last executing test programs: 3m53.754679027s ago: executing program 2 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, &(0x7f0000002780)=""/4120}, 0x20) 3m53.550165517s ago: executing program 2 (id=8): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x14, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m53.104326328s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x441, 0x800000a, r1, 0x0) fcntl$notify(r0, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 3m52.606111145s ago: executing program 2 (id=11): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f2c666c7573682c008eb4d920a22020bfdff5756435b12a0741fd1d465211f5e7b380a7ee206d42a73a617299a081afae08d58be01e67c53899fbbe703082609ea782556e161a2850300c071e10398738f9ee2d29a732e66c2cd256bd7cdd55b6ff8ce37a4300"/155], 0x1, 0x11ab, &(0x7f0000001280)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3m50.142062434s ago: executing program 2 (id=18): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x8001, 0x6, 0x11, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x6, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) 3m49.525804731s ago: executing program 2 (id=26): mlockall(0x5) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) 3m48.273760757s ago: executing program 32 (id=26): mlockall(0x5) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) 3m5.941713049s ago: executing program 1 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x8, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000300)={r4, 0x8001}, 0x8) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) 3m4.935329843s ago: executing program 1 (id=214): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) 3m4.142376746s ago: executing program 1 (id=219): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) 3m3.970237373s ago: executing program 1 (id=220): r0 = fsopen(0x0, 0x1) fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) fchdir(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYBLOB="67a967dffc87add05fabb5401a0c8407f2022ed8d63bd7787b9aca197f86092b49f834a267f3b2289aed55bdee8ee6bfbe19fac42e1e2cbb5905b73614571f8251c2c13759eada"], 0x48) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) 3m3.654207832s ago: executing program 1 (id=224): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000940)='u', 0x1}], 0x1}}], 0x1, 0x4c040) 3m2.27420449s ago: executing program 1 (id=230): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 3m1.907002865s ago: executing program 33 (id=230): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 2m23.462087263s ago: executing program 0 (id=380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x3) 2m21.25270612s ago: executing program 0 (id=395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) 2m21.106262084s ago: executing program 0 (id=396): ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000002c80)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xa) 2m21.050019938s ago: executing program 0 (id=398): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) 2m19.887355636s ago: executing program 0 (id=401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r1, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) 2m19.381404804s ago: executing program 0 (id=408): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m19.011162699s ago: executing program 34 (id=408): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 12.801562779s ago: executing program 6 (id=959): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/137, 0x89}, 0x96}], 0x1, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 10.670686227s ago: executing program 3 (id=967): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000000)={0x0, 0xe}, 0x0, 0x0}) 5.9139623s ago: executing program 3 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3d59c}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x4}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 4.94614019s ago: executing program 3 (id=984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 3.5433229s ago: executing program 3 (id=985): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) 3.00627241s ago: executing program 6 (id=989): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) 2.972260724s ago: executing program 4 (id=990): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f0000000580), &(0x7f00000002c0)=""/135}, 0x20) 2.850193285s ago: executing program 4 (id=992): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x808, &(0x7f0000000400)={[{@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x9}}, {@utf8}, {@errors_continue}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@sys_tz}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8}]}, 0x1, 0x1524, &(0x7f0000000cc0)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZMcSUiMu6RxSUguQxJDSC4Tk8b9fr8kJEmTJCG5Jev/GZe/06nzP+f8zjn5f37zfD+f/bGed++19rP38+733XuZme87D63RqGbVBkQE/xa89E8iAMQCwEAAuAEAAgAoG1c2LnN9domJ/95O2H/WYynXOgN2LXH9szauf9bG9c/auP5ZG9c/a+P6Z21c/6yN689YVrZ5ev4becm6C8//Z2X8/f+/SEbJcV+vLXlzF4CYf7YL1z9r4/r/rxX8Mxtx/bM2rn9WFXutE2D/H+DrPyvI9nfXcP2zNq4/Y1nZtZ5/vtYLRLL2ObjW7z/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDGX+VAoAr7WudF2OMMcYYY4wxxv5zfLZrnQFjjDHGGGOMMcb++xAESFAQQAxkg1jIDjlAAMD1kAtugAjcCHFwE+SGmyEP5IV8kB/ioQAUBA0GLBCEUAgKQxRugSJwKxSFYlAcSoCDklAKboPScDuUgTugLNwJ5eAuKA8VoCJUgruhMtwDVeBeqAr3QTWoDjWgJtwPteABqA0PQh14COrCw1APHoH68Cg0gMegITwOjeAJaAxPQhNoCs2gObT4H/V/BbrDq9ADekIi9ILe0Af6Qj/oDwNgILwGg+B1GAxvQBIMgaEwDIbDmzAC3oKRMApGw9swBt6BsTAOxsMESIaJMAnehT5rL53NqTANUmA6zIAPYCbMgtnwIcyBj2AuzIP5sABS4WNYCIsgDT6BxfAppMMSWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCttgO+yAnfAZ7ILPYTfsgb3wBeyDL//F/qf/pn8XBAQUKFChwhiMwViMxRyYA3NiTsyFuTCCEYzDOMyNuTEP5sF8mA/jMR4LYkE0aJCQsBAWwihGsQgWwaJYFItjcXTosBSWwtJ4O5bBMlgWy2I5LIflsQJWwEpYCStjZayCVbAqVsVqWA1rYA28H+/HXlgba2MdrIN1se6V6SlsgA2wITbERtgIG2NjbIJNsBk2wxbYAltiS2yFrbANtsG22BbbYTtMwARsj+2xA3bAjtgRO2En7IydsQt2xa4Zr2QDfBVfxZ5YTfTC3tgb+2JStv44AAfgazgIX8fX8Q1MwiE4FIfhMHwTR+ApHImjcDSOxsriHRyL45DEBEzGZJyEk3AyTsYp+D6+j9MwBafjDJyBM3EWzsIPcQ5+hB/hPJyHCzAVU3EhLsI0TMPFeBrTcQkujV2Gy3EFLsdVuBpX4Vpch2txA27ATbgJt+AW3IbbcAfuwM9QAeDnuAf3YBLuw324H/fjATyAB/EgZmAGHsJDeBgP4xE8gkfxKB7D43gCj+NJPImn8DSewTN4Ds/heXwp/tuGnxVbkwQikxJKxIgYEStiRQ6RQ+QUOUUukUtERETEiTiRW+QWeUQekU/kE/EiXhQUBYURRpAIYwBAREVUFBFFRFFRVBQXxYUTTpQSpURpLC3KiDJ4+cNGlBcVRGtXSVQSlUUbV0XcK6qKqqKaqC5qiJqipqglaonaoraoI+qIuqKuqCceEfVFL+yPj4nMyjQSQ7CxGIpNRFMhLw/aUozAVqK1aCOeEaNwJLYTLV2CeF5kJtZB/EWMwxdFJzEBO4uXRRfRVXQTr4juopXrIXqKKdhL9BbTsK/oJ/qLAWImVhcf4pzsNcQbIkkMEUPFMLEA3xQjxFtipBglRou3xRjxjhgrxonxYoJIFhPFJPGumCzeE1PE+2KqmCZSxHQxQ3wgZopZYrb4UMwRH4m5Yp6YLxaIVPGxWCgWiTTxiVgsPhXpYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpPhO7xOdit9gj9oovxD7xpdgvvhIHxNfioPhGZIhvxSHxnTgsvhdHxA/iqPhRHBPHxQnxkzgpfhanxGlxRpwV58Qv4rz4VVwQXoBEKaSUSgYyRmaTsTK7zCGvkzllcPns3ijj5E0yt7xZ5pF5ZT6ZX8bLArKg1NJIK0mGspAsLKPyFllE3iqLymKyuCwh53x3qXdpebssI++QZeWdspy8S8bKCrKirCTvlpXlPRIil7aqJqvLGrKmvF8mwgOytnxQ1pEPybryYVlPPiLry0dlA/mYbCgfl43kE7KxfFI2kU1lM9lctpBPyZbyadlKtpZt5DOyrXxWtpPPyQT5vGwv/eW3yIuyk3xJdpYvyy6yq+wmf5UXpJc9ZE8JvUD2ln1kX9lP9pcD5ED5mhwkX5eD5RsySQ6RQ+UwOVy+KUfIt+RIOUqOlm/LMfIdOVaOk+PlBJksJ8pJ8l05Wb4np8j35VQ5TabI6bL/5ZFmS/kP+7/7B/0HX9z7JrlZbpFb5Ta5Xe6QO+VncpfcJXfL3XKv3Cv3yX1yv9wvD8gD8qA8KDNkhjwkD8nD8rA8Io/Io/KoPCaPy7PyJ3lS/ixPydPytDwrz8lz8vzlcwAKlVBSKRWoGJVNxarsKoe6TuVU16tc6gYVUTeqOHWTyq1uVnlUXpVP5VfxqoAqqLQyyipSoSqkCquouuXKNa6KqxLKqZKqlLrtX+mviqhbVVFV7Df9r+SX+Hfya6FaqJaqpWqlWqk2qo1qq9qqdqqdSlAJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qESVaLqrfqovqqf6q8GqIHqNTVIDVKD1WCVpJLUUDVUDVfD1Qg1Qo1UI9VoNVqNUWPUWDVWjVfjVbJKVpPUJDVZTVZT1BQ1VU1VKSpFzVAz1Ew1U81Ws9UcNUfNVXPVfDVfpapUtVAtVGkqTS1Wi1W6WqKWqGVqmVqhVqhVapVao9aodWqd2qA2qHS1WW1WW9VWtV1tVzvVTrVL7VK71W61V+1V+9Q+tV/tVwfUAXVQHVQZKkMdUofUYXVYHVFH1FF1VB1Tx9QJdUKdVCfVKXVKnVFn1Dl1Tp1X59UFdSHzti8QgQhUoIKYICaIDWKDHEGOIGeQM8gV5AoiQSSIC+KC3MHNQZ4gb5AvyB/EBwWCgoEOTGADcbno0eCWoEhwa1A0KBYUD0oELigZlApuC0oHtwdlgjuCssGdQbngrqB8UCGoGFQK7g4qB/cEVYJ7g6rBfUG1oHpQI6gZ3B/UCh4IagcPBnWCh4K6wcNBveCRoH7waNAgeCxoGDweNAqeCBoHTwZNgqZBs6B50OI/Or73p/I+7XronjpR99K9dR/dV/fT/fUAPVC/pgfp1/Vg/YZO0kP0UD1MD9dv6hH6LT1Sj9Kj9dt6jH5Hj9Xj9Hg9QSfriXqSfldP1u/pKfp9PVVP0yl6up6hP9Az9Sw9W3+o5+iP9Fw9T8/XC3Sq/lgv1It0mv5EL9af6nS9RC/Vy/RyvUKv1Kv0ar1Gr9Xr9Hq9QW/Um/RmvUVv1dv0dr1D79Sf6V36c71b79F79Rd6n/5S79df6QP6a31Qf6Mz9Lf6kP5OH9bf6yP6B31U/6iP6eP6hP5Jn9Q/61P6tD6jz+pz+hd9Xv+qL2ifeXOf+fVulFEmxsSYWBNrcpgcJqfJaXKZXCZiIibOxJncJrfJY/KYfCafiTfxpqApaDKRIVPIFDJREzVFTBFT1BQ1xU1x44wzpUwpU9qUNmVMGVPWlDXlTDlT3pQ3FU1Fc7e529xj7jH3mnvNfeY+U91UNzVNTVPL1DK1TW1Tx9QxdU1dU8/UM/VNfdPANDANTUPTyDQyjU1j08Q0Mc1MM9PCtDAtTUvTyrQybUwb09a0Ne1MO5NgEkx70950MB1MR9PRdDKdTGfT2XQxXUw30810N91ND9PDJJpE09v0Nn1NX9Pf9DcDzUAzyAwyg81gk2SSzFAz1Aw3w80IM8KMNKPM6MwbVfOOGWvGmfFmgkk2yWaSmWQmm8lmiplippqpJsWkmBlmhplpZprZZraZY+aYuWaumW/mm1STahaahSbNpJnFZrFJN+lmqVlqlpvlZqVZaVab1WatWWvWw3qz0Ww0m81ms9VsNdvNdrPT7DS7zC6z2+w2e81es8/sM/vNfnPAHDAHzUGTYTLMIXPIHDaHzRFzxBw1R80xc8ycMCfMSXPSnDKnzBlzxpwzeS9/X3oTa7PbHPY6m9Neb3PZG+zfxvlsfhtvC9iCVts8Nu9vYmOtLWqL2eK2hHW2pC1lb/tdXN5WsBVtJXu3rWzvsVV+F9eyD9ja9kFbxz5ka9r7fxPXtQ/bevYJWx8RwDa1DW1z28g+YRvbJ20T29Q2s81tW/usbWefswn2edvevvC7eKFdZFfbNXatXWd32z32jD1rD9vv7Tn7i+1he9qB9jU7yL5uB9s3bJId8rt4tH3bjrHv2LF2nB1vJ/wunmqn2RQ73c6wH9iZdpYdtvu3car92M6xaXaunWfn2wUX48yc0uwndrH91KbbAJbaZXa5XWFX2lX/N9dldoPdaDfZXfZzu9Vus9vtDrvzyo2w3WP32i/sPvulPWS/swfs1/agPWIz7LcX48zjO2J/sEftj/aYPW5P2J/sSfuzutI789h/sr/aC9ZbICQgSYoCiqFsFEvZKQddRznpespFN1CEbqQ4uoly082Uh/JSPspP8VSACpImQ5aIQipEhSlKt9CV9IpTCXJUkkrRbVSabqcydAeVpTupHN1F5akCVaRKdDdVpnuoCt1LVek+qkbVqQbVpPupFj1AtelBqkMPUV16mOrRI1SfHqUG9Bg1pMepET1BjelJakJNqRk1pxb0FLWkp6kVtaY29Ay1pWepHT1HCfQ8tacXqAP9hTrSi9SJXqLO9DJ1oa7UjV6h7vQq9aCelEi9qDf1ob7Uj/rTABpIr9Egep0G0xuURENoKA2j4fQmjaC3aCSNotH0No2hd2gsjaPxNIGSaSJNondpMr1HU+h9mkrTKIWm0wz6gGbSLJpNH9Ic+ojm0jyaTwsolT6mhbSI0ugTWkyfUjotoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO2kmf0S76nHbTHtpLX9A++pL201d0gL6mg/QNZdC3dIi+o8P0PR2hH3xP+pGO0XE6QT/RSfqZTtFpOkNn6Rz9QufpV7pAniDEUIQyVGEQxoTZwtgwe5gjvC7MGV4f5gpvCCPhjWFceFOYO7w5zBPmDfOF+cP4sEBYMNShCW1IYRgWCguH0fCWsEh4a1g0LBYWD0uELiwZlgpvC0uHMVAmvCMsG94ZlgvvCsuHFcInHqoU3h1WDu8Jq4T3hlXD+8JqYfWwRlgzvD+sFT4Q1g4fDOuED4VlwofDeuEjYf3w0bBB+FjYMHw8bBQ+ETYOnwybhE3DZmHzsEX4VNgyfDpsFbYO24TPhG3DZ8N24XNhQvh82D584eL6hxf9/fWJYa+wd9gn7BN6/6CcH10QTY1+HF0YXRRNi34SXRz9NJoeXRJdGl0WXR7NvAdaFV0dXRNdG10XXR/dEN0Y3RT1vmY2cOiEk065wMW4bC7WZXc53HUup7ve5XI3uIi70e1pd5PL7W52eVxel8/ld/GugCvotDPOOnKhK+QKu6i7xRVxt/YEV8wVdyWccyVdKdfctXAtXEv3tGvlWrs27hn3jHvWPeuec8+5511794Lr4P7iOroXXSf3knvJvey6uK6um3vFdXcTc126JhNdb9fb9XV9XX/X3w10A90gN8gNdoNdkktyQ91QN9wNdyPcCDfSjXSj3Wg3xo1xY91YN96Nd8ku2U1yk9xkN9lNcVPcVDfVpbgUN8PNcDPdTFd51qW9zHVz3Xw336W6VLfQZZ6vNLfYLXbpLt0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9jdcGtTtc/vdfnfAHXAH3Tcuw33rDrnv3GH3vTvifnBH3Y/umDvuTrif3En3szvlTrsz7qw7535x592v7oLzLjkyMTIp8m5kcuS9yJTI+5GpkWmRlMj0yIzIB5GZkVmR2ZEPI3MiH0XmRuZF5kcWRFIjH0cWRhZF0iKfRBZHPo2kR5ZElkaWRZZHVkS8L7A19IV8YR/1t/gi/lZf1BfzxX0J73xJX8rf5kv7230Zf4cv6+/05fxdvryv4Cv6J30T39Q38819C/+Ub+mf9q18a9/GP+Pb+md9O/+cT/DP+/b+Bd/B/8V39C/6Tv4l39m/7Lv4rr6bf8V396/6Hr6nT/S9fG/fx/f1/Xx/P8AP9K/5Qf51P9i/4ZP8ED/UD/PD/Zt+hH/Lj/Sj/OiYt/2YK4/IMMEn+4l+kn/XT/bv+Sn+fT/VT/Mpfrqf4T/wM/0sP9t/6Of4j/xcP8/P9wt8qv/YL/SLfJr/xC/2n/p0v+TKpLJf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf57X6H3+k/87v853633+P3+i/8Pv+l3++/8gf81/6g/8Zn+G/9If+dP+y/90f8D/6o/9Ef88f9Cf+TP+l/9qf8aX/Gn/Xn/C/+vP/VX+DfWWOMMcYY+6dMvNoUv11zaTq/1x/0EX+1cW8AuH5b/oy/Xp95R7k+z6V2PxHfNgIAz/fs/NiVpVq1xMTEy9umSwgKzwO48j9BmWLgarwE2sCzkACtofQf5t9PdD1H/2D86J0AOf6qTyxcja+O/xUAJv7B+E89M3phufBM3P9j/HkARQtf7ZMdrsZLoM3F+ZXWUObv5J+35T/IP/vXyQCt/qpPTrgaX82/FDwNL0DCb7ZkjDHGGGOMMcYu6Scqdrzy/HnlJz7/6Pk8Xl2cELg4KZANLsYX/aPnc8YYY4wxxhhjjF17L3bt9txTCQmtO/7rjSr/o17/dKMx/LdG5sYfNrwHuPKKAoB/c0CAzIb8M49iy5+yr6TLl87frlp+1gfw59ULIv/dXVzjDybGGGOMMcbYf9zVm/7fvq6uVUKMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlgW9Gf8bbZrfYyMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfZ/AgAA//9TlP+L") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) 2.821635398s ago: executing program 6 (id=993): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 1.968384247s ago: executing program 4 (id=997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x40442, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd7) 1.814214561s ago: executing program 4 (id=999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 1.734243249s ago: executing program 6 (id=1001): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000012500)=[{&(0x7f0000010140)='x', 0x1}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x4004881) 1.734154078s ago: executing program 6 (id=1002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file1'}, 0xb) mmap(&(0x7f000025e000/0x4000)=nil, 0x4000, 0x3000007, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write(r0, &(0x7f0000000180)="86a1", 0x2) 1.712656491s ago: executing program 6 (id=1003): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x1103, &(0x7f0000000300)="$eJzs2LFqFEEYB/D/7J6ChZxM+iWghYIEw/kCKRSusbCxsTus7LxKucfJG/gakso+5gFSBOyV3fU0AUHxDg+O3w+W3e/Pznwz5UwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN0luJzlokrrOmiQl6bqz+UWSbp3f+9Q2KXn5Zr589m72fDn+lj5rUvpRQ12P79c6q7N6XJ8enDyoy/cf3rbXWpZ0Ob9aLe68uNzqVvre7VZnBAAAgP3wbWPTYZ67O+sPAAAA/MlWLxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANlTXH02SknTd2fwiSbfbZQEAAAAbKmnyevq7fLwG+OVxPk/LkCf5cprk61A8yek4/tFftPv46kZ5698XDgAAAHumXDuPP8zk57m8zw4zydHRWP945fIkaYeT+U3nV6vF8ByuFuV/bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjODhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAKYKAAD//xIs078=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x1) 1.530183348s ago: executing program 4 (id=1006): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40000, 0x90) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xfffff001, 0xc00, 0x80000001, 0xfffffff9, 0x4}) 1.443008966s ago: executing program 5 (id=1007): add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000400)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0) 1.387222641s ago: executing program 4 (id=1008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x11, 0x443f, &(0x7f00000088c0)="$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") 1.134231485s ago: executing program 5 (id=1009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x65c, 0x80000) r3 = eventfd2(0x65c, 0x80000) r4 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0x7, 0x2, r4}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x1, 0x3, r3}) 987.939969ms ago: executing program 7 (id=1010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='percpu_alloc_percpu_fail\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) 762.859059ms ago: executing program 5 (id=1011): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) 681.482707ms ago: executing program 7 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 633.279611ms ago: executing program 7 (id=1013): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000180)={0x18, 0x4}, 0x18) 629.064251ms ago: executing program 3 (id=1014): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0xaa68, @loopback, 0x9}}, 0x6, 0x7, 0x0, 0xffffffff, 0x3}, &(0x7f0000000340)=0x98) 481.703526ms ago: executing program 5 (id=1015): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09"], 0x610) 473.106076ms ago: executing program 3 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r3, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4) 308.974942ms ago: executing program 7 (id=1017): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x8100, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) 182.184874ms ago: executing program 5 (id=1018): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 182.069683ms ago: executing program 7 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002c00)=""/4088, 0xff8}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}, 0x8008}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 89.769162ms ago: executing program 5 (id=1020): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=""/92) 0s ago: executing program 7 (id=1021): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x6f, 0xcf, 0x20, 0x13d8, 0x20, 0xf731, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xe4, 0xd5}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): 453][ T5394] XFS (loop0): Mounting V5 Filesystem [ 117.594881][ T4299] Bluetooth: hci0: command 0x0409 tx timeout [ 117.738867][ T5394] XFS (loop0): Ending clean mount [ 117.750747][ T5394] XFS (loop0): Unmounting Filesystem [ 119.583074][ T4311] device hsr_slave_0 left promiscuous mode [ 119.589697][ T4311] device hsr_slave_1 left promiscuous mode [ 119.626221][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.633667][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.651025][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.667655][ T5079] hid-generic 07FF:0004:0009.0001: unknown main item tag 0x0 [ 119.669285][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.683473][ T1335] Bluetooth: hci0: command 0x041b tx timeout [ 119.703079][ T5079] hid-generic 07FF:0004:0009.0001: unknown main item tag 0x0 [ 119.724751][ T5079] hid-generic 07FF:0004:0009.0001: unknown main item tag 0x0 [ 119.745590][ T4311] device bridge_slave_1 left promiscuous mode [ 119.751845][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.776812][ T5079] hid-generic 07FF:0004:0009.0001: hidraw0: HID v0.04 Device [syz1] on syz1 [ 119.791217][ T4311] device bridge_slave_0 left promiscuous mode [ 119.810418][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.872357][ T4311] device veth1_macvtap left promiscuous mode [ 119.901274][ T4311] device veth0_macvtap left promiscuous mode [ 119.914155][ T5454] Cannot find add_set index 0 as target [ 119.944961][ T4311] device veth1_vlan left promiscuous mode [ 119.950779][ T4311] device veth0_vlan left promiscuous mode [ 120.022619][ T5451] fido_id[5451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.358574][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 120.373512][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 120.387764][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.407624][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.491344][ T4311] bond0 (unregistering): Released all slaves [ 120.662043][ T5374] chnl_net:caif_netlink_parms(): no params data found [ 120.687543][ T5444] device syzkaller0 entered promiscuous mode [ 120.697285][ T5459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 120.990692][ T5470] ceph: No mds server is up or the cluster is laggy [ 121.001820][ T4248] libceph: connect (1)[c::]:6789 error -101 [ 121.037220][ T4248] libceph: mon0 (1)[c::]:6789 connect error [ 121.371419][ T5487] loop0: detected capacity change from 0 to 512 [ 121.422287][ T5487] EXT4-fs (loop0): inline encryption not supported [ 121.525640][ T5487] EXT4-fs (loop0): 1 orphan inode deleted [ 121.531437][ T5487] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x000000000000844d,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 121.671723][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.723120][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.761122][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 121.806447][ T5374] device bridge_slave_0 entered promiscuous mode [ 121.875954][ T5374] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.072898][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.231167][ T5374] device bridge_slave_1 entered promiscuous mode [ 122.556045][ T5374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.577162][ T5374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.758887][ T5374] team0: Port device team_slave_0 added [ 122.916916][ T5374] team0: Port device team_slave_1 added [ 122.940389][ T5374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.947519][ T5374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.974960][ T5374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.010300][ T5531] loop0: detected capacity change from 0 to 512 [ 123.032017][ T5374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.070797][ T5374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.164750][ T5374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.220326][ T5531] EXT4-fs (loop0): 1 truncate cleaned up [ 123.242755][ T5531] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 123.305580][ T5374] device hsr_slave_0 entered promiscuous mode [ 123.343238][ T5512] loop3: detected capacity change from 0 to 32768 [ 123.358917][ T5374] device hsr_slave_1 entered promiscuous mode [ 123.423963][ T5512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.265 (5512) [ 123.529710][ T5512] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 123.553106][ T5512] BTRFS info (device loop3): metadata ratio 2 [ 123.571629][ T5512] BTRFS info (device loop3): allowing degraded mounts [ 123.634898][ T5512] BTRFS info (device loop3): force zlib compression, level 3 [ 123.722796][ T5512] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 123.793761][ T5512] BTRFS info (device loop3): use zstd compression, level 3 [ 123.834962][ T4259] Bluetooth: hci0: command 0x0419 tx timeout [ 123.859074][ T5512] BTRFS info (device loop3): force clearing of disk cache [ 124.053490][ T5512] BTRFS info (device loop3): turning on flush-on-commit [ 124.060923][ T5512] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 124.073817][ T5512] BTRFS info (device loop3): trying to use backup root at mount time [ 124.082451][ T5512] BTRFS info (device loop3): using free space tree [ 124.089099][ T5512] BTRFS info (device loop3): has skinny extents [ 124.472312][ T5374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.491708][ T5580] capability: warning: `syz.0.277' uses deprecated v2 capabilities in a way that may be insecure [ 124.545807][ T5374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.566887][ T5512] BTRFS info (device loop3): enabling ssd optimizations [ 124.605464][ T5512] BTRFS info (device loop3): clearing free space tree [ 124.679513][ T5512] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.704554][ T5374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.755379][ T5585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.278'. [ 124.763011][ T5512] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.774629][ T5585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.278'. [ 124.818807][ T5585] device bridge0 entered promiscuous mode [ 124.889746][ T5512] BTRFS info (device loop3): creating free space tree [ 124.907906][ T5585] device ip6gretap0 entered promiscuous mode [ 124.937099][ T5512] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.947997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 124.966404][ T5374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.973395][ T5512] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.116927][ T5604] overlayfs: failed to get inode (-116) [ 125.146277][ T5604] overlayfs: failed to get inode (-116) [ 125.192126][ T5609] overlayfs: failed to get inode (-116) [ 125.271932][ T5609] overlayfs: failed to get inode (-116) [ 125.319860][ T5374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.362928][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.372217][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.420316][ T5374] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.464882][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.473495][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.579242][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.586366][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.625154][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.641470][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.800991][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.808140][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.049745][ T5627] loop5: detected capacity change from 0 to 512 [ 126.070535][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.332939][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.430607][ T5627] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.482089][ T5627] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 126.503384][ T5627] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 126.532640][ T5627] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.288: attempt to clear invalid blocks 2 len 1 [ 126.548552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.555021][ T5627] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.288: invalid indirect mapped block 1819239214 (level 0) [ 126.571291][ T5627] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.288: invalid indirect mapped block 1819239214 (level 1) [ 126.586741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.595573][ T5627] EXT4-fs (loop5): 1 truncate cleaned up [ 126.601267][ T5627] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 126.708125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.755663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.787216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.818307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.851688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.891663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.946045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.984837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.019522][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.290'. [ 127.030074][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.531289][ T5657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.539197][ T5657] IPv6: NLM_F_CREATE should be set when creating new route [ 127.862815][ T5647] loop0: detected capacity change from 0 to 8192 [ 127.968734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.983347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.058185][ T5374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.232302][ T5635] loop4: detected capacity change from 0 to 32768 [ 128.285321][ T5635] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.289 (5635) [ 128.408692][ T5635] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 128.454989][ T5635] BTRFS info (device loop4): enabling auto defrag [ 128.468823][ T5635] BTRFS info (device loop4): force clearing of disk cache [ 128.503175][ T5686] netlink: 272 bytes leftover after parsing attributes in process `syz.3.300'. [ 128.644592][ T5635] BTRFS info (device loop4): enabling disk space caching [ 128.656103][ T5635] BTRFS info (device loop4): max_inline at 0 [ 128.757963][ T5635] BTRFS info (device loop4): disk space caching is enabled [ 128.896780][ T5635] BTRFS info (device loop4): has skinny extents [ 129.446719][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.456295][ T688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.498355][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.560214][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.580533][ T5635] BTRFS info (device loop4): enabling ssd optimizations [ 129.617606][ T5635] BTRFS info (device loop4): clearing free space tree [ 129.624449][ T5635] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.664319][ T5685] loop0: detected capacity change from 0 to 32768 [ 129.677518][ T5374] device veth0_vlan entered promiscuous mode [ 129.717191][ T5374] device veth1_vlan entered promiscuous mode [ 129.749374][ T5635] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.760587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.797067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.822791][ T5685] XFS (loop0): Mounting V5 Filesystem [ 129.892926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.951364][ T5704] loop3: detected capacity change from 0 to 32768 [ 130.001383][ T5716] vcan0 speed is unknown, defaulting to 1000 [ 130.064188][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.083009][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.103012][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.118988][ T5704] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.303 (5704) [ 130.153512][ T5374] device veth0_macvtap entered promiscuous mode [ 130.225376][ T5374] device veth1_macvtap entered promiscuous mode [ 130.258799][ T5685] XFS (loop0): Ending clean mount [ 130.264512][ T5704] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 130.286817][ T5704] BTRFS info (device loop3): using free space tree [ 130.293354][ T5704] BTRFS info (device loop3): has skinny extents [ 130.304441][ T5685] XFS (loop0): Quotacheck needed: Please wait. [ 130.313629][ T5374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.369972][ T5374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.438683][ T5374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.449740][ T5685] XFS (loop0): Quotacheck: Done. [ 130.486225][ T5374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.528293][ T5374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.539331][ T5374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.552304][ T5374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.563735][ T5374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.577843][ T5374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.588014][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.597424][ T4194] XFS (loop0): Unmounting Filesystem [ 130.665188][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.733526][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.769924][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.816583][ T5374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.843903][ T5704] BTRFS info (device loop3): enabling ssd optimizations [ 130.848202][ T5374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.908299][ T5374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.927096][ T5374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.937340][ T5374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.948144][ T5374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.958347][ T5374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.970678][ T5374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.996778][ T5374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.008048][ T5374] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.024351][ T5374] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.044406][ T5374] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.057218][ T26] audit: type=1800 audit(1766829391.455:13): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.303" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 131.096447][ T5374] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.121471][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.154291][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.539530][ T688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.562402][ T688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.605486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.658312][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.703866][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.759628][ T5768] loop0: detected capacity change from 0 to 128 [ 131.858000][ T5768] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 131.871297][ T5768] hpfs: filesystem error: improperly stopped [ 131.877426][ T5768] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 131.885676][ T5768] hpfs: You really don't want any checks? You are crazy... [ 131.893773][ T5768] hpfs: hpfs_map_sector(): read error [ 131.899431][ T5768] hpfs: code page support is disabled [ 131.913949][ T5768] hpfs: hpfs_map_4sectors(): unaligned read [ 131.920767][ T5768] hpfs: hpfs_map_4sectors(): unaligned read [ 131.926799][ T5768] hpfs: filesystem error: unable to find root dir [ 132.114377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.478417][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.484733][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.769411][ T5780] loop6: detected capacity change from 0 to 4096 [ 132.806368][ T5780] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 132.986966][ T5780] ntfs3: loop6: failed to convert "c46c" to macgreek [ 133.201942][ T5776] loop3: detected capacity change from 0 to 32768 [ 133.259518][ T4544] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.329949][ T5776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.310 (5776) [ 133.368987][ T5798] loop0: detected capacity change from 0 to 128 [ 133.397376][ T5776] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 133.434526][ T5776] BTRFS info (device loop3): force clearing of disk cache [ 133.455028][ T5776] BTRFS info (device loop3): disabling free space tree [ 133.489494][ T5776] BTRFS info (device loop3): enabling auto defrag [ 133.509204][ T5776] BTRFS info (device loop3): max_inline at 0 [ 133.528801][ T5776] BTRFS info (device loop3): enabling disk space caching [ 133.543161][ T5776] BTRFS info (device loop3): disk space caching is enabled [ 133.559693][ T5776] BTRFS info (device loop3): has skinny extents [ 133.919930][ T4544] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 133.931137][ T5776] BTRFS info (device loop3): enabling ssd optimizations [ 133.940782][ T4544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.954270][ T5776] BTRFS info (device loop3): clearing free space tree [ 133.964312][ T5776] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.979981][ T5776] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.011713][ T4544] usb 5-1: Product: syz [ 134.051257][ T4544] usb 5-1: Manufacturer: syz [ 134.071541][ T4544] usb 5-1: SerialNumber: syz [ 134.111640][ T4544] usb 5-1: config 0 descriptor?? [ 134.308173][ T4365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4365) [ 134.374277][ T5836] loop0: detected capacity change from 0 to 4096 [ 134.585721][ T5842] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.671758][ T5836] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 524288 [ 134.706431][ T5836] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 134.759242][ T5836] Remounting filesystem read-only [ 134.771238][ T5836] NILFS (loop0): error -5 truncating bmap (ino=15) [ 134.987451][ T4194] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 135.255057][ T4544] usb 5-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -71 [ 135.273943][ T4544] usb 5-1: Firmware version (0.0) predates our first public release. [ 135.371303][ T4544] usb 5-1: Please update to version 0.2 or newer [ 135.405044][ T4544] usb 5-1: atusb_probe: initialization failed, error = -71 [ 135.412720][ T4544] atusb: probe of 5-1:0.0 failed with error -71 [ 135.453949][ T4544] usb 5-1: USB disconnect, device number 2 [ 136.219864][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 136.473570][ T5865] loop4: detected capacity change from 0 to 8192 [ 136.621938][ T5865] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 136.640568][ T5865] REISERFS (device loop4): using ordered data mode [ 136.735496][ T5865] reiserfs: using flush barriers [ 136.747976][ T5880] input: syz1 as /devices/virtual/input/input9 [ 136.914622][ T5865] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.291425][ T5865] REISERFS (device loop4): checking transaction log (loop4) [ 137.448022][ T5865] REISERFS (device loop4): Using r5 hash to sort names [ 138.729853][ T5865] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 139.410660][ T5896] loop0: detected capacity change from 0 to 1024 [ 139.471400][ T5896] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 139.516705][ T5896] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.623379][ T5896] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,dioread_nolock,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback. [ 141.600154][ T5932] syz.0.337 uses obsolete (PF_INET,SOCK_PACKET) [ 141.796859][ T5937] loop0: detected capacity change from 0 to 2048 [ 144.520452][ T5941] loop3: detected capacity change from 0 to 131072 [ 144.631296][ T5941] F2FS-fs (loop3): invalid crc value [ 144.716785][ T5941] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.800011][ T5941] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 144.834097][ T5941] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 144.844669][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 144.973394][ T5962] loop5: detected capacity change from 0 to 1024 [ 145.156380][ T5962] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.336005][ T5962] EXT4-fs warning (device loop5): empty_inline_dir:1852: bad inline directory (dir #12) - no `..' [ 145.941721][ T5981] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 146.585890][ T5978] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback. [ 146.793984][ T5976] loop6: detected capacity change from 0 to 8192 [ 146.839305][ T5976] REISERFS warning (device loop6): super-6509 reiserfs_parse_options: nolargeio option is no longer supported [ 146.952578][ T5991] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.600382][ T6007] SET target dimension over the limit! [ 147.615752][ T6007] set match dimension is over the limit! [ 148.385571][ T6016] Illegal XDP return value 4294967274, expect packet loss! [ 149.916530][ T6053] loop3: detected capacity change from 0 to 32768 [ 150.120421][ T6053] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 150.178898][ T26] audit: type=1800 audit(1766829410.575:14): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.371" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 151.664313][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 151.921102][ T6077] loop6: detected capacity change from 0 to 4096 [ 152.025769][ T6077] ntfs: volume version 3.1. [ 152.092379][ T6077] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 152.147628][ T6079] loop3: detected capacity change from 0 to 2048 [ 152.154208][ T6077] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 152.239883][ T6077] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to map page. [ 152.262234][ T6079] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.388865][ T6077] ntfs: (device loop6): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 152.412288][ T6079] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.908864][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.382'. [ 152.939620][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 152.958943][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 154.354923][ T4542] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 154.725033][ T4189] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 154.869175][ T6129] loop3: detected capacity change from 0 to 32768 [ 154.909650][ T6129] XFS: attr2 mount option is deprecated. [ 155.019468][ T4542] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 155.073063][ T4542] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.119447][ T4542] usb 5-1: Product: syz [ 155.154987][ T6151] loop0: detected capacity change from 0 to 512 [ 155.170304][ T4542] usb 5-1: Manufacturer: syz [ 155.202745][ T4542] usb 5-1: SerialNumber: syz [ 155.213199][ T4542] r8152-cfgselector 5-1: config 0 descriptor?? [ 155.265319][ T6129] XFS (loop3): Mounting V5 Filesystem [ 155.286293][ T6151] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.318174][ T6151] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.400939][ T6129] XFS (loop3): Ending clean mount [ 155.414921][ T6151] loop_set_status: loop0 () has still dirty pages (nrpages=3) [ 155.415580][ T6129] XFS (loop3): Quotacheck needed: Please wait. [ 155.591800][ T6164] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.398: iget: bad i_size value: 2533274857506816 [ 155.739093][ T6129] XFS (loop3): Quotacheck: Done. [ 156.126151][ T26] audit: type=1800 audit(1766829416.525:15): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.392" name="file2" dev="loop3" ino=4423 res=0 errno=0 [ 156.185751][ T4194] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 156.203331][ T4194] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 156.268736][ T4196] XFS (loop3): Unmounting Filesystem [ 156.365021][ T4542] r8152-cfgselector 5-1: Unknown version 0x0000 [ 156.381837][ T4542] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 156.454733][ T6175] loop5: detected capacity change from 0 to 512 [ 156.518706][ T6175] EXT4-fs (loop5): Ignoring removed nobh option [ 156.602273][ T6175] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 156.686524][ T6175] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.756507][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.814958][ T6183] tipc: Started in network mode [ 156.820215][ T6183] tipc: Node identity 4, cluster identity 4711 [ 156.843925][ T6183] tipc: Node number set to 4 [ 156.895008][ T4545] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 156.898523][ T6187] loop5: detected capacity change from 0 to 2048 [ 156.966943][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.997613][ T6188] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.062981][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.295181][ T4545] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 157.326500][ T6192] loop3: detected capacity change from 0 to 512 [ 157.334299][ T4545] usb 7-1: config 0 has no interface number 0 [ 157.356169][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.418279][ T4545] usb 7-1: config 0 interface 41 has no altsetting 0 [ 157.503677][ T6192] EXT4-fs (loop3): Ignoring removed bh option [ 157.628671][ T6192] EXT4-fs (loop3): Ignoring removed nobh option [ 157.772722][ T6192] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.950397][ T6192] EXT4-fs (loop3): 1 truncate cleaned up [ 157.963621][ T6192] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,bh,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 158.036334][ T4545] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 158.135961][ T4545] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.259792][ T4545] usb 7-1: Product: syz [ 158.324771][ T4545] usb 7-1: Manufacturer: syz [ 158.403750][ T4545] usb 7-1: SerialNumber: syz [ 158.453926][ T26] audit: type=1800 audit(1766829418.845:16): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.411" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 158.592542][ T4545] usb 7-1: config 0 descriptor?? [ 158.683815][ T6198] vcan0 speed is unknown, defaulting to 1000 [ 158.885815][ T4545] CoreChips: probe of 7-1:0.41 failed with error -71 [ 158.931621][ T4545] usb 7-1: USB disconnect, device number 2 [ 159.389380][ T6223] loop4: detected capacity change from 0 to 8192 [ 159.539034][ T26] audit: type=1800 audit(1766829419.935:17): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.419" name="file2" dev="loop4" ino=1048648 res=0 errno=0 [ 159.545722][ T6223] attempt to access beyond end of device [ 159.545722][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.546038][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 159.571836][ T6223] attempt to access beyond end of device [ 159.571836][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.571860][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 159.571938][ T6223] attempt to access beyond end of device [ 159.571938][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.571955][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 159.572012][ T6223] attempt to access beyond end of device [ 159.572012][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.572029][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 159.572084][ T6223] attempt to access beyond end of device [ 159.572084][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.572100][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 159.572155][ T6223] attempt to access beyond end of device [ 159.572155][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.572171][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 159.572226][ T6223] attempt to access beyond end of device [ 159.572226][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.572242][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 159.572297][ T6223] attempt to access beyond end of device [ 159.572297][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.572313][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 159.572367][ T6223] attempt to access beyond end of device [ 159.572367][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.572383][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 159.572436][ T6223] attempt to access beyond end of device [ 159.572436][ T6223] loop4: rw=0, want=57848, limit=8192 [ 159.572452][ T6223] Buffer I/O error on dev loop4, logical block 57847, async page read [ 160.573424][ T6198] chnl_net:caif_netlink_parms(): no params data found [ 160.704202][ T6254] loop4: detected capacity change from 0 to 1024 [ 160.715793][ T5619] Bluetooth: hci3: command 0x0409 tx timeout [ 160.737632][ T6254] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 160.802844][ T5619] kernel read not supported for file /video7 (pid: 5619 comm: kworker/0:22) [ 160.820299][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.820380][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.821288][ T6198] device bridge_slave_0 entered promiscuous mode [ 160.823225][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.823298][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.824241][ T6198] device bridge_slave_1 entered promiscuous mode [ 160.860786][ T6254] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,inode_readahead_blks=0x0000000002000000,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 160.892672][ T6254] EXT4-fs error (device loop4): ext4_remount:6035: comm syz.4.424: Abort forced by user [ 160.904895][ T6254] EXT4-fs (loop4): Remounting filesystem read-only [ 160.904909][ T6254] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 160.970119][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.972315][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.181640][ T6198] team0: Port device team_slave_0 added [ 161.183122][ T6198] team0: Port device team_slave_1 added [ 161.233291][ T6268] loop4: detected capacity change from 0 to 4096 [ 161.255504][ T6268] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 161.286306][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.286319][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.286340][ T6198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.288313][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.288325][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.288347][ T6198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.319340][ T6268] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 161.342444][ T6268] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 161.343491][ T26] audit: type=1800 audit(1766829421.735:18): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.429" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 161.344705][ T6268] ntfs3: loop4: ino=1e, "file1" encrypted i/o not supported [ 161.424336][ T6198] device hsr_slave_0 entered promiscuous mode [ 161.425775][ T6198] device hsr_slave_1 entered promiscuous mode [ 161.426224][ T6198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.426303][ T6198] Cannot create hsr debugfs directory [ 161.568467][ T5163] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 161.569708][ T4184] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 161.569746][ T4184] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 161.569783][ T4184] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 161.573611][ T5163] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 161.618064][ T4184] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 162.686181][ T6248] loop6: detected capacity change from 0 to 32768 [ 162.698193][ T9] device hsr_slave_0 left promiscuous mode [ 162.759286][ T9] device hsr_slave_1 left promiscuous mode [ 162.787991][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.795230][ T6248] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 162.805071][ T4895] Bluetooth: hci3: command 0x041b tx timeout [ 162.822096][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.851372][ T6248] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 162.871858][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.911268][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.933951][ T6248] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 162.955384][ T6300] Error parsing options; rc = [-22] [ 162.975568][ T4895] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 162.981845][ T9] device bridge_slave_1 left promiscuous mode [ 162.982438][ T4895] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 163.005977][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.068404][ T9] device bridge_slave_0 left promiscuous mode [ 163.120135][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.181839][ T9] device veth1_macvtap left promiscuous mode [ 163.197893][ T4895] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 215ms [ 163.216281][ T4895] gfs2: fsid=syz:syz.0: jid=0: Done [ 163.232768][ T6248] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 163.361900][ T6248] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 163.373218][ T9] device veth0_macvtap left promiscuous mode [ 163.398221][ T6248] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 163.398221][ T6248] inode = 12 2341 [ 163.398221][ T6248] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 163.409428][ T9] device veth1_vlan left promiscuous mode [ 163.416903][ T6248] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 163.442605][ T9] device veth0_vlan left promiscuous mode [ 163.446933][ T6248] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 163.597688][ T6248] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 163.683293][ T6248] gfs2: fsid=syz:syz.0: File system withdrawn [ 163.884063][ T6248] CPU: 0 PID: 6248 Comm: syz.6.425 Not tainted syzkaller #0 [ 163.891395][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.901502][ T6248] Call Trace: [ 163.904797][ T6248] [ 163.907740][ T6248] dump_stack_lvl+0x168/0x230 [ 163.912455][ T6248] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 163.918109][ T6248] ? show_regs_print_info+0x20/0x20 [ 163.923322][ T6248] ? load_image+0x3b0/0x3b0 [ 163.927852][ T6248] gfs2_withdraw+0x111b/0x1460 [ 163.932648][ T6248] ? gfs2_lm+0x220/0x220 [ 163.936928][ T6248] ? load_image+0x3b0/0x3b0 [ 163.941490][ T6248] ? gfs2_consist_inode_i+0xc0/0xe0 [ 163.946743][ T6248] gfs2_dirent_scan+0x525/0x650 [ 163.951610][ T6248] ? gfs2_dirent_search+0x7e0/0x7e0 [ 163.956822][ T6248] ? gfs2_dirent_search+0x7e0/0x7e0 [ 163.962037][ T6248] gfs2_dirent_search+0x2dd/0x7e0 [ 163.967078][ T6248] ? gfs2_permission+0x3ed/0x4b0 [ 163.972030][ T6248] ? gfs2_dir_search+0x220/0x220 [ 163.976998][ T6248] ? gfs2_lookupi+0x5e0/0x5e0 [ 163.981687][ T6248] ? gfs2_glock_nq+0xcb0/0x1550 [ 163.986556][ T6248] gfs2_dir_search+0x49/0x220 [ 163.991244][ T6248] gfs2_lookupi+0x45c/0x5e0 [ 163.995770][ T6248] ? gfs2_lookup_simple+0xf0/0xf0 [ 164.000817][ T6248] ? gfs2_lookupi+0x3fe/0x5e0 [ 164.005509][ T6248] ? d_alloc+0x1e7/0x250 [ 164.009771][ T6248] __gfs2_lookup+0x8c/0x260 [ 164.014290][ T6248] ? gfs2_atomic_open+0x210/0x210 [ 164.019345][ T6248] ? do_raw_spin_unlock+0x11d/0x230 [ 164.024555][ T6248] ? _raw_spin_unlock+0x24/0x40 [ 164.029437][ T6248] ? d_alloc+0x1e7/0x250 [ 164.033715][ T6248] lookup_one_qstr_excl+0x10e/0x240 [ 164.038934][ T6248] filename_create+0x21e/0x450 [ 164.043719][ T6248] ? kern_path_create+0x190/0x190 [ 164.048785][ T6248] ? __virt_addr_valid+0x3c6/0x470 [ 164.053927][ T6248] ? __phys_addr+0xb6/0x170 [ 164.058451][ T6248] do_mkdirat+0x9d/0x5a0 [ 164.062710][ T6248] ? vfs_mkdir+0x570/0x570 [ 164.067144][ T6248] ? getname_flags+0x1fe/0x500 [ 164.071939][ T6248] __x64_sys_mkdirat+0x85/0x90 [ 164.076720][ T6248] do_syscall_64+0x4c/0xa0 [ 164.081154][ T6248] ? clear_bhb_loop+0x30/0x80 [ 164.085844][ T6248] ? clear_bhb_loop+0x30/0x80 [ 164.090533][ T6248] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.096446][ T6248] RIP: 0033:0x7f4661b2e749 [ 164.100872][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.120497][ T6248] RSP: 002b:00007f465fd95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 164.128927][ T6248] RAX: ffffffffffffffda RBX: 00007f4661d84fa0 RCX: 00007f4661b2e749 [ 164.136915][ T6248] RDX: 000000000000017d RSI: 0000200000000000 RDI: ffffffffffffff9c [ 164.144895][ T6248] RBP: 00007f4661bb2f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.152881][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.160868][ T6248] R13: 00007f4661d85038 R14: 00007f4661d84fa0 R15: 00007ffdfa0fae78 [ 164.168886][ T6248] [ 164.245977][ T6286] loop3: detected capacity change from 0 to 32768 [ 164.323298][ T6286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.435 (6286) [ 164.359656][ T6286] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 164.369590][ T6286] BTRFS info (device loop3): turning off barriers [ 164.388631][ T6286] BTRFS info (device loop3): setting nodatasum [ 164.395595][ T6286] BTRFS info (device loop3): use zlib compression, level 3 [ 164.402940][ T6286] BTRFS info (device loop3): using free space tree [ 164.409512][ T6286] BTRFS info (device loop3): has skinny extents [ 164.427429][ T6317] input: syz0 as /devices/virtual/input/input11 [ 164.885131][ T5619] Bluetooth: hci3: command 0x040f tx timeout [ 164.952066][ T6346] loop5: detected capacity change from 0 to 64 [ 164.981733][ T9] team0 (unregistering): Port device team_slave_1 removed [ 165.025226][ T9] team0 (unregistering): Port device team_slave_0 removed [ 165.048186][ T26] audit: type=1800 audit(1766829425.445:19): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.451" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 165.073459][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.117834][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.223581][ T6352] loop3: detected capacity change from 0 to 512 [ 165.301704][ T9] bond0 (unregistering): Released all slaves [ 165.314357][ T6352] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 165.344656][ T6352] EXT4-fs (loop3): orphan cleanup on readonly fs [ 165.419556][ T6358] loop5: detected capacity change from 0 to 1024 [ 165.452089][ T6352] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #16: comm syz.3.447: corrupted inode contents [ 165.452583][ T6360] loop4: detected capacity change from 0 to 512 [ 165.488245][ T6352] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #16: comm syz.3.447: mark_inode_dirty error [ 165.500502][ T6358] EXT4-fs (loop5): Test dummy encryption mode enabled [ 165.547478][ T6352] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #16: comm syz.3.447: corrupted inode contents [ 165.568145][ T6358] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.582634][ T6198] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 165.629963][ T6352] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.447: mark_inode_dirty error [ 165.635371][ T6198] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 165.690250][ T6198] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 165.708099][ T6352] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #16: comm syz.3.447: corrupted inode contents [ 165.726576][ T6358] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000004,dioread_lock,test_dummy_encryption=v1,dioread_nolock,delalloc,nobarrier,nogrpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 165.774481][ T6198] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 165.807480][ T6352] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 165.852548][ T6348] loop6: detected capacity change from 0 to 32768 [ 165.859754][ T6352] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #16: comm syz.3.447: corrupted inode contents [ 165.881114][ T6348] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.450 (6348) [ 165.949423][ T6358] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 165.959682][ T6352] EXT4-fs error (device loop3): ext4_truncate:4279: inode #16: comm syz.3.447: mark_inode_dirty error [ 166.013701][ T6360] EXT4-fs (loop4): Test dummy encryption mode enabled [ 166.031071][ T6360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.071059][ T6352] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 166.080230][ T6348] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 166.124020][ T6348] BTRFS info (device loop6): using free space tree [ 166.147064][ T6360] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.454: bad orphan inode 131083 [ 166.170473][ T6352] EXT4-fs (loop3): 1 truncate cleaned up [ 166.192480][ T6348] BTRFS info (device loop6): has skinny extents [ 166.199250][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.230876][ T6352] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 166.250212][ T6360] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 166.321427][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.336598][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.415449][ T6198] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.518492][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.546285][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.631312][ T6360] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 166.666261][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.673343][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.743943][ T6348] BTRFS info (device loop6): enabling ssd optimizations [ 166.757273][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.775566][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.784176][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.792696][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.799795][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.808601][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.817290][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.841575][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.875617][ T26] audit: type=1800 audit(1766829427.275:20): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.450" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 166.962083][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.965497][ T4895] Bluetooth: hci3: command 0x0419 tx timeout [ 167.013402][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.105628][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.171170][ T6198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.199641][ T6198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.692522][ T6418] loop3: detected capacity change from 0 to 32768 [ 167.699763][ T6398] loop5: detected capacity change from 0 to 32768 [ 168.104772][ C0] sched: RT throttling activated [ 168.110365][ T6398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.456 (6398) [ 168.110384][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.112269][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.330693][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.419738][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.468768][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.617197][ T6198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.624551][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.711194][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.770207][ T6425] loop4: detected capacity change from 0 to 262144 [ 168.785095][ T6398] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 168.794970][ T6398] BTRFS info (device loop5): using free space tree [ 168.801496][ T6398] BTRFS info (device loop5): has skinny extents [ 168.813360][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.840880][ T6398] BTRFS info (device loop5): enabling ssd optimizations [ 168.890910][ T6425] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.460 (6425) [ 168.919202][ T6425] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 168.928496][ T6425] BTRFS info (device loop4): using free space tree [ 168.935053][ T6425] BTRFS info (device loop4): has skinny extents [ 168.941295][ T6425] BTRFS info (device loop4): flagging fs with big metadata feature [ 168.951464][ T6449] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 169.069247][ T6425] BTRFS info (device loop4): enabling ssd optimizations [ 169.631183][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.691057][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.752858][ T6198] device veth0_vlan entered promiscuous mode [ 169.783358][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.801827][ T6506] loop5: detected capacity change from 0 to 512 [ 169.811092][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.851401][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.891704][ T6506] EXT4-fs (loop5): Unrecognized mount option "dioread_nolock2" or missing value [ 169.940789][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.010056][ T6198] device veth1_vlan entered promiscuous mode [ 170.126917][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.157786][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.205468][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.244640][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.290547][ T6198] device veth0_macvtap entered promiscuous mode [ 170.326120][ T6198] device veth1_macvtap entered promiscuous mode [ 170.415112][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.613902][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.845984][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.039211][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.108609][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.161464][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.171566][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.182138][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.193890][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.205924][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.214648][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.223550][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.236469][ T6530] loop6: detected capacity change from 0 to 128 [ 171.244176][ T6530] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.264686][ T5163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.304941][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 171.345575][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.425191][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.504815][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.534817][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.544688][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.860577][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.909612][ T6198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.967790][ T6198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.013222][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 172.023417][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.150452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.200184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.301759][ T6198] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.351340][ T6198] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.405651][ T6198] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.419746][ T6198] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.434936][ T1108] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 172.443992][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.191901][ T1108] usb 4-1: Product: syz [ 173.196335][ T1108] usb 4-1: Manufacturer: syz [ 173.201013][ T1108] usb 4-1: SerialNumber: syz [ 173.207367][ T1108] usb 4-1: config 0 descriptor?? [ 173.225047][ T1108] usb 4-1: can't set config #0, error -71 [ 173.235004][ T1108] usb 4-1: USB disconnect, device number 3 [ 173.277460][ T6545] loop5: detected capacity change from 0 to 4096 [ 173.378313][ T6545] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 173.455083][ T6545] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 173.473444][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.485266][ T6545] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 173.511321][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.804985][ T6545] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 174.836683][ T5163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.848845][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.864900][ T5163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.891623][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.963360][ T6545] ntfs: volume version 3.1. [ 175.058203][ T6545] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccyrillic. You might want to try to use the mount option nls=utf8. [ 175.814973][ T6545] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 175.908840][ T6567] loop7: detected capacity change from 0 to 2048 [ 176.038583][ T6576] mmap: syz.6.482 (6576) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 176.429955][ T6567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.885217][ T4895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 177.405636][ T4895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.535441][ T4895] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 177.581847][ T4895] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 177.685271][ T4895] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 177.789325][ T6567] loop_set_status: loop7 () has still dirty pages (nrpages=4) [ 177.790139][ T4895] usb 5-1: config 129 has no interface number 0 [ 177.884607][ T4895] usb 5-1: config 129 has no interface number 1 [ 177.902567][ T4895] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 177.974845][ T4895] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 178.010046][ T4895] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 178.059957][ T4895] usb 5-1: config 129 interface 135 has no altsetting 0 [ 178.074952][ T4895] usb 5-1: config 129 interface 5 has no altsetting 0 [ 178.454584][ T4895] usb 5-1: string descriptor 0 read error: -22 [ 178.465688][ T4895] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 178.493061][ T4895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.042645][ T6622] 9pnet: p9_fd_create_tcp (6622): problem connecting socket to 127.0.0.1 [ 179.052963][ T4895] usb 5-1: MIDIStreaming interface descriptor not found [ 179.545583][ T4895] usb 5-1: USB disconnect, device number 4 [ 179.775848][ T6640] loop6: detected capacity change from 0 to 8192 [ 179.971285][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.993168][ T6648] crypto_alloc_aead failed rc=-2 [ 180.708742][ T6640] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 180.863477][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.504'. [ 181.065098][ T6640] REISERFS (device loop6): using ordered data mode [ 181.071720][ T6640] reiserfs: using flush barriers [ 181.085795][ T4895] Bluetooth: hci4: command 0x0406 tx timeout [ 181.091876][ T4895] Bluetooth: hci1: command 0x0406 tx timeout [ 181.225243][ T6640] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.346665][ T6686] loop3: detected capacity change from 0 to 512 [ 181.376056][ T6640] REISERFS (device loop6): checking transaction log (loop6) [ 181.459004][ T6686] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 181.471175][ T6640] REISERFS (device loop6): Using r5 hash to sort names [ 181.481124][ T6640] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 181.525027][ T6640] REISERFS warning (device loop6): vs-2180 finish_unfinished: iget failed for [1 0 0x0 SD] [ 181.541264][ T6640] REISERFS error (device loop6): vs-15011 reiserfs_release_objectid: tried to free free object id (0) [ 181.554361][ T6640] REISERFS (device loop6): Remounting filesystem read-only [ 181.602426][ T6692] netlink: 96 bytes leftover after parsing attributes in process `syz.7.508'. [ 181.618304][ T6686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 181.658397][ T6686] System zones: 1-12 [ 182.066900][ T6686] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.505: corrupted in-inode xattr [ 182.146275][ T6686] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.505: couldn't read orphan inode 15 (err -117) [ 182.254182][ T6686] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,grpid,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 182.507401][ T6686] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.505: corrupted in-inode xattr [ 182.580163][ T6721] lo speed is unknown, defaulting to 1000 [ 182.586568][ T6721] lo speed is unknown, defaulting to 1000 [ 182.600850][ T6721] lo speed is unknown, defaulting to 1000 [ 182.626118][ T6721] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.659738][ T6721] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 182.953737][ T6721] lo speed is unknown, defaulting to 1000 [ 182.960294][ T6721] lo speed is unknown, defaulting to 1000 [ 182.965299][ T6721] lo speed is unknown, defaulting to 1000 [ 182.970090][ T6721] lo speed is unknown, defaulting to 1000 [ 182.975205][ T6721] lo speed is unknown, defaulting to 1000 [ 182.980926][ T6722] smc: removing ib device syz1 [ 183.272091][ T6686] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.505: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=916, size=1012 fake=0 [ 183.374109][ T6686] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.505: Invalid inode table block 5 in block_group 0 [ 183.389884][ T6686] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 183.409017][ T6731] overlayfs: missing 'lowerdir' [ 183.470666][ T6686] EXT4-fs error (device loop3): ext4_add_nondir:2855: inode #18: comm syz.3.505: mark_inode_dirty error [ 183.899110][ T6734] loop5: detected capacity change from 0 to 64 [ 183.923051][ T6686] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.505: Invalid inode table block 5 in block_group 0 [ 183.956730][ T6734] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 183.980035][ T6734] hfs: filesystem is marked locked, mounting read-only. [ 184.014557][ T6686] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 184.036762][ T6686] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #18: comm syz.3.505: mark_inode_dirty error [ 184.086418][ T6686] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 184.365046][ T4895] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 184.418711][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.527'. [ 185.025057][ T4895] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.101586][ T4895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.251009][ T4895] usb 7-1: Product: syz [ 185.351135][ T4895] usb 7-1: Manufacturer: syz [ 185.443658][ T4895] usb 7-1: SerialNumber: syz [ 185.593205][ T4895] usb 7-1: config 0 descriptor?? [ 185.868703][ T6767] loop3: detected capacity change from 0 to 32768 [ 185.910638][ T6767] ERROR: (device loop3): diRead: i_ino != di_number [ 185.910638][ T6767] [ 185.924120][ T6767] ERROR: (device loop3): remounting filesystem as read-only [ 185.956402][ T6794] loop4: detected capacity change from 0 to 16 [ 185.963680][ T6767] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 185.963680][ T6767] [ 185.975089][ T4895] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.989114][ T6767] ERROR: (device loop3): dbDiscardAG: -EIO [ 185.989114][ T6767] [ 186.062867][ T6794] erofs: (device loop4): mounted with root inode @ nid 36. [ 186.074838][ T6440] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 186.187521][ T6794] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.324838][ T6440] usb 8-1: Using ep0 maxpacket: 32 [ 186.488536][ T6440] usb 8-1: config 0 has an invalid interface number: 61 but max is 1 [ 186.529025][ T6440] usb 8-1: config 0 has no interface number 1 [ 186.694989][ T6440] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 186.713667][ T6440] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.731908][ T6440] usb 8-1: Product: syz [ 186.742060][ T6440] usb 8-1: Manufacturer: syz [ 186.752179][ T6440] usb 8-1: SerialNumber: syz [ 186.770953][ T6440] usb 8-1: config 0 descriptor?? [ 186.810816][ T4894] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 186.954916][ T6440] viperboard 8-1:0.61: version 0.00 found at bus 008 address 002 [ 187.028800][ T6440] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 187.042584][ T6440] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 187.074949][ T4895] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 187.104978][ T6440] viperboard 8-1:0.0: version 0.00 found at bus 008 address 002 [ 187.114216][ T4895] usb 7-1: USB disconnect, device number 3 [ 187.164971][ T6440] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 187.183872][ T6440] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 187.190415][ T6835] loop4: detected capacity change from 0 to 2048 [ 187.235171][ T4894] usb 4-1: config index 0 descriptor too short (expected 65535, got 34) [ 187.260313][ T4894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.272930][ T6440] usb 8-1: USB disconnect, device number 2 [ 187.312345][ T4894] usb 4-1: config 0 has no interfaces? [ 187.388619][ T6835] EXT4-fs (loop4): failed to initialize system zone (-117) [ 187.404082][ T6835] EXT4-fs (loop4): mount failed [ 187.545007][ T4894] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 187.554161][ T4894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.586579][ T4894] usb 4-1: Product: syz [ 187.590770][ T4894] usb 4-1: Manufacturer: syz [ 187.606716][ T4894] usb 4-1: SerialNumber: syz [ 187.632295][ T4894] usb 4-1: config 0 descriptor?? [ 187.739053][ T6848] loop7: detected capacity change from 0 to 2048 [ 187.827076][ T6848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.207938][ T1108] usb 4-1: USB disconnect, device number 4 [ 188.622554][ T6852] loop4: detected capacity change from 0 to 32768 [ 188.741229][ T6852] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.546 (6852) [ 189.013365][ T6852] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 189.167702][ T6852] BTRFS info (device loop4): using free space tree [ 189.213303][ T6852] BTRFS info (device loop4): has skinny extents [ 190.215558][ T6852] BTRFS info (device loop4): enabling ssd optimizations [ 190.342663][ T6868] loop7: detected capacity change from 0 to 40427 [ 190.389276][ T6917] kernel write not supported for file [eventfd] (pid: 6917 comm: syz.4.546) [ 190.413976][ T6868] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1ffff [ 190.495070][ T6868] F2FS-fs (loop7): invalid crc value [ 191.435344][ T6868] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 191.614268][ T6928] loop5: detected capacity change from 0 to 262144 [ 191.780828][ T6928] F2FS-fs (loop5): Found nat_bits in checkpoint [ 191.819596][ T6928] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 191.916988][ T26] audit: type=1800 audit(1766829452.315:21): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.562" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 193.917292][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.923661][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.232473][ T6979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.762618][ T6981] loop6: detected capacity change from 0 to 32768 [ 195.859706][ T26] audit: type=1800 audit(1766829456.255:22): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.572" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 195.994830][ T4784] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 196.528087][ T7027] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 196.571339][ T7027] CIFS mount error: No usable UNC path provided in device string! [ 196.571339][ T7027] [ 196.582138][ T7027] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 196.764833][ T4784] usb 8-1: Using ep0 maxpacket: 16 [ 196.885000][ T4784] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.903465][ T4784] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.001085][ T7019] loop4: detected capacity change from 0 to 32768 [ 197.052740][ T7019] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.583 (7019) [ 197.104955][ T4784] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.121432][ T4784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.152235][ T4784] usb 8-1: Product: syz [ 197.164809][ T4784] usb 8-1: Manufacturer: syz [ 197.179635][ T4784] usb 8-1: SerialNumber: syz [ 197.209926][ T7019] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 197.242407][ T7019] BTRFS info (device loop4): max_inline at 0 [ 197.283243][ T7019] BTRFS info (device loop4): using free space tree [ 197.313570][ T7019] BTRFS info (device loop4): has skinny extents [ 197.525084][ T4784] usb 8-1: 0:2 : does not exist [ 197.583784][ T7033] loop6: detected capacity change from 0 to 32768 [ 197.609738][ T7033] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.587 (7033) [ 197.665628][ T7019] BTRFS info (device loop4): enabling ssd optimizations [ 197.733351][ T6683] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by udevd (6683) [ 197.805330][ T4784] usb 8-1: 5:0: cannot get min/max values for control 4 (id 5) [ 198.105025][ T4784] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 198.357277][ T4784] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 198.635698][ T4784] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 198.703426][ T4784] usb 8-1: USB disconnect, device number 3 [ 198.871961][ T7115] loop6: detected capacity change from 0 to 512 [ 199.132692][ T7115] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 199.175027][ T7115] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 199.208208][ T26] audit: type=1326 audit(1766829459.605:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 199.234890][ T7115] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.602: Failed to acquire dquot type 1 [ 199.315400][ T26] audit: type=1326 audit(1766829459.605:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 199.374932][ T7115] EXT4-fs (loop6): 1 truncate cleaned up [ 199.405721][ T7115] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.464929][ T7086] loop7: detected capacity change from 0 to 32768 [ 199.485113][ T7115] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.588576][ T688] read_mapping_page failed! [ 199.600460][ T26] audit: type=1326 audit(1766829459.615:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6d5ccfae97 code=0x7ffc0000 [ 199.659556][ T688] ERROR: (device loop7): txCommit: [ 199.659556][ T688] [ 199.749049][ T688] jfs_write_inode: jfs_commit_inode failed! [ 199.750403][ T7132] read_mapping_page failed! [ 199.792371][ T7132] ERROR: (device loop7): txCommit: [ 199.792371][ T7132] [ 199.817585][ T26] audit: type=1326 audit(1766829459.615:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 199.990356][ T26] audit: type=1326 audit(1766829459.625:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 200.065277][ T7137] loop6: detected capacity change from 0 to 16 [ 200.149574][ T7137] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 200.209017][ T26] audit: type=1326 audit(1766829459.625:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 201.014409][ T7149] netlink: 64 bytes leftover after parsing attributes in process `syz.5.609'. [ 203.114912][ T26] audit: type=1326 audit(1766829459.625:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 203.201577][ T7160] netlink: 128 bytes leftover after parsing attributes in process `syz.4.613'. [ 203.300221][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 203.341442][ T26] audit: type=1326 audit(1766829459.625:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 204.247991][ T7172] loop4: detected capacity change from 0 to 2048 [ 204.341727][ T7177] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.414898][ T4889] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 204.448831][ T7181] 9pnet_virtio: no channels available for device syz [ 205.405019][ T4889] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 205.428538][ T4889] usb 8-1: config 0 interface 0 has no altsetting 0 [ 205.614682][ T7156] loop5: detected capacity change from 0 to 32768 [ 205.650080][ T4889] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 205.670892][ T4889] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 205.769792][ T4889] usb 8-1: Product: syz [ 205.805370][ T4889] usb 8-1: Manufacturer: syz [ 205.810089][ T4889] usb 8-1: SerialNumber: syz [ 205.942197][ T4889] usb 8-1: config 0 descriptor?? [ 206.030097][ T7211] block device autoloading is deprecated and will be removed. [ 206.247313][ T4889] usb 8-1: selecting invalid altsetting 0 [ 206.399748][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 206.399802][ T26] audit: type=1326 audit(1766829466.775:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7169 comm="syz.7.615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f229de58749 code=0x0 [ 206.759772][ T4889] usb 8-1: USB disconnect, device number 4 [ 206.791058][ T7192] loop6: detected capacity change from 0 to 40427 [ 206.809276][ T7192] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 206.824917][ T7192] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 206.864921][ T7192] F2FS-fs (loop6): invalid crc value [ 206.900362][ T7192] F2FS-fs (loop6): Found nat_bits in checkpoint [ 206.950456][ T7156] XFS (loop5): Mounting V5 Filesystem [ 207.015468][ T7156] XFS (loop5): log mount failed [ 207.079145][ T7192] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 207.104916][ T7192] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 207.779498][ T7227] handle_bad_sector: 237 callbacks suppressed [ 207.779518][ T7227] attempt to access beyond end of device [ 207.779518][ T7227] loop6: rw=2049, want=77960, limit=40427 [ 208.198558][ T7241] loop4: detected capacity change from 0 to 256 [ 208.773253][ T7264] loop5: detected capacity change from 0 to 256 [ 209.373230][ T4548] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 211.645171][ T4548] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.676064][ T4548] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.234995][ T4548] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.244084][ T4548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.315105][ T4548] usb 5-1: can't set config #1, error -71 [ 213.432527][ T4548] usb 5-1: USB disconnect, device number 5 [ 214.059234][ T7327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.646'. [ 214.143489][ T7305] loop6: detected capacity change from 0 to 32768 [ 214.187357][ T6682] block nbd64: NBD_DISCONNECT [ 214.257562][ T688] read_mapping_page failed! [ 214.262103][ T688] ERROR: (device loop6): txCommit: [ 214.262103][ T688] [ 214.299378][ T688] jfs_write_inode: jfs_commit_inode failed! [ 214.311565][ T7334] read_mapping_page failed! [ 214.354242][ T7334] ERROR: (device loop6): txCommit: [ 214.354242][ T7334] [ 214.667978][ T6682] udevd[6682]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 216.227433][ T7372] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 216.629361][ T7380] loop5: detected capacity change from 0 to 256 [ 218.865206][ T7395] loop7: detected capacity change from 0 to 40427 [ 219.160219][ T7395] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1ffff [ 219.178930][ T7395] F2FS-fs (loop7): invalid crc value [ 219.415398][ T7395] F2FS-fs (loop7): Found nat_bits in checkpoint [ 219.532249][ T7395] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 220.914616][ T7416] netlink: 'syz.5.675': attribute type 10 has an invalid length. [ 222.364983][ T4894] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 222.884984][ T4894] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 222.934014][ T4894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.982675][ T4894] usb 5-1: Product: syz [ 223.017462][ T4894] usb 5-1: Manufacturer: syz [ 223.022086][ T4894] usb 5-1: SerialNumber: syz [ 223.057817][ T7448] dlm: no local IP address has been set [ 223.063995][ T7448] dlm: cannot start dlm midcomms -107 [ 223.074922][ T7442] loop7: detected capacity change from 0 to 8192 [ 223.107711][ T4894] usb 5-1: config 0 descriptor?? [ 223.344392][ T7442] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 223.502374][ T7442] REISERFS (device loop7): using ordered data mode [ 223.700065][ T7442] reiserfs: using flush barriers [ 223.813389][ T7442] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 223.834923][ T7442] REISERFS (device loop7): checking transaction log (loop7) [ 223.861173][ T7442] REISERFS (device loop7): Using r5 hash to sort names [ 223.874963][ T4894] usb 5-1: USB disconnect, device number 6 [ 223.876444][ T7442] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 223.960383][ T7442] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2 [ 224.034060][ T7442] REISERFS error (device loop7): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 224.494617][ T7442] REISERFS (device loop7): Remounting filesystem read-only [ 224.544403][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.677492][ T7468] affs: No valid root block on device nullb0 [ 225.075017][ T4259] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 225.125022][ T4548] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 225.246020][ T7499] netlink: 16 bytes leftover after parsing attributes in process `syz.7.696'. [ 225.255456][ T7499] netlink: 28 bytes leftover after parsing attributes in process `syz.7.696'. [ 225.485091][ T4259] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.496366][ T4259] usb 7-1: config 0 has no interface number 0 [ 225.505169][ T4548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.522491][ T4548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.537574][ T4548] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.00 [ 225.553106][ T4548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.584855][ T4548] usb 4-1: config 0 descriptor?? [ 225.639088][ T4548] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 225.652450][ T7497] loop4: detected capacity change from 0 to 40427 [ 225.679458][ T7497] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 225.697692][ T7497] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2 [ 225.710745][ T7497] F2FS-fs (loop4): invalid crc value [ 225.720751][ T7497] F2FS-fs (loop4): Found nat_bits in checkpoint [ 225.734949][ T4259] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 225.751400][ T4259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.773209][ T4259] usb 7-1: Product: syz [ 225.787038][ T4259] usb 7-1: Manufacturer: syz [ 225.801519][ T4259] usb 7-1: SerialNumber: syz [ 225.803712][ T7497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.817077][ T4259] usb 7-1: config 0 descriptor?? [ 225.865050][ T3546] bcm5974 4-1:0.0: could not read from device [ 225.881538][ T4184] attempt to access beyond end of device [ 225.881538][ T4184] loop4: rw=2049, want=45104, limit=40427 [ 225.905040][ T3546] bcm5974 4-1:0.0: could not read from device [ 225.939719][ T3546] bcm5974 4-1:0.0: could not read from device [ 225.980151][ T3546] bcm5974 4-1:0.0: could not read from device [ 226.004604][ T4548] usb 4-1: USB disconnect, device number 5 [ 226.210894][ T4259] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 226.251475][ T4259] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 226.262339][ T4259] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 226.271763][ T4259] usb 7-1: media controller created [ 226.529201][ T4259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.736506][ T7533] netlink: 25 bytes leftover after parsing attributes in process `syz.3.700'. [ 226.789251][ T6683] udevd[6683]: Error opening device "/dev/input/event4": No such file or directory [ 226.800876][ T4259] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 226.820936][ T4894] Bluetooth: hci2: command 0x0406 tx timeout [ 226.839911][ T6683] udevd[6683]: Unable to EVIOCGABS device "/dev/input/event4" [ 226.847955][ T6683] udevd[6683]: Unable to EVIOCGABS device "/dev/input/event4" [ 226.855720][ T6683] udevd[6683]: Unable to EVIOCGABS device "/dev/input/event4" [ 226.863521][ T6683] udevd[6683]: Unable to EVIOCGABS device "/dev/input/event4" [ 227.042428][ T4259] usb 7-1: USB disconnect, device number 4 [ 227.105044][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.705'. [ 227.123726][ T7555] loop7: detected capacity change from 0 to 512 [ 227.147430][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 227.240097][ T7555] EXT4-fs (loop7): Test dummy encryption mode enabled [ 227.273576][ T7555] EXT4-fs (loop7): Ignoring removed oldalloc option [ 227.321219][ T7555] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 227.400155][ T7555] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.706: bad orphan inode 131083 [ 227.509373][ T7555] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,nojournal_checksum,usrquota,,errors=continue. Quota mode: writeback. [ 229.464606][ T7555] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 229.769795][ T7577] loop4: detected capacity change from 0 to 40427 [ 229.826820][ T7577] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 229.847107][ T7577] F2FS-fs (loop4): invalid crc value [ 229.987336][ T7601] loop5: detected capacity change from 0 to 128 [ 230.056641][ T7577] F2FS-fs (loop4): Found nat_bits in checkpoint [ 230.172772][ T7577] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.924959][ T7610] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 230.932123][ T7610] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 230.938886][ T7610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 230.946404][ T7610] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 230.953695][ T7610] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 230.960628][ T7610] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 230.968745][ T7610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 230.975459][ T7610] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 230.982194][ T7610] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 230.989014][ T7610] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 230.995804][ T7610] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 231.002482][ T7610] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 231.009406][ T7610] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 231.017454][ T7610] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 231.025486][ T7610] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 231.032287][ T7610] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 231.040430][ T7610] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 231.048492][ T7610] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 231.055314][ T7610] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 231.062063][ T7610] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 231.068942][ T7610] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 231.076272][ T7610] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 232.565780][ T7601] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.625003][ T7601] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.647004][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.6.718'. [ 232.715216][ T7601] EXT4-fs error (device loop5): ext4_validate_block_bitmap:420: comm syz.5.714: bg 0: bad block bitmap checksum [ 233.930882][ T7647] loop5: detected capacity change from 0 to 256 [ 233.957035][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.6.723'. [ 234.032363][ T7647] exfat: Unknown parameter 'namecasfï1' [ 235.692766][ T26] audit: type=1326 audit(1766829496.085:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 236.593945][ T7673] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.627811][ T26] audit: type=1326 audit(1766829496.955:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 236.754928][ T26] audit: type=1326 audit(1766829496.955:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 236.848047][ T26] audit: type=1326 audit(1766829496.955:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 236.975033][ T26] audit: type=1326 audit(1766829496.955:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 237.031539][ T7686] loop4: detected capacity change from 0 to 65 [ 237.044923][ T26] audit: type=1326 audit(1766829496.955:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 237.163323][ T7686] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 237.183227][ T26] audit: type=1326 audit(1766829496.955:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 237.226097][ T7686] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 237.250674][ T7694] netlink: 14 bytes leftover after parsing attributes in process `syz.5.735'. [ 237.269763][ T26] audit: type=1326 audit(1766829496.955:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 237.387538][ T7698] loop7: detected capacity change from 0 to 512 [ 237.423482][ T26] audit: type=1326 audit(1766829496.955:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 237.531093][ T26] audit: type=1326 audit(1766829496.955:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.5.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a2472749 code=0x7ffc0000 [ 237.682726][ T7698] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.737: inode #1: comm syz.7.737: iget: illegal inode # [ 237.726896][ T7698] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.737: error while reading EA inode 1 err=-117 [ 237.778087][ T7698] EXT4-fs (loop7): 1 orphan inode deleted [ 237.790974][ T7698] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.886673][ T7698] EXT4-fs (loop7): shut down requested (2) [ 237.951322][ T7665] loop6: detected capacity change from 0 to 32768 [ 238.308064][ T7665] XFS (loop6): Mounting V5 Filesystem [ 239.138463][ T7665] XFS (loop6): log mount failed [ 241.237846][ T7737] loop5: detected capacity change from 0 to 32768 [ 241.513975][ T7751] loop7: detected capacity change from 0 to 512 [ 241.545808][ T7737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.750 (7737) [ 241.608272][ T7737] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 241.635158][ T7751] EXT4-fs (loop7): Test dummy encryption mode enabled [ 241.641960][ T7751] EXT4-fs (loop7): Ignoring removed oldalloc option [ 241.678874][ T7737] BTRFS info (device loop5): using free space tree [ 241.705465][ T7751] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 241.784964][ T7737] BTRFS info (device loop5): has skinny extents [ 241.832924][ T7751] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.753: bad orphan inode 131083 [ 241.864825][ T7751] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,nojournal_checksum,usrquota,,errors=continue. Quota mode: writeback. [ 242.074963][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 243.915292][ T7737] BTRFS error (device loop5): open_ctree failed: -12 [ 244.580070][ T7813] loop7: detected capacity change from 0 to 512 [ 244.734939][ T7813] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 244.804840][ T7817] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 244.818492][ T7817] Error parsing options; rc = [-22] [ 245.644672][ T7819] loop5: detected capacity change from 0 to 4096 [ 246.822626][ T7813] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 246.917705][ T7820] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.934368][ T7819] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 246.950908][ T7819] NILFS (loop5): mounting fs with errors [ 246.977700][ T7813] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 247.124075][ T7813] System zones: 0-1, 15-15, 18-18, 34-34 [ 247.253930][ T7813] EXT4-fs (loop7): orphan cleanup on readonly fs [ 247.316647][ T7813] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #16: comm syz.7.771: inode has both inline data and extents flags [ 247.417766][ T7813] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.771: couldn't read orphan inode 16 (err -117) [ 247.477167][ T7813] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 247.763305][ T7834] loop5: detected capacity change from 0 to 64 [ 247.981482][ T7840] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 248.822872][ T7846] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 248.842064][ T7846] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 249.175734][ T7851] loop6: detected capacity change from 0 to 32768 [ 249.947990][ T7851] XFS (loop6): Mounting V5 Filesystem [ 250.051946][ T7851] XFS (loop6): Ending clean mount [ 250.147818][ T7851] XFS (loop6): Quotacheck needed: Please wait. [ 250.218484][ T4548] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 250.242159][ T4543] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 250.262472][ T4548] XFS (loop6): Unmount and run xfs_repair [ 250.284832][ T4548] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 250.292324][ T4548] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 250.321304][ T4548] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 250.357286][ T4548] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 250.382163][ T4548] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 250.416670][ T4548] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 250.432255][ T4548] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 250.443592][ T4548] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 250.473540][ T4548] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 250.505579][ T4297] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x1b9/0x350" at daddr 0x3 len 1 error 74 [ 250.534957][ T4543] usb 6-1: Using ep0 maxpacket: 32 [ 250.610939][ T7851] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 250.675173][ T4543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.745010][ T4543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.870381][ T4543] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 250.893673][ T7851] XFS (loop6): User initiated shutdown received. [ 250.974711][ T4543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.028707][ T7851] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 251.187465][ T4543] usb 6-1: config 0 descriptor?? [ 251.240183][ T7851] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 251.436069][ T5374] XFS (loop6): Unmounting Filesystem [ 251.503486][ T7909] netlink: 224 bytes leftover after parsing attributes in process `syz.3.803'. [ 251.513009][ T7909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.803'. [ 252.788486][ T4543] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 252.809669][ T4543] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 252.824629][ T7904] device wlan0 entered promiscuous mode [ 252.835959][ T4543] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 252.852982][ T4543] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 252.894467][ T4543] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 252.908354][ T4543] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 253.037946][ T4259] usb 6-1: USB disconnect, device number 2 [ 253.204319][ T7917] fido_id[7917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 253.623798][ T7921] loop7: detected capacity change from 0 to 16384 [ 253.662590][ T7927] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 253.983168][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 253.983181][ T26] audit: type=1326 audit(1766829514.375:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.6.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4661b2e749 code=0x7ffc0000 [ 254.083494][ T26] audit: type=1326 audit(1766829514.415:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.6.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4661b2e749 code=0x7ffc0000 [ 254.137264][ T26] audit: type=1326 audit(1766829514.415:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.6.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4661b2e749 code=0x7ffc0000 [ 254.301311][ T26] audit: type=1326 audit(1766829514.415:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.6.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4661b2e749 code=0x7ffc0000 [ 254.768030][ T7919] loop4: detected capacity change from 0 to 262144 [ 254.784799][ T26] audit: type=1326 audit(1766829514.415:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.6.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4661b2e749 code=0x7ffc0000 [ 254.829900][ T7919] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.806 (7919) [ 254.835078][ T7928] loop_set_status: loop7 () has still dirty pages (nrpages=544) [ 254.895288][ T7919] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 254.905146][ T7919] BTRFS info (device loop4): enabling ssd optimizations [ 254.912391][ T7919] BTRFS info (device loop4): disabling tree log [ 254.918727][ T7919] BTRFS info (device loop4): turning on flush-on-commit [ 254.927001][ T7919] BTRFS info (device loop4): using free space tree [ 254.933533][ T7919] BTRFS info (device loop4): has skinny extents [ 254.939832][ T7919] BTRFS info (device loop4): flagging fs with big metadata feature [ 255.298077][ T7939] loop6: detected capacity change from 0 to 32768 [ 255.362781][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.369927][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.388013][ T7939] (syz.6.812,7939,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 255.449135][ T7939] (syz.6.812,7939,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 255.570567][ T7939] (syz.6.812,7939,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0x44d2ffae. Applying ECC. [ 255.671054][ T6683] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 10 /dev/loop4 scanned by udevd (6683) [ 255.727819][ T7939] (syz.6.812,7939,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x6e07a1db [ 255.803176][ T7939] (syz.6.812,7939,0):ocfs2_validate_inode_block:1379 ERROR: Checksum failed for dinode 25 [ 255.815804][ T7973] loop5: detected capacity change from 0 to 4096 [ 255.872360][ T7939] (syz.6.812,7939,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 255.925969][ T7939] (syz.6.812,7939,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 255.951978][ T7973] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 255.965336][ T7939] (syz.6.812,7939,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 256.034927][ T7939] (syz.6.812,7939,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 256.034961][ T7939] (syz.6.812,7939,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 256.141325][ T7939] (syz.6.812,7939,0):ocfs2_initialize_super:2281 ERROR: status = -22 [ 256.192034][ T7939] (syz.6.812,7939,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 256.588775][ T7986] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.690218][ T7996] loop6: detected capacity change from 0 to 256 [ 256.701182][ T7996] exfat: Deprecated parameter 'utf8' [ 256.706855][ T7996] exfat: Bad value for 'allow_utime' [ 257.382408][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.436694][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 257.455242][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 257.463786][ T8002] loop5: detected capacity change from 0 to 64 [ 257.481422][ T7994] device bridge_slave_0 left promiscuous mode [ 257.519093][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.602870][ T7994] device bridge_slave_1 left promiscuous mode [ 257.650653][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.675686][ T7994] bond0: (slave bond_slave_0): Releasing backup interface [ 257.794036][ T7994] bond0: (slave bond_slave_1): Releasing backup interface [ 257.872191][ T8017] loop6: detected capacity change from 0 to 64 [ 257.988599][ T7994] team0: Port device team_slave_0 removed [ 258.029183][ T7994] team0: Port device team_slave_1 removed [ 258.052370][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.071200][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.096349][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.103860][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.254402][ T7986] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.400413][ T7986] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.501456][ T7986] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.907372][ T7986] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.969931][ T8027] loop5: detected capacity change from 0 to 32768 [ 259.009245][ T8027] XFS: noikeep mount option is deprecated. [ 259.112666][ T7986] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.134583][ T7986] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.193737][ T7986] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.512997][ T146] Bluetooth: hci3: link tx timeout [ 259.519197][ T146] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.543043][ T8027] XFS (loop5): Mounting V5 Filesystem [ 259.838189][ T8027] XFS (loop5): Ending clean mount [ 259.890362][ T8027] XFS (loop5): Quotacheck needed: Please wait. [ 260.587858][ T8027] XFS (loop5): Quotacheck: Done. [ 260.985696][ T4401] XFS (loop5): Unmounting Filesystem [ 261.000425][ T8070] loop6: detected capacity change from 0 to 2048 [ 261.226561][ T8070] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.291865][ T8073] syz.4.856 (8073): /proc/8071/oom_adj is deprecated, please use /proc/8071/oom_score_adj instead. [ 261.605054][ T4540] Bluetooth: hci3: command 0x0406 tx timeout [ 261.867319][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.6.854'. [ 264.550679][ T8096] netlink: 36 bytes leftover after parsing attributes in process `syz.6.864'. [ 267.275018][ T5841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 267.548919][ T8128] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 267.564943][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 267.717289][ T5841] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.761726][ T5841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.772269][ T5841] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 267.783032][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.797292][ T5841] usb 6-1: config 0 descriptor?? [ 267.954877][ T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 268.897937][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.908582][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.055031][ T7] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 269.066206][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 269.095946][ T7] usb 7-1: SerialNumber: syz [ 269.145009][ T5841] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf3 found [ 269.152768][ T5841] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf4 found [ 269.242200][ T8154] loop4: detected capacity change from 0 to 64 [ 269.286155][ T5841] usb 6-1: USB disconnect, device number 3 [ 269.377294][ T7] usb 7-1: 0:2 : does not exist [ 269.457079][ T7] usb 7-1: USB disconnect, device number 5 [ 269.521040][ T6684] udevd[6684]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.081285][ T8173] loop6: detected capacity change from 0 to 1024 [ 270.275879][ T3090] hfsplus: b-tree write err: -5, ino 4 [ 270.553100][ T26] audit: type=1326 audit(1766829530.945:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f229de4f5e7 code=0x7ffc0000 [ 270.644819][ T26] audit: type=1326 audit(1766829530.945:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f229ddf4829 code=0x7ffc0000 [ 270.772393][ T26] audit: type=1326 audit(1766829530.945:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f229de4f5e7 code=0x7ffc0000 [ 270.947623][ T26] audit: type=1326 audit(1766829530.945:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f229ddf4829 code=0x7ffc0000 [ 271.188069][ T26] audit: type=1326 audit(1766829530.945:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229de58749 code=0x7ffc0000 [ 271.254474][ T8240] loop7: detected capacity change from 0 to 4096 [ 271.295981][ T26] audit: type=1326 audit(1766829530.945:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229de58749 code=0x7ffc0000 [ 271.367122][ T26] audit: type=1326 audit(1766829530.945:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f229de58749 code=0x7ffc0000 [ 271.399793][ T8177] loop5: detected capacity change from 0 to 32768 [ 271.467448][ T26] audit: type=1326 audit(1766829530.945:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f229de58749 code=0x7ffc0000 [ 271.505808][ T8177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.894 (8177) [ 271.547768][ T8240] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.582115][ T8177] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 271.632541][ T8177] BTRFS info (device loop5): use zlib compression, level 3 [ 271.669759][ T8191] loop6: detected capacity change from 0 to 32768 [ 271.689549][ T26] audit: type=1326 audit(1766829530.975:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f229de4f5e7 code=0x7ffc0000 [ 271.706438][ T8177] BTRFS info (device loop5): enabling ssd optimizations [ 271.724114][ T8177] BTRFS info (device loop5): using spread ssd allocation scheme [ 271.735372][ T8177] BTRFS info (device loop5): force clearing of disk cache [ 271.742960][ T8177] BTRFS info (device loop5): turning on async discard [ 271.785916][ T8191] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.900 (8191) [ 271.799933][ T8177] BTRFS info (device loop5): using free space tree [ 271.935342][ T26] audit: type=1326 audit(1766829530.975:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8192 comm="syz.7.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f229ddf4829 code=0x7ffc0000 [ 272.121636][ T8177] BTRFS info (device loop5): has skinny extents [ 272.133137][ T8191] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 272.211645][ T8191] BTRFS info (device loop6): using free space tree [ 272.264841][ T8191] BTRFS info (device loop6): has skinny extents [ 272.450318][ T8177] BTRFS info (device loop5): clearing free space tree [ 272.459979][ T8177] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 272.474900][ T8177] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 272.545219][ T8177] BTRFS info (device loop5): creating free space tree [ 272.554974][ T8191] BTRFS info (device loop6): enabling ssd optimizations [ 272.570107][ T8177] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 272.581653][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 272.611325][ T8177] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 273.198006][ T8306] sg_read: process 216 (syz.7.916) changed security contexts after opening file descriptor, this is not allowed. [ 273.369222][ T8310] comedi comedi0: Minor 7 could not be opened [ 273.418311][ T4295] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 273.471840][ T8299] loop4: detected capacity change from 0 to 32768 [ 273.687312][ T8327] 9pnet: Could not find request transport: xen [ 273.772952][ T8299] XFS (loop4): Mounting V5 Filesystem [ 273.785131][ T4295] usb 4-1: config 0 interface 0 altsetting 243 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.838460][ T4295] usb 4-1: config 0 interface 0 altsetting 243 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.882416][ T4295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.948292][ T4295] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice= 0.00 [ 273.989756][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.024506][ T8299] XFS (loop4): Ending clean mount [ 274.039281][ T4295] usb 4-1: config 0 descriptor?? [ 274.049487][ T8299] XFS (loop4): Quotacheck needed: Please wait. [ 274.093360][ T8299] XFS (loop4): Quotacheck: Done. [ 274.134846][ T6440] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 274.223413][ T4184] XFS (loop4): Unmounting Filesystem [ 274.325043][ T4295] usb 4-1: string descriptor 0 read error: -71 [ 274.353353][ T4295] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 274.366976][ T8339] netlink: 'syz.5.925': attribute type 27 has an invalid length. [ 274.376976][ T8339] netlink: 'syz.5.925': attribute type 4 has an invalid length. [ 274.386139][ T8339] netlink: 144 bytes leftover after parsing attributes in process `syz.5.925'. [ 274.427659][ T6440] usb 7-1: Using ep0 maxpacket: 8 [ 274.438938][ T4295] usb 4-1: USB disconnect, device number 6 [ 274.555000][ T6440] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.458161][ T8346] netlink: 96 bytes leftover after parsing attributes in process `syz.5.928'. [ 275.535156][ T6440] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 275.547900][ T6440] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.566076][ T6440] usb 7-1: Product: syz [ 275.575108][ T6440] usb 7-1: Manufacturer: syz [ 275.586049][ T6440] usb 7-1: SerialNumber: syz [ 275.601972][ T6440] usb 7-1: config 0 descriptor?? [ 275.646378][ T6440] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 275.658451][ T6440] usb 7-1: selecting invalid altsetting 1 [ 275.669984][ T8351] binder: 8350:8351 ioctl c0306201 0 returned -14 [ 275.680842][ T8354] binder_alloc: 8350: pid 8350 spamming oneway? 1 buffers allocated for a total size of 5376 [ 275.948683][ T8360]  [ 276.070476][ T4295] usb 7-1: USB disconnect, device number 6 [ 279.650446][ T8387] kvm [8386]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 279.651209][ T8387] kvm [8386]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 279.667722][ T8387] APIC base relocation is unsupported by KVM [ 280.412556][ T8375] loop7: detected capacity change from 0 to 32768 [ 280.526695][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 280.526711][ T26] audit: type=1800 audit(1766829540.925:117): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.938" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 281.897011][ T8410] loop7: detected capacity change from 0 to 32768 [ 282.213682][ T8410] XFS (loop7): Mounting V5 Filesystem [ 282.862311][ T8410] XFS (loop7): Ending clean mount [ 282.873019][ T8410] XFS (loop7): Quotacheck needed: Please wait. [ 283.080294][ T8410] XFS (loop7): Quotacheck: Done. [ 283.095779][ T26] audit: type=1800 audit(1766829543.495:118): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.951" name="file1" dev="loop7" ino=6150 res=0 errno=0 [ 284.698950][ T6198] XFS (loop7): Unmounting Filesystem [ 285.364444][ T8450] loop7: detected capacity change from 0 to 8 [ 285.874879][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 286.374803][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 286.462850][ T8461] loop7: detected capacity change from 0 to 256 [ 286.495064][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 286.504662][ T8461] exfat: Deprecated parameter 'namecase' [ 286.564916][ T8461] exfat: Unknown parameter 'keep_last_dots' [ 286.695681][ T13] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 286.718342][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.760633][ T13] usb 4-1: Product: syz [ 288.024947][ T13] usb 4-1: Manufacturer: syz [ 288.104206][ T13] usb 4-1: SerialNumber: syz [ 288.129002][ T13] usb 4-1: config 0 descriptor?? [ 288.183711][ T13] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.206333][ T13] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 288.232248][ T8467] loop7: detected capacity change from 0 to 256 [ 288.346768][ T8467] FAT-fs (loop7): Unrecognized mount option "dotx" or missing value [ 288.829968][ T13] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 288.911346][ T8473] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 288.925469][ T8473] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 289.201528][ T8487] loop5: detected capacity change from 0 to 512 [ 289.329985][ T8489] loop4: detected capacity change from 0 to 1024 [ 289.387500][ T8489] EXT4-fs (loop4): Ignoring removed nobh option [ 289.422382][ T8489] EXT4-fs (loop4): Ignoring removed bh option [ 289.439018][ T8489] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.532614][ T8489] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 289.595092][ T13] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 289.635118][ T13] em28xx 4-1:0.0: board has no eeprom [ 289.844981][ T13] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 289.852857][ T13] em28xx 4-1:0.0: dvb set to bulk mode. [ 289.899692][ T4295] em28xx 4-1:0.0: Binding DVB extension [ 289.934934][ T13] usb 4-1: USB disconnect, device number 7 [ 289.941500][ T13] em28xx 4-1:0.0: Disconnecting em28xx [ 290.087152][ T4295] em28xx 4-1:0.0: Registering input extension [ 290.119269][ T13] em28xx 4-1:0.0: Closing input extension [ 290.368199][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.375340][ T8506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.899608][ T8485] loop7: detected capacity change from 0 to 32768 [ 290.958436][ T13] em28xx 4-1:0.0: Freeing device [ 291.215747][ T8485] XFS (loop7): Mounting V5 Filesystem [ 292.618590][ T8485] XFS (loop7): log mount failed [ 293.272232][ T8536] loop4: detected capacity change from 0 to 256 [ 293.478338][ T8536] exfat: Unknown parameter 'keep_last_dots' [ 293.564752][ T8542] xt_connbytes: Forcing CT accounting to be enabled [ 293.588938][ T8542] set match dimension is over the limit! [ 294.033906][ T8544] loop5: detected capacity change from 0 to 2048 [ 294.185987][ T8544] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 294.443773][ T8564] loop7: detected capacity change from 0 to 512 [ 294.533682][ T8564] EXT4-fs (loop7): Ignoring removed bh option [ 294.601300][ T8564] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 294.629603][ T26] audit: type=1326 audit(1766829555.025:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 294.736061][ T8564] EXT4-fs (loop7): 1 truncate cleaned up [ 294.752392][ T26] audit: type=1326 audit(1766829555.025:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 294.755343][ T8564] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 294.786526][ T26] audit: type=1326 audit(1766829555.055:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 294.938119][ T26] audit: type=1326 audit(1766829555.055:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 295.008849][ T26] audit: type=1326 audit(1766829555.055:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 295.094926][ T26] audit: type=1326 audit(1766829555.055:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 295.139203][ T26] audit: type=1326 audit(1766829555.065:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 295.168820][ T26] audit: type=1326 audit(1766829555.065:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 295.254672][ T26] audit: type=1326 audit(1766829555.065:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 295.339871][ T26] audit: type=1326 audit(1766829555.725:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.3.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5ccfc749 code=0x7ffc0000 [ 295.415074][ T8572] loop6: detected capacity change from 0 to 8192 [ 295.559898][ T8572] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 295.725541][ T8572] REISERFS (device loop6): using ordered data mode [ 295.762249][ T8572] reiserfs: using flush barriers [ 295.784812][ T8572] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 295.906375][ T8572] REISERFS (device loop6): checking transaction log (loop6) [ 296.085357][ T8577] loop4: detected capacity change from 0 to 32768 [ 296.176804][ T8577] JBD2: unrecognised superblock format ID [ 296.194159][ T8577] (syz.4.1008,8577,1):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 296.268593][ T8577] (syz.4.1008,8577,1):ocfs2_check_volume:2424 ERROR: status = -22 [ 296.318354][ T8577] (syz.4.1008,8577,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 296.326440][ T8577] (syz.4.1008,8577,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 296.375772][ T8577] (syz.4.1008,8577,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 296.388562][ T8572] REISERFS (device loop6): Using tea hash to sort names [ 296.404889][ T4541] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 296.424365][ T8572] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 296.621252][ T8572] [ 296.623615][ T8572] ====================================================== [ 296.630643][ T8572] WARNING: possible circular locking dependency detected [ 296.637677][ T8572] syzkaller #0 Not tainted [ 296.642098][ T8572] ------------------------------------------------------ [ 296.649134][ T8572] syz.6.1003/8572 is trying to acquire lock: [ 296.655127][ T8572] ffff88805f2b3140 (&type->i_mutex_dir_key#10/3){+.+.}-{3:3}, at: open_xa_dir+0x11d/0x6b0 [ 296.665083][ T8572] [ 296.665083][ T8572] but task is already holding lock: [ 296.672455][ T8572] ffff8880739a7090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 296.682046][ T8572] [ 296.682046][ T8572] which lock already depends on the new lock. [ 296.682046][ T8572] [ 296.692674][ T8572] [ 296.692674][ T8572] the existing dependency chain (in reverse order) is: [ 296.701706][ T8572] [ 296.701706][ T8572] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 296.708937][ T8572] __mutex_lock_common+0x1eb/0x2390 [ 296.714679][ T8572] mutex_lock_nested+0x17/0x20 [ 296.719982][ T8572] reiserfs_write_lock+0x75/0xd0 [ 296.725460][ T8572] reiserfs_mkdir+0x30c/0x970 [ 296.730680][ T8572] open_xa_dir+0x318/0x6b0 [ 296.735630][ T8572] xattr_lookup+0x22/0x2a0 [ 296.740593][ T8572] reiserfs_xattr_set_handle+0xf4/0xf20 [ 296.746699][ T8572] reiserfs_xattr_set+0x435/0x550 [ 296.752283][ T8572] __vfs_setxattr+0x3e0/0x420 [ 296.757500][ T8572] __vfs_setxattr_noperm+0x129/0x5e0 [ 296.763323][ T8572] vfs_setxattr+0x168/0x2f0 [ 296.768374][ T8572] ovl_get_workdir+0x948/0x11a0 [ 296.773770][ T8572] ovl_fill_super+0x1925/0x2ae0 [ 296.775161][ T4541] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 296.779172][ T8572] mount_nodev+0x52/0xe0 [ 296.792942][ T8572] legacy_get_tree+0xe6/0x180 [ 296.798161][ T8572] vfs_get_tree+0x88/0x270 [ 296.798694][ T4541] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.803130][ T8572] do_new_mount+0x24a/0xa40 [ 296.803152][ T8572] __se_sys_mount+0x2d6/0x3c0 [ 296.821337][ T8572] do_syscall_64+0x4c/0xa0 [ 296.826294][ T8572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.832738][ T8572] [ 296.832738][ T8572] -> #0 (&type->i_mutex_dir_key#10/3){+.+.}-{3:3}: [ 296.841462][ T8572] __lock_acquire+0x2c33/0x7c60 [ 296.846855][ T8572] lock_acquire+0x197/0x3f0 [ 296.851904][ T8572] down_write_nested+0x3b/0x60 [ 296.856900][ T4541] usb 8-1: config 0 descriptor?? [ 296.857198][ T8572] open_xa_dir+0x11d/0x6b0 [ 296.867095][ T8572] reiserfs_for_each_xattr+0x174/0x7b0 [ 296.873105][ T8572] reiserfs_delete_xattrs+0x1c/0x80 [ 296.878841][ T8572] reiserfs_evict_inode+0x22e/0x490 [ 296.884581][ T8572] evict+0x485/0x870 [ 296.889256][ T8572] reiserfs_create+0x336/0x680 [ 296.894564][ T8572] vfs_create+0x2db/0x460 [ 296.899446][ T8572] do_mknodat+0x39d/0x620 [ 296.904324][ T8572] __x64_sys_mknodat+0xa5/0xc0 [ 296.909637][ T8572] do_syscall_64+0x4c/0xa0 [ 296.914604][ T8572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.921040][ T8572] [ 296.921040][ T8572] other info that might help us debug this: [ 296.921040][ T8572] [ 296.929497][ T4541] usb 8-1: selecting invalid altsetting 3 [ 296.931271][ T8572] Possible unsafe locking scenario: [ 296.931271][ T8572] [ 296.931278][ T8572] CPU0 CPU1 [ 296.949801][ T8572] ---- ---- [ 296.955171][ T8572] lock(&sbi->lock); [ 296.957864][ T4541] comedi comedi5: could not set alternate setting 3 in high speed [ 296.959162][ T8572] lock(&type->i_mutex_dir_key#10/3); [ 296.974946][ T8572] lock(&sbi->lock); [ 296.976779][ T4541] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 296.981460][ T8572] lock(&type->i_mutex_dir_key#10/3); [ 296.981489][ T8572] [ 296.981489][ T8572] *** DEADLOCK *** [ 296.981489][ T8572] [ 296.981495][ T8572] 3 locks held by syz.6.1003/8572: [ 296.995784][ T4541] usbduxsigma: probe of 8-1:0.0 failed with error -22 [ 297.003839][ T8572] #0: ffff8881473d6460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 297.024932][ T8572] #1: ffff88805f2b2aa0 (&type->i_mutex_dir_key#10/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 297.035667][ T8572] #2: ffff8880739a7090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 297.045702][ T8572] [ 297.045702][ T8572] stack backtrace: [ 297.051598][ T8572] CPU: 0 PID: 8572 Comm: syz.6.1003 Not tainted syzkaller #0 [ 297.058977][ T8572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 297.069046][ T8572] Call Trace: [ 297.072334][ T8572] [ 297.075277][ T8572] dump_stack_lvl+0x168/0x230 [ 297.079973][ T8572] ? load_image+0x3b0/0x3b0 [ 297.084496][ T8572] ? show_regs_print_info+0x20/0x20 [ 297.089727][ T8572] ? print_circular_bug+0x12b/0x1a0 [ 297.094940][ T8572] check_noncircular+0x274/0x310 [ 297.099891][ T8572] ? add_chain_block+0x940/0x940 [ 297.104837][ T8572] ? lockdep_lock+0xdc/0x1e0 [ 297.109445][ T8572] ? reiserfs_write_lock_nested+0x5c/0xd0 [ 297.115173][ T8572] ? __mutex_lock_common+0x431/0x2390 [ 297.120565][ T8572] ? mark_lock+0x94/0x320 [ 297.124917][ T8572] ? _find_first_zero_bit+0xce/0xf0 [ 297.130259][ T8572] __lock_acquire+0x2c33/0x7c60 [ 297.135143][ T8572] ? _raw_spin_unlock+0x24/0x40 [ 297.140021][ T8572] ? mark_lock+0x94/0x320 [ 297.144390][ T8572] ? __lock_acquire+0x13ad/0x7c60 [ 297.149446][ T8572] ? verify_lock_unused+0x140/0x140 [ 297.154677][ T8572] ? hlock_conflict+0x59/0x1f0 [ 297.159480][ T8572] lock_acquire+0x197/0x3f0 [ 297.164018][ T8572] ? open_xa_dir+0x11d/0x6b0 [ 297.168638][ T8572] ? __might_sleep+0xf0/0xf0 [ 297.173239][ T8572] ? lockdep_lock+0xdc/0x1e0 [ 297.177841][ T8572] ? read_lock_is_recursive+0x10/0x10 [ 297.183230][ T8572] ? mark_lock+0x94/0x320 [ 297.187574][ T8572] down_write_nested+0x3b/0x60 [ 297.192349][ T8572] ? open_xa_dir+0x11d/0x6b0 [ 297.196965][ T8572] open_xa_dir+0x11d/0x6b0 [ 297.201399][ T8572] ? listxattr_filler+0x410/0x410 [ 297.206462][ T8572] ? truncate_inode_pages_range+0x353/0xef0 [ 297.212378][ T8572] reiserfs_for_each_xattr+0x174/0x7b0 [ 297.217846][ T8572] ? invalidate_inode_page+0x360/0x360 [ 297.223309][ T8572] ? reiserfs_for_each_xattr+0x7b0/0x7b0 [ 297.228953][ T8572] ? reiserfs_delete_xattrs+0x80/0x80 [ 297.234339][ T8572] ? reiserfs_xattr_init+0x720/0x720 [ 297.239658][ T8572] ? dquot_initialize+0x20/0x20 [ 297.244524][ T8572] ? __rwlock_init+0x140/0x140 [ 297.249317][ T8572] reiserfs_delete_xattrs+0x1c/0x80 [ 297.254536][ T8572] reiserfs_evict_inode+0x22e/0x490 [ 297.259767][ T8572] ? entry_points_to_object+0x7d0/0x7d0 [ 297.265331][ T8572] ? do_raw_spin_lock+0x11d/0x280 [ 297.270370][ T8572] ? do_raw_spin_unlock+0x11d/0x230 [ 297.275580][ T8572] ? entry_points_to_object+0x7d0/0x7d0 [ 297.281155][ T8572] evict+0x485/0x870 [ 297.285066][ T8572] ? __lock_acquire+0x7c60/0x7c60 [ 297.286049][ T4541] usb 8-1: USB disconnect, device number 5 [ 297.290109][ T8572] ? proc_nr_inodes+0x320/0x320 [ 297.300777][ T8572] ? do_raw_spin_unlock+0x11d/0x230 [ 297.306008][ T8572] ? _raw_spin_unlock+0x24/0x40 [ 297.310877][ T8572] ? iput+0x706/0x8a0 [ 297.314881][ T8572] reiserfs_create+0x336/0x680 [ 297.319669][ T8572] ? reiserfs_lookup+0x420/0x420 [ 297.324651][ T8572] ? from_kgid+0x159/0x680 [ 297.329102][ T8572] ? apparmor_path_mknod+0x1ad/0x220 [ 297.334417][ T8572] ? open_xa_dir+0x6b0/0x6b0 [ 297.339022][ T8572] ? inode_permission+0xef/0x480 [ 297.343995][ T8572] ? bpf_lsm_inode_create+0x5/0x10 [ 297.349137][ T8572] ? security_inode_create+0xb3/0x100 [ 297.354526][ T8572] vfs_create+0x2db/0x460 [ 297.358876][ T8572] do_mknodat+0x39d/0x620 [ 297.363224][ T8572] ? __phys_addr_symbol+0x2b/0x70 [ 297.368279][ T8572] ? may_open+0x400/0x400 [ 297.372631][ T8572] ? getname_flags+0x1fe/0x500 [ 297.377409][ T8572] __x64_sys_mknodat+0xa5/0xc0 [ 297.382196][ T8572] do_syscall_64+0x4c/0xa0 [ 297.386630][ T8572] ? clear_bhb_loop+0x30/0x80 [ 297.391320][ T8572] ? clear_bhb_loop+0x30/0x80 [ 297.396057][ T8572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.401969][ T8572] RIP: 0033:0x7f4661b2e749 [ 297.406388][ T8572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.426018][ T8572] RSP: 002b:00007f465fd95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 297.434463][ T8572] RAX: ffffffffffffffda RBX: 00007f4661d84fa0 RCX: 00007f4661b2e749 [ 297.442454][ T8572] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 297.450451][ T8572] RBP: 00007f4661bb2f91 R08: 0000000000000000 R09: 0000000000000000 [ 297.458438][ T8572] R10: 000000000000070d R11: 0000000000000246 R12: 0000000000000000 [ 297.466425][ T8572] R13: 00007f4661d85038 R14: 00007f4661d84fa0 R15: 00007ffdfa0fae78 [ 297.474422][ T8572]