4705] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 190.047718][ T4705] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 190.207084][ T4705] garmin_gps: probe of ttyUSB0 failed with error -22 [ 190.418595][ T4705] usb 2-1: USB disconnect, device number 4 [ 190.518290][ T4705] garmin_gps 2-1:8.206: device disconnected [ 191.591763][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.629321][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.640503][ T5412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.658736][ T5412] device bridge_slave_0 left promiscuous mode [ 191.664993][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.690443][ T5412] device bridge_slave_1 left promiscuous mode [ 191.716818][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.381264][ T5412] bond0: (slave bond_slave_0): Releasing backup interface [ 192.442602][ T5412] bond0: (slave bond_slave_1): Releasing backup interface [ 192.691152][ T5412] team0: Port device team_slave_0 removed [ 192.795118][ T5412] team0: Port device team_slave_1 removed [ 192.836487][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.865510][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.887569][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.895379][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.027716][ T5427] sd 0:0:1:0: device reset [ 194.517930][ T5427] loop5: detected capacity change from 0 to 32768 [ 195.628315][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.650292][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.923539][ T5427] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 196.318878][ T5441] loop2: detected capacity change from 0 to 256 [ 196.334368][ T5437] device syzkaller0 entered promiscuous mode [ 196.360686][ T4789] ocfs2: Unmounting device (7,5) on (node local) [ 197.321632][ T5451] loop3: detected capacity change from 0 to 256 [ 197.338100][ T5441] exfat: Deprecated parameter 'namecase' [ 197.631591][ T5441] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 199.033774][ T5463] loop5: detected capacity change from 0 to 512 [ 200.579553][ T5463] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 200.613641][ T5463] EXT4-fs (loop5): 1 truncate cleaned up [ 200.621945][ T5463] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,jqfmt=vfsv0,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 202.490595][ T5503] sd 0:0:1:0: device reset [ 202.695354][ T4705] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 203.525707][ T5503] loop0: detected capacity change from 0 to 32768 [ 204.033318][ T5503] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 204.115349][ T4705] usb 2-1: Using ep0 maxpacket: 16 [ 204.235597][ T4705] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.325437][ T4705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.365978][ T5517] loop2: detected capacity change from 0 to 2048 [ 204.406701][ T4705] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 204.425444][ T5517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.443456][ T4175] ocfs2: Unmounting device (7,0) on (node local) [ 204.480077][ T4705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.551199][ T4705] usb 2-1: config 0 descriptor?? [ 205.461157][ T5530] loop0: detected capacity change from 0 to 256 [ 206.016664][ T5530] exfat: Deprecated parameter 'namecase' [ 206.065458][ T4705] usbhid 2-1:0.0: can't add hid device: -71 [ 206.109157][ T5539] sd 0:0:1:0: device reset [ 207.037000][ T5539] loop2: detected capacity change from 0 to 32768 [ 207.447008][ T4705] usbhid: probe of 2-1:0.0 failed with error -71 [ 207.488846][ T5530] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 207.755887][ T5539] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 207.962819][ T4705] usb 2-1: USB disconnect, device number 5 [ 209.115779][ T4172] ocfs2: Unmounting device (7,2) on (node local) [ 209.350638][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 209.350653][ T26] audit: type=1326 audit(1751120440.597:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.1.290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x0 [ 210.790032][ T5589] loop2: detected capacity change from 0 to 1024 [ 210.972906][ T5559] loop0: detected capacity change from 0 to 32768 [ 211.213854][ T5559] XFS (loop0): Mounting V5 Filesystem [ 211.324264][ T5559] XFS (loop0): Ending clean mount [ 211.520076][ T4175] XFS (loop0): Unmounting Filesystem [ 211.575471][ T4287] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 211.855448][ T4287] usb 4-1: Using ep0 maxpacket: 8 [ 211.896314][ T5614] loop2: detected capacity change from 0 to 4096 [ 211.938219][ T5614] ntfs3: Unknown parameter 'nocase' [ 212.015827][ T4287] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.054771][ T5615] loop5: detected capacity change from 0 to 256 [ 212.146208][ T4287] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 212.197082][ T4287] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 212.210933][ T5615] exfat: Deprecated parameter 'namecase' [ 212.363080][ T4287] usb 4-1: config 4 has no interface number 0 [ 212.461045][ T5615] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 212.745566][ T4287] usb 4-1: string descriptor 0 read error: -22 [ 212.760872][ T4287] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 212.788810][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.381736][ T4287] usb 4-1: Found UVC 0.02 device (04f2:b746) [ 213.491436][ T4287] usb 4-1: No valid video chain found. [ 213.702432][ T4287] usb 4-1: USB disconnect, device number 2 [ 216.383846][ T5630] loop2: detected capacity change from 0 to 32768 [ 217.555148][ T5672] ax25_connect(): syz.2.307 uses autobind, please contact jreuter@yaina.de [ 217.565584][ T26] audit: type=1326 audit(1751120448.797:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 217.565910][ T26] audit: type=1326 audit(1751120448.797:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 217.588846][ T26] audit: type=1326 audit(1751120448.797:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 217.589071][ T26] audit: type=1326 audit(1751120448.797:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 218.237040][ T5678] loop0: detected capacity change from 0 to 256 [ 218.352350][ T26] audit: type=1326 audit(1751120449.597:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 218.354850][ T26] audit: type=1326 audit(1751120449.597:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 218.374734][ T5678] exfat: Deprecated parameter 'namecase' [ 218.525941][ T5678] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 218.895263][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.425493][ T5703] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 220.777737][ T5696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 222.326533][ T5699] loop5: detected capacity change from 0 to 32768 [ 222.416753][ T5699] XFS: noikeep mount option is deprecated. [ 222.545525][ T26] audit: type=1326 audit(1751120453.787:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 222.576393][ T5730] ax25_connect(): syz.0.322 uses autobind, please contact jreuter@yaina.de [ 223.416010][ T5734] loop1: detected capacity change from 0 to 8 [ 225.023124][ T26] audit: type=1326 audit(1751120453.817:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 225.046484][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.784277][ T26] audit: type=1326 audit(1751120453.817:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 225.807129][ T26] audit: type=1326 audit(1751120453.817:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 225.829386][ T26] audit: type=1326 audit(1751120453.837:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 225.982860][ T26] audit: type=1326 audit(1751120453.837:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5726 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 230.108407][ T5770] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 230.118415][ T5770] overlayfs: failed to resolve './file0': -2 [ 230.445323][ T4704] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 230.646235][ T26] audit: type=1326 audit(1751120461.897:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 230.673637][ T5791] ax25_connect(): syz.0.334 uses autobind, please contact jreuter@yaina.de [ 231.119825][ T26] audit: type=1326 audit(1751120461.917:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 231.144277][ T4704] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 231.298135][ T4704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.361117][ T4704] usb 3-1: Product: syz [ 231.375816][ T4704] usb 3-1: Manufacturer: syz [ 231.380488][ T4704] usb 3-1: SerialNumber: syz [ 231.416321][ T26] audit: type=1326 audit(1751120461.917:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 231.512481][ T4704] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.562501][ T26] audit: type=1326 audit(1751120461.917:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 231.645700][ T26] audit: type=1326 audit(1751120461.927:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 231.669008][ T26] audit: type=1326 audit(1751120461.937:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5780 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 232.461142][ T5813] sd 0:0:1:0: device reset [ 232.738116][ T5814] syz.0.340 uses obsolete (PF_INET,SOCK_PACKET) [ 233.045483][ T4704] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.284527][ T4213] usb 3-1: USB disconnect, device number 4 [ 234.408619][ T4704] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 234.482577][ T4704] ath9k_htc: Failed to initialize the device [ 234.606133][ T4213] usb 3-1: ath9k_htc: USB layer deinitialized [ 234.618560][ T5813] loop5: detected capacity change from 0 to 32768 [ 234.789979][ T5813] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 235.270354][ T5839] process 'syz.0.344' launched './file2' with NULL argv: empty string added [ 235.826098][ T4789] ocfs2: Unmounting device (7,5) on (node local) [ 237.817739][ T26] audit: type=1326 audit(1751120469.067:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 238.153158][ T5865] ax25_connect(): syz.3.351 uses autobind, please contact jreuter@yaina.de [ 238.222452][ T26] audit: type=1326 audit(1751120469.097:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 238.244725][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.349454][ T26] audit: type=1326 audit(1751120469.097:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 238.465485][ T26] audit: type=1326 audit(1751120469.097:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 238.557770][ T26] audit: type=1326 audit(1751120469.097:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 238.580061][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.088725][ T5898] sd 0:0:1:0: device reset [ 240.458254][ T5898] loop5: detected capacity change from 0 to 32768 [ 240.592431][ T5898] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 240.714814][ T26] audit: type=1326 audit(1751120469.397:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 240.921129][ T26] audit: type=1326 audit(1751120469.417:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 240.943622][ T26] audit: type=1326 audit(1751120469.417:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 241.223106][ T4789] ocfs2: Unmounting device (7,5) on (node local) [ 242.524540][ T26] audit: type=1326 audit(1751120473.767:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 242.546858][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.558381][ T5928] ax25_connect(): syz.3.368 uses autobind, please contact jreuter@yaina.de [ 243.442395][ T26] audit: type=1326 audit(1751120473.807:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 243.493276][ T5931] lo speed is unknown, defaulting to 1000 [ 243.502989][ T26] audit: type=1326 audit(1751120473.807:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 243.653489][ T26] audit: type=1326 audit(1751120473.807:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 244.762519][ T26] audit: type=1326 audit(1751120473.817:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 245.093665][ T5958] sd 0:0:1:0: device reset [ 246.565948][ T5958] loop1: detected capacity change from 0 to 32768 [ 246.837582][ T5958] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 246.966260][ T26] audit: type=1326 audit(1751120473.817:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 248.297422][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 249.997343][ T26] audit: type=1326 audit(1751120481.247:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 250.048917][ T6005] ax25_connect(): syz.1.389 uses autobind, please contact jreuter@yaina.de [ 250.353818][ T26] audit: type=1326 audit(1751120481.297:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 250.515528][ T26] audit: type=1326 audit(1751120481.297:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 250.675356][ T26] audit: type=1326 audit(1751120481.297:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 250.699884][ T26] audit: type=1326 audit(1751120481.317:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 251.384398][ T26] audit: type=1326 audit(1751120481.317:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 252.809851][ T4701] Bluetooth: hci4: command 0x0406 tx timeout [ 254.268835][ T26] audit: type=1326 audit(1751120485.517:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 254.296665][ T6064] ax25_connect(): syz.2.406 uses autobind, please contact jreuter@yaina.de [ 254.461149][ T26] audit: type=1326 audit(1751120485.537:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 254.762064][ T26] audit: type=1326 audit(1751120485.537:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 254.785061][ T26] audit: type=1326 audit(1751120485.547:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6061 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f524c26b929 code=0x7ffc0000 [ 255.648424][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.662782][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.524988][ T6086] loop3: detected capacity change from 0 to 32768 [ 258.645584][ T6086] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 259.158994][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 259.159040][ T26] audit: type=1326 audit(1751120490.407:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 259.192916][ T6107] ax25_connect(): syz.0.420 uses autobind, please contact jreuter@yaina.de [ 259.601647][ T26] audit: type=1326 audit(1751120490.447:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 259.920150][ T4174] ocfs2: Unmounting device (7,3) on (node local) [ 259.927398][ T26] audit: type=1326 audit(1751120490.447:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 259.949788][ T26] audit: type=1326 audit(1751120490.447:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 259.973069][ T26] audit: type=1326 audit(1751120490.457:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 259.995289][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.002213][ T26] audit: type=1326 audit(1751120490.457:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6105 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2481138929 code=0x7ffc0000 [ 261.445884][ T6140] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 262.712688][ T6146] loop1: detected capacity change from 0 to 32768 [ 262.885052][ T6146] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 263.234761][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 263.264280][ T26] audit: type=1326 audit(1751120494.507:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6147 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 263.291157][ T6151] ax25_connect(): syz.3.436 uses autobind, please contact jreuter@yaina.de [ 263.578282][ T26] audit: type=1326 audit(1751120494.537:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6147 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 263.729727][ T26] audit: type=1326 audit(1751120494.537:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6147 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 263.753244][ T26] audit: type=1326 audit(1751120494.537:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6147 comm="syz.3.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 263.775396][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.051440][ T6162] sd 0:0:1:0: device reset [ 264.696177][ T6163] loop3: detected capacity change from 0 to 256 [ 265.118086][ T6163] exFAT-fs (loop3): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d) [ 265.266105][ T6162] loop5: detected capacity change from 0 to 32768 [ 265.436826][ T6162] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 265.831233][ T4789] ocfs2: Unmounting device (7,5) on (node local) [ 265.915762][ T6173] lo speed is unknown, defaulting to 1000 [ 266.297458][ T6183] loop3: detected capacity change from 0 to 128 [ 266.740452][ T6183] FAT-fs (loop3): Unrecognized mount option "ut" or missing value [ 267.132645][ T6188] loop0: detected capacity change from 0 to 32768 [ 267.423125][ T6198] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 267.441704][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.888100][ T6188] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 268.159885][ T6205] netlink: 'syz.1.449': attribute type 29 has an invalid length. [ 268.168264][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 268.181098][ T6205] netlink: 'syz.1.449': attribute type 29 has an invalid length. [ 268.189058][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 268.849012][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 268.849028][ T26] audit: type=1326 audit(1751120500.097:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 268.877294][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.892331][ T6202] ax25_connect(): syz.3.450 uses autobind, please contact jreuter@yaina.de [ 268.988212][ T4175] ocfs2: Unmounting device (7,0) on (node local) [ 269.095299][ T26] audit: type=1326 audit(1751120500.097:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 269.132970][ T6215] loop1: detected capacity change from 0 to 512 [ 270.613338][ T6223] sd 0:0:1:0: device reset [ 272.049284][ T6215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.134880][ T26] audit: type=1326 audit(1751120500.137:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 272.170165][ T6215] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 272.199131][ T26] audit: type=1326 audit(1751120500.137:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 272.222025][ T26] audit: type=1326 audit(1751120500.137:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 272.244256][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.295895][ T6215] EXT4-fs (loop1): 1 truncate cleaned up [ 272.315331][ T6215] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,resgid=0x0000000000000000,block_validity,quota,. Quota mode: writeback. [ 272.345357][ T26] audit: type=1326 audit(1751120500.137:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 272.489638][ T26] audit: type=1326 audit(1751120500.147:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 272.511837][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.639563][ T26] audit: type=1326 audit(1751120500.147:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 272.661957][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.105448][ T4800] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 274.573084][ T6245] ax25_connect(): syz.1.464 uses autobind, please contact jreuter@yaina.de [ 274.583537][ T26] audit: type=1326 audit(1751120505.817:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 274.725419][ T4800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.624798][ T6253] loop5: detected capacity change from 0 to 32768 [ 276.092970][ T6253] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 276.169179][ T26] audit: type=1326 audit(1751120505.817:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 276.192109][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.302209][ T4800] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.319353][ T4800] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.328505][ T4800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.341348][ T4800] usb 4-1: config 0 descriptor?? [ 276.348710][ T26] audit: type=1326 audit(1751120505.817:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 276.369114][ T6257] loop1: detected capacity change from 0 to 256 [ 276.371179][ T26] audit: type=1326 audit(1751120505.817:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 276.399934][ T4800] usb 4-1: can't set config #0, error -71 [ 276.406979][ T4800] usb 4-1: USB disconnect, device number 3 [ 276.441717][ T6257] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 276.459264][ T4789] ocfs2: Unmounting device (7,5) on (node local) [ 276.479276][ T26] audit: type=1326 audit(1751120505.817:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 276.533347][ T6257] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.568032][ T6261] sd 0:0:1:0: device reset [ 276.866688][ T26] audit: type=1326 audit(1751120505.817:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 277.261281][ T26] audit: type=1326 audit(1751120505.827:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6244 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55752e4929 code=0x7ffc0000 [ 277.677413][ T6261] loop0: detected capacity change from 0 to 32768 [ 278.079653][ T6261] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 278.400761][ T6269] loop3: detected capacity change from 0 to 1024 [ 278.444386][ T4175] ocfs2: Unmounting device (7,0) on (node local) [ 278.659317][ T144] hfsplus: b-tree write err: -5, ino 4 [ 278.960024][ T4702] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 279.235674][ T4702] usb 2-1: Using ep0 maxpacket: 8 [ 279.415619][ T4702] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 279.443804][ T4702] usb 2-1: config 179 has no interface number 0 [ 279.507980][ T4702] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 279.832420][ T4702] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 279.857848][ T4702] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 279.877134][ T4702] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 279.900747][ T4702] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 279.933186][ T4702] usb 2-1: config 179 interface 65 has no altsetting 0 [ 279.954373][ T4702] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 280.047472][ T26] audit: type=1326 audit(1751120511.297:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 280.059768][ T4702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.081886][ T6283] ax25_connect(): syz.3.477 uses autobind, please contact jreuter@yaina.de [ 281.122942][ T4702] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 281.259253][ T26] audit: type=1326 audit(1751120511.327:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 281.342117][ T26] audit: type=1326 audit(1751120511.327:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 281.685464][ T4705] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 281.698089][ T26] audit: type=1326 audit(1751120511.327:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 281.998600][ T4271] usb 2-1: USB disconnect, device number 6 [ 282.013831][ T26] audit: type=1326 audit(1751120511.337:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 282.036363][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 282.126068][ T4705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.201650][ T4705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.327835][ T4705] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.456152][ T26] audit: type=1326 audit(1751120511.337:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc9afc929 code=0x7ffc0000 [ 282.478672][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.505501][ T4705] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.669223][ T6293] loop3: detected capacity change from 0 to 32768 [ 282.681829][ T4705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.787534][ T6293] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 282.865339][ T4705] usb 1-1: config 0 descriptor?? [ 282.980026][ T4271] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 284.896921][ T4705] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 284.914335][ T4174] ocfs2: Unmounting device (7,3) on (node local) [ 284.996367][ T6309] loop1: detected capacity change from 0 to 2048 [ 285.026175][ T4705] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 285.193423][ T6309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.535497][ T6316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 286.024730][ T6326] loop1: detected capacity change from 0 to 1024 [ 286.207892][ T6330] loop5: detected capacity change from 0 to 64 [ 286.327629][ T4701] usb 1-1: USB disconnect, device number 3 [ 286.382587][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.491'. [ 286.432734][ T6330] device bridge_slave_1 left promiscuous mode [ 286.596020][ T4214] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 286.613224][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.834275][ T6330] device bridge_slave_0 left promiscuous mode [ 286.848672][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.895341][ T4214] usb 2-1: Using ep0 maxpacket: 16 [ 287.025521][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.062014][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.161210][ T4214] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 287.294861][ T4214] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 287.305093][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.707066][ T4214] usb 2-1: config 0 descriptor?? [ 287.893779][ T6349] loop5: detected capacity change from 0 to 512 [ 288.044764][ T6349] EXT4-fs (loop5): Ignoring removed nobh option [ 288.116868][ T6349] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 288.145950][ T6349] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.495: invalid indirect mapped block 2683928664 (level 1) [ 288.222687][ T6349] EXT4-fs (loop5): Remounting filesystem read-only [ 288.238163][ T4214] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 288.252008][ T6349] EXT4-fs (loop5): 1 truncate cleaned up [ 288.255265][ T4214] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 288.266540][ T4214] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 288.274066][ T4214] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 288.290326][ T6349] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nojournal_checksum,errors=remount-ro,usrjquota=.mb_optimize_scan=0x0000000000000000,nodiscard,jqfmt=vfsv0,noload,,. Quota mode: writeback. [ 288.292218][ T4214] hid-generic 0003:0955:7214.0002: unknown main item tag 0x0 [ 288.362391][ T4214] hid-generic 0003:0955:7214.0002: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 288.560220][ T6354] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.495: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 288.877371][ T6354] EXT4-fs (loop5): Remounting filesystem read-only [ 289.556281][ T6356] loop5: detected capacity change from 0 to 8192 [ 289.652871][ T26] audit: type=1800 audit(1751120520.897:265): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.496" name="file2" dev="loop5" ino=1048601 res=0 errno=0 [ 289.691647][ T6356] attempt to access beyond end of device [ 289.691647][ T6356] loop5: rw=0, want=57848, limit=8192 [ 291.152692][ T4271] usb 2-1: USB disconnect, device number 7 [ 291.675294][ T4813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 291.885921][ T6394] loop3: detected capacity change from 0 to 1024 [ 291.915302][ T4813] usb 3-1: Using ep0 maxpacket: 16 [ 291.924744][ T6394] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f01cc01c, mo2=0002] [ 291.946566][ T6394] System zones: 0-1, 3-36 [ 291.990846][ T6394] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,debug,data_err=abort,,errors=continue. Quota mode: writeback. [ 292.035412][ T4813] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 292.071884][ T4813] usb 3-1: config 1 has an invalid interface number: 4 but max is 0 [ 292.172884][ T4813] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 292.265320][ T4813] usb 3-1: config 1 has no interface number 0 [ 292.286418][ T4813] usb 3-1: config 1 has no interface number 1 [ 292.295980][ T4813] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 292.309699][ T4813] usb 3-1: config 1 interface 4 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 292.320514][ T4813] usb 3-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 292.333611][ T4813] usb 3-1: config 1 interface 105 has no altsetting 0 [ 292.345406][ T4813] usb 3-1: config 1 interface 4 has no altsetting 0 [ 292.494937][ T6404] loop3: detected capacity change from 0 to 256 [ 292.508907][ T4813] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 292.528619][ T4813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.578975][ T4813] usb 3-1: Product: syz [ 292.583209][ T4813] usb 3-1: Manufacturer: syz [ 292.591707][ T6404] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 292.614234][ T4813] usb 3-1: SerialNumber: syz [ 292.906662][ T4813] aqc111: probe of 3-1:1.105 failed with error -22 [ 293.192139][ T4705] usb 3-1: USB disconnect, device number 5 [ 294.286586][ T6416] loop3: detected capacity change from 0 to 512 [ 294.348420][ T6416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.467609][ T6416] EXT4-fs (loop3): 1 truncate cleaned up [ 294.506495][ T6416] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,. Quota mode: writeback. [ 294.615449][ T6420] loop2: detected capacity change from 0 to 256 [ 294.646865][ T6416] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.517: iget: bad i_size value: 5497558147880 [ 294.688109][ T6420] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.709333][ T6416] EXT4-fs (loop3): Remounting filesystem read-only [ 294.751931][ T6420] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.909376][ T6434] loop5: detected capacity change from 0 to 1024 [ 296.034946][ T6434] EXT4-fs (loop5): Ignoring removed bh option [ 296.074175][ T6436] loop2: detected capacity change from 0 to 2048 [ 296.141187][ T6439] loop0: detected capacity change from 0 to 1024 [ 296.154681][ T6436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.256340][ T6434] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,nodioread_nolock,,errors=continue. Quota mode: none. [ 296.421584][ T6434] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.597456][ T26] audit: type=1800 audit(1751120527.817:266): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.523" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 296.637755][ T6434] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: block 8: comm syz.5.523: lblock 8 mapped to illegal pblock 8 (length 1) [ 296.691396][ T6434] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.523: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 296.925396][ T4271] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 297.235541][ T4705] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 297.505418][ T4705] usb 3-1: Using ep0 maxpacket: 16 [ 297.646490][ T4705] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 297.794764][ T4705] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 297.823457][ T6463] loop5: detected capacity change from 0 to 1024 [ 297.830088][ T4705] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.926800][ T4271] usb 2-1: Using ep0 maxpacket: 16 [ 297.954309][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 297.972593][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 297.982080][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 297.994550][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.012087][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.022992][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.025929][ T6467] loop0: detected capacity change from 0 to 1024 [ 298.042581][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.055440][ T4271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.070922][ T4271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.168096][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.218857][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.226369][ T6465] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.236522][ T4271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.246260][ T4705] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.253476][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.265235][ T4705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.273291][ T4705] usb 3-1: Product: syz [ 298.274610][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.290418][ T4705] usb 3-1: Manufacturer: syz [ 298.292653][ T4271] usb 2-1: Product: syz [ 298.295089][ T4705] usb 3-1: SerialNumber: syz [ 298.322021][ T6470] ------------[ cut here ]------------ [ 298.325267][ T4271] usb 2-1: Manufacturer: syz [ 298.332887][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.338179][ T6470] WARNING: CPU: 0 PID: 6470 at fs/hfsplus/extents.c:346 hfsplus_free_extents+0x6e9/0xac0 [ 298.345364][ T4271] usb 2-1: SerialNumber: syz [ 298.363491][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.384287][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.390101][ T6470] Modules linked in: [ 298.391916][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.394539][ T6470] [ 298.403789][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.413400][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.424673][ T6470] CPU: 0 PID: 6470 Comm: syz.5.532 Not tainted 5.15.186-syzkaller #0 [ 298.471307][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.483272][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.488075][ T6470] RIP: 0010:hfsplus_free_extents+0x6e9/0xac0 [ 298.497066][ T6470] Code: 8b 1b 0f cb 89 ef 89 de e8 34 81 4d ff 39 dd 75 20 49 83 c7 28 e8 c7 7f 4d ff 41 bc 05 00 00 00 e9 fa f9 ff ff e8 b7 7f 4d ff <0f> 0b e9 9d f9 ff ff 89 ef 89 de e8 07 81 4d ff 29 dd 73 0a e8 9e [ 298.520542][ T6470] RSP: 0018:ffffc90003c4f890 EFLAGS: 00010283 [ 298.523876][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.534142][ T6470] RAX: ffffffff822a4359 RBX: ffff888062720020 RCX: 0000000000080000 [ 298.542900][ T6470] RDX: ffffc90014315000 RSI: 0000000000026866 RDI: 0000000000026867 [ 298.557913][ T6470] RBP: 000000000000014e R08: dffffc0000000000 R09: ffffed1004ade00a [ 298.569967][ T6470] R10: ffffed1004ade00a R11: 1ffff11004ade009 R12: ffff888078bdc000 [ 298.580841][ T6470] R13: 1ffff92000789f30 R14: 000000000000014e R15: ffff88807b78bcd8 [ 298.592881][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.593115][ T6470] FS: 00007fa1bec6c6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 298.611715][ T6470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.622265][ T6470] CR2: 0000001b3051bff8 CR3: 000000001d148000 CR4: 00000000003506e0 [ 298.648873][ T6470] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 298.662023][ T6470] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 298.672453][ T6470] Call Trace: [ 298.676304][ T6470] [ 298.681000][ T6470] hfsplus_file_truncate+0x745/0xb40 [ 298.688100][ T6470] ? __lock_acquire+0x7c60/0x7c60 [ 298.693446][ T6470] ? __might_sleep+0xf0/0xf0 [ 298.700303][ T6470] ? rwsem_write_trylock+0x12f/0x1b0 [ 298.738565][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.759668][ T6470] ? hfsplus_add_extent+0x890/0x890 [ 298.766882][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.787393][ T6470] ? unmap_mapping_range+0xc8/0x100 [ 298.791633][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.803804][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.820324][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.823041][ T6470] hfsplus_write_begin+0xd4/0xe0 [ 298.835553][ T4705] usb 3-1: 0:2 : does not exist [ 298.873856][ T4705] usb 3-1: USB disconnect, device number 6 [ 298.909642][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.943609][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.955233][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.958186][ T6470] generic_perform_write+0x2aa/0x530 [ 298.962653][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 298.984897][ T6470] ? atime_needs_update+0x780/0x780 [ 298.991869][ T4271] usb 2-1: 0:2 : does not exist [ 299.003503][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.010757][ T6470] ? grab_cache_page_write_begin+0xa0/0xa0 [ 299.011710][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.024828][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.039005][ T6470] ? file_remove_privs+0x590/0x590 [ 299.042933][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.052014][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.054911][ T6470] ? read_lock_is_recursive+0x10/0x10 [ 299.065314][ T4214] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 299.070318][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.081042][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.092646][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.105471][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.108923][ T6470] ? preempt_count_add+0x8d/0x190 [ 299.112986][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.132064][ T6463] hfsplus: request for non-existent node 16777216 in B*Tree [ 299.142605][ T6470] ? rwsem_write_trylock+0x12f/0x1b0 [ 299.145036][ T26] audit: type=1800 audit(1751120530.387:267): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.532" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 299.158387][ T6470] ? clear_nonspinnable+0x60/0x60 [ 299.204382][ T6470] __generic_file_write_iter+0x25f/0x4e0 [ 299.259355][ T6470] generic_file_write_iter+0xa6/0x1b0 [ 299.272498][ T6470] vfs_write+0x712/0xd00 [ 299.281044][ T6470] ? file_end_write+0x250/0x250 [ 299.291193][ T6470] ? __fget_files+0x40f/0x480 [ 299.298664][ T6470] ? mutex_lock_nested+0x17/0x20 [ 299.303926][ T6470] ? __fdget_pos+0x2bf/0x370 [ 299.315265][ T4214] usb 1-1: Using ep0 maxpacket: 16 [ 299.331507][ T6470] ? ksys_write+0x71/0x250 [ 299.336608][ T6470] ksys_write+0x14d/0x250 [ 299.341101][ T6470] ? __ia32_sys_read+0x80/0x80 [ 299.393416][ T6470] ? lockdep_hardirqs_on+0x94/0x140 [ 299.401265][ T6470] do_syscall_64+0x4c/0xa0 [ 299.420680][ T4271] usb 2-1: USB disconnect, device number 8 [ 299.435996][ T4214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.456981][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.474673][ T6470] ? clear_bhb_loop+0x30/0x80 [ 299.489960][ T4214] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 299.492594][ T6470] ? clear_bhb_loop+0x30/0x80 [ 299.514985][ T6470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.538811][ T4214] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 299.544787][ T6470] RIP: 0033:0x7fa1c0e46929 [ 299.574985][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.584796][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.607657][ T4214] usb 1-1: config 0 descriptor?? [ 299.611002][ T6470] RSP: 002b:00007fa1bec6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.624372][ T6470] RAX: ffffffffffffffda RBX: 00007fa1c106e160 RCX: 00007fa1c0e46929 [ 299.640136][ T6470] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005 [ 299.649999][ T6470] RBP: 00007fa1c0ec8b39 R08: 0000000000000000 R09: 0000000000000000 [ 299.658064][ T4214] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 299.671572][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.680045][ T6470] R13: 0000000000000000 R14: 00007fa1c106e160 R15: 00007ffcf9990ab8 [ 299.690262][ T6470] [ 299.693523][ T6470] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.700822][ T6470] CPU: 1 PID: 6470 Comm: syz.5.532 Not tainted 5.15.186-syzkaller #0 [ 299.708906][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.718982][ T6470] Call Trace: [ 299.722280][ T6470] [ 299.725228][ T6470] dump_stack_lvl+0x168/0x230 [ 299.729930][ T6470] ? show_regs_print_info+0x20/0x20 [ 299.735155][ T6470] ? load_image+0x3b0/0x3b0 [ 299.739694][ T6470] panic+0x2c9/0x7f0 [ 299.743620][ T6470] ? bpf_jit_dump+0xd0/0xd0 [ 299.748159][ T6470] ? __warn+0x230/0x2b0 [ 299.752342][ T6470] ? hfsplus_free_extents+0x6e9/0xac0 [ 299.757743][ T6470] __warn+0x248/0x2b0 [ 299.761749][ T6470] ? hfsplus_free_extents+0x6e9/0xac0 [ 299.767149][ T6470] report_bug+0x1b7/0x2e0 [ 299.771507][ T6470] handle_bug+0x3a/0x70 [ 299.775689][ T6470] exc_invalid_op+0x16/0x40 [ 299.780215][ T6470] asm_exc_invalid_op+0x16/0x20 [ 299.785091][ T6470] RIP: 0010:hfsplus_free_extents+0x6e9/0xac0 [ 299.791108][ T6470] Code: 8b 1b 0f cb 89 ef 89 de e8 34 81 4d ff 39 dd 75 20 49 83 c7 28 e8 c7 7f 4d ff 41 bc 05 00 00 00 e9 fa f9 ff ff e8 b7 7f 4d ff <0f> 0b e9 9d f9 ff ff 89 ef 89 de e8 07 81 4d ff 29 dd 73 0a e8 9e [ 299.810740][ T6470] RSP: 0018:ffffc90003c4f890 EFLAGS: 00010283 [ 299.816835][ T6470] RAX: ffffffff822a4359 RBX: ffff888062720020 RCX: 0000000000080000 [ 299.824830][ T6470] RDX: ffffc90014315000 RSI: 0000000000026866 RDI: 0000000000026867 [ 299.832818][ T6470] RBP: 000000000000014e R08: dffffc0000000000 R09: ffffed1004ade00a [ 299.840809][ T6470] R10: ffffed1004ade00a R11: 1ffff11004ade009 R12: ffff888078bdc000 [ 299.848812][ T6470] R13: 1ffff92000789f30 R14: 000000000000014e R15: ffff88807b78bcd8 [ 299.856813][ T6470] ? hfsplus_free_extents+0x6e9/0xac0 [ 299.862240][ T6470] hfsplus_file_truncate+0x745/0xb40 [ 299.867570][ T6470] ? __lock_acquire+0x7c60/0x7c60 [ 299.872597][ T6470] ? __might_sleep+0xf0/0xf0 [ 299.877189][ T6470] ? rwsem_write_trylock+0x12f/0x1b0 [ 299.882475][ T6470] ? hfsplus_add_extent+0x890/0x890 [ 299.887685][ T6470] ? unmap_mapping_range+0xc8/0x100 [ 299.892911][ T6470] hfsplus_write_begin+0xd4/0xe0 [ 299.897851][ T6470] generic_perform_write+0x2aa/0x530 [ 299.903139][ T6470] ? atime_needs_update+0x780/0x780 [ 299.908341][ T6470] ? grab_cache_page_write_begin+0xa0/0xa0 [ 299.914146][ T6470] ? file_remove_privs+0x590/0x590 [ 299.919258][ T6470] ? read_lock_is_recursive+0x10/0x10 [ 299.924648][ T6470] ? preempt_count_add+0x8d/0x190 [ 299.929670][ T6470] ? rwsem_write_trylock+0x12f/0x1b0 [ 299.934955][ T6470] ? clear_nonspinnable+0x60/0x60 [ 299.939977][ T6470] __generic_file_write_iter+0x25f/0x4e0 [ 299.945632][ T6470] generic_file_write_iter+0xa6/0x1b0 [ 299.951020][ T6470] vfs_write+0x712/0xd00 [ 299.955270][ T6470] ? file_end_write+0x250/0x250 [ 299.960139][ T6470] ? __fget_files+0x40f/0x480 [ 299.964826][ T6470] ? mutex_lock_nested+0x17/0x20 [ 299.969760][ T6470] ? __fdget_pos+0x2bf/0x370 [ 299.974343][ T6470] ? ksys_write+0x71/0x250 [ 299.978760][ T6470] ksys_write+0x14d/0x250 [ 299.983114][ T6470] ? __ia32_sys_read+0x80/0x80 [ 299.987876][ T6470] ? lockdep_hardirqs_on+0x94/0x140 [ 299.993077][ T6470] do_syscall_64+0x4c/0xa0 [ 299.997494][ T6470] ? clear_bhb_loop+0x30/0x80 [ 300.002164][ T6470] ? clear_bhb_loop+0x30/0x80 [ 300.006837][ T6470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.012728][ T6470] RIP: 0033:0x7fa1c0e46929 [ 300.017144][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.036745][ T6470] RSP: 002b:00007fa1bec6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.045159][ T6470] RAX: ffffffffffffffda RBX: 00007fa1c106e160 RCX: 00007fa1c0e46929 [ 300.053192][ T6470] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005 [ 300.061161][ T6470] RBP: 00007fa1c0ec8b39 R08: 0000000000000000 R09: 0000000000000000 [ 300.069128][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.077098][ T6470] R13: 0000000000000000 R14: 00007fa1c106e160 R15: 00007ffcf9990ab8 [ 300.085079][ T6470] [ 300.088395][ T6470] Kernel Offset: disabled [ 300.093013][ T6470] Rebooting in 86400 seconds..