last executing test programs: 13.328157408s ago: executing program 1 (id=535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000500000008000b400000000054000480500001800800010066776400440002800800014000000011080001400000000b0800014000000010080001400000001308000340000000020800014020000017080002400000001008000340000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x2}, 0x0) 12.483661609s ago: executing program 1 (id=539): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="bf3e00000300000081"]) 11.784031798s ago: executing program 1 (id=543): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000280)="f9", 0x1, 0x20000040, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4fa2, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9, 0x10000}, &(0x7f00000010c0)=0x18) ioctl$NILFS_IOCTL_GET_CPINFO(0xffffffffffffffff, 0x80186e82, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1003, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) 10.775167463s ago: executing program 3 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b80)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 10.071749761s ago: executing program 3 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 9.633704023s ago: executing program 3 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace(0x4208, r0) getpid() getrlimit(0xb, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$setperm(0x5, 0x0, 0x100000) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) msgget(0x2, 0x217) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000780)=ANY=[], 0x8, 0x800) 7.861391878s ago: executing program 1 (id=551): io_setup(0x3ff, &(0x7f0000000500)=0x0) io_cancel(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0) 6.532393982s ago: executing program 3 (id=553): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x2f, 0x1, 0x0, "a6892d080000003a6a7cfb56ff2e7f37c17a5ac1f393f65946a68dd1f8822c88", 0x30314742}) 5.235722105s ago: executing program 2 (id=558): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r0, 0xfffffffffffffffc, 0x3) 5.118149298s ago: executing program 2 (id=559): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 5.031964941s ago: executing program 0 (id=560): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x20b60) ioctl$MEMLOCK(r0, 0x40084d05, 0x0) 4.915538114s ago: executing program 0 (id=561): shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$video(&(0x7f0000000440), 0xffe, 0x2400c3) socket(0x400000000010, 0x3, 0x0) io_uring_setup(0x4053, &(0x7f0000000040)={0x0, 0x2063, 0x0, 0x2, 0x94}) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102397, 0x18ffd, 0x1000000000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 4.717772738s ago: executing program 2 (id=562): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02", 0x15) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='1\n', 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r8) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) 3.322491814s ago: executing program 0 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ptrace(0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, &(0x7f00000000c0)) 3.023416952s ago: executing program 2 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x3, &(0x7f00000006c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xfffffff4, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.299512111s ago: executing program 2 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) unshare(0x2c020400) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) 2.223982122s ago: executing program 0 (id=566): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x3, 0x0, &(0x7f0000044000)) r3 = syz_open_dev$vim2m(0x0, 0x92c0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0x0, 0x8}) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 1.396838454s ago: executing program 1 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x80002, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}}, 0x20}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) r5 = socket(0x1e, 0x4, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x8000000000000000) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket(0x1e, 0x4, 0x0) 1.002895874s ago: executing program 2 (id=568): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa10004000000f5bbe9660007010000f8ffff02b802000008000000b70300000600000085000000060000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) socket(0x10, 0x80002, 0x4) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000000) 1.001743784s ago: executing program 3 (id=569): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'mpc624\x00', [0x100, 0x4, 0x13600, 0xf61c691, 0x1, 0x10005, 0x201, 0xfffffff7, 0x80008, 0x8, 0x8d, 0x8, 0x6, 0x84b, 0x7ffe, 0x91e, 0x6, 0x9, 0xd, 0x7fffffff, 0x3, 0xca9e, 0x7, 0x20001e58, 0xe82, 0x37f93241, 0xffffffa2, 0x0, 0x9, 0x7, 0xffffffff]}) 274.037133ms ago: executing program 1 (id=570): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001600)='1', 0x1) 273.306023ms ago: executing program 0 (id=578): r0 = syz_mount_image$erofs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[], 0x0, 0x23f, &(0x7f0000000ac0)="$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") fadvise64(r0, 0xb4, 0x800001, 0x3) 235.163104ms ago: executing program 3 (id=571): syz_read_part_table(0x5c3, &(0x7f00000005c0)="$eJzs2z9I22kYB/A31lBohw7XqVPbocPRpaVjM7QlSVsqhKiL3KCgiJgpghC5gKAHmkExgzi6iJDFP5Mxg5Oi4Czi4CE4uNyhi+BiDvG97e7wUI8rfD7w48n75vu+T54h4y/wXWsJvzebzUQIofnwrxPNfzjdWUtnvjzPfch3xMvCfPWXH64+Jv48HW99GdeHcb0w/6gxefY5WTtoP3/VvVlpid+PxufxYr3zDsbjni2ltp6MjRezU6XUwH62fDyxt9u2fJrO179Vqitfk596Y2471tZYh0IpjITB0BMKoRD6QvGO+s/Vjt5cPsvW1vrfX2Qa0xtvYy53yzlv2n/4xUxXtfzx9erT2Xel9Z38yYPrXOFv/l0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy/LKW2noyNF7NTpdTAfrZ8PLG327Z8ms7Xv1WqK1+Tn3pjbjvW1liHQimMhMHQEwohEfpC8Y76z9WO3lw+y9bW+t9fZBrTG29jLnfLOW/af/jFTFe1/PH16tPZd6X1nfzJg+tc4eE9/QAAAAAAAAAAAAAAAAAAAAAIIaQzX57nPuQ7QkiEn0Jr+PG3n1uu9pvxffdEzL2M9TDuL8w/akyefU7WDtrPX3VvVn6N+6PxebxY7/zPh+Ff+yMAAP//17OV3g==") 0s ago: executing program 0 (id=572): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0xfffffffffffff001, 0x7f, 0x2, 0x80010, r0, 0x8000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 78.154791][ T5764] cgroup: Unknown subsys name 'net' [ 78.297829][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.938027][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.656177][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.666355][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.674115][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.682315][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.690366][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.697971][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.706392][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.714010][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.714015][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.716739][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.739746][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.769042][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.776650][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.778593][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.792385][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.801012][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.808608][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.815955][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.819253][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.840030][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.848435][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.858372][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.878975][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.888708][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.337675][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.363405][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.425116][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 82.487812][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 82.564611][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.572386][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.579945][ T5779] bridge_slave_0: entered allmulticast mode [ 82.587460][ T5779] bridge_slave_0: entered promiscuous mode [ 82.618317][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.625865][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.633678][ T5779] bridge_slave_1: entered allmulticast mode [ 82.641347][ T5779] bridge_slave_1: entered promiscuous mode [ 82.716128][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.723418][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.730786][ T5776] bridge_slave_0: entered allmulticast mode [ 82.738279][ T5776] bridge_slave_0: entered promiscuous mode [ 82.756662][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.763852][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.772622][ T5776] bridge_slave_1: entered allmulticast mode [ 82.779722][ T5776] bridge_slave_1: entered promiscuous mode [ 82.813991][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.827060][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.855359][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.863310][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.870555][ T5778] bridge_slave_0: entered allmulticast mode [ 82.877967][ T5778] bridge_slave_0: entered promiscuous mode [ 82.896341][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.903905][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.911621][ T5778] bridge_slave_1: entered allmulticast mode [ 82.918652][ T5778] bridge_slave_1: entered promiscuous mode [ 82.936457][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.943982][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.954277][ T5777] bridge_slave_0: entered allmulticast mode [ 82.961419][ T5777] bridge_slave_0: entered promiscuous mode [ 82.995632][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.005102][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.012839][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.020324][ T5777] bridge_slave_1: entered allmulticast mode [ 83.027323][ T5777] bridge_slave_1: entered promiscuous mode [ 83.037476][ T5779] team0: Port device team_slave_0 added [ 83.058142][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.098698][ T5779] team0: Port device team_slave_1 added [ 83.117785][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.131228][ T5776] team0: Port device team_slave_0 added [ 83.141102][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.171626][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.178610][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.205313][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.219755][ T5776] team0: Port device team_slave_1 added [ 83.226198][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.233400][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.261548][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.285140][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.346047][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.377798][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.385958][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.413358][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.427641][ T5778] team0: Port device team_slave_0 added [ 83.451887][ T5779] hsr_slave_0: entered promiscuous mode [ 83.465464][ T5779] hsr_slave_1: entered promiscuous mode [ 83.473017][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.480469][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.506619][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.520011][ T5778] team0: Port device team_slave_1 added [ 83.571700][ T5777] team0: Port device team_slave_0 added [ 83.618555][ T5777] team0: Port device team_slave_1 added [ 83.641560][ T5776] hsr_slave_0: entered promiscuous mode [ 83.647955][ T5776] hsr_slave_1: entered promiscuous mode [ 83.655352][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.663277][ T5776] Cannot create hsr debugfs directory [ 83.681747][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.688725][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.717980][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.744585][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.752041][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.779377][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.790503][ T5792] Bluetooth: hci0: command tx timeout [ 83.829646][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.836739][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.862931][ T5792] Bluetooth: hci1: command tx timeout [ 83.868646][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.909193][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.916193][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.942805][ T5792] Bluetooth: hci2: command tx timeout [ 83.948886][ T5792] Bluetooth: hci3: command tx timeout [ 83.950077][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.095320][ T5778] hsr_slave_0: entered promiscuous mode [ 84.102949][ T5778] hsr_slave_1: entered promiscuous mode [ 84.109459][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.117062][ T5778] Cannot create hsr debugfs directory [ 84.204935][ T5777] hsr_slave_0: entered promiscuous mode [ 84.211908][ T5777] hsr_slave_1: entered promiscuous mode [ 84.218369][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.226689][ T5777] Cannot create hsr debugfs directory [ 84.446786][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.465942][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.482515][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.493902][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.568036][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.589624][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.602545][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.617018][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.735495][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.746392][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.758506][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.769425][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.871204][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.882966][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.895725][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.907154][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.931726][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.955736][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.016971][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.030172][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.063110][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.070472][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.085630][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.092911][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.113882][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.121159][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.145980][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.153164][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.232311][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.287983][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.344924][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.352123][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.387049][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.410946][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.418081][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.497133][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.578718][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.586013][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.645608][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.652828][ T3419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.835243][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.861413][ T5792] Bluetooth: hci0: command tx timeout [ 85.940596][ T5792] Bluetooth: hci1: command tx timeout [ 85.952240][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.979377][ T5776] veth0_vlan: entered promiscuous mode [ 86.020277][ T5782] Bluetooth: hci2: command tx timeout [ 86.025939][ T5792] Bluetooth: hci3: command tx timeout [ 86.055069][ T5776] veth1_vlan: entered promiscuous mode [ 86.117994][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.178319][ T5779] veth0_vlan: entered promiscuous mode [ 86.194031][ T5776] veth0_macvtap: entered promiscuous mode [ 86.206530][ T5776] veth1_macvtap: entered promiscuous mode [ 86.226598][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.260291][ T5779] veth1_vlan: entered promiscuous mode [ 86.279662][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.306518][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.351550][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.362825][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.374609][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.384533][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.408213][ T5777] veth0_vlan: entered promiscuous mode [ 86.440553][ T5778] veth0_vlan: entered promiscuous mode [ 86.461020][ T5779] veth0_macvtap: entered promiscuous mode [ 86.486428][ T5779] veth1_macvtap: entered promiscuous mode [ 86.507550][ T5778] veth1_vlan: entered promiscuous mode [ 86.518828][ T5777] veth1_vlan: entered promiscuous mode [ 86.545294][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.556533][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.569126][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.594576][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.609500][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.621702][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.644112][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.653082][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.662737][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.671590][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.735443][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.747426][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.813357][ T5778] veth0_macvtap: entered promiscuous mode [ 86.827913][ T5778] veth1_macvtap: entered promiscuous mode [ 86.847513][ T5777] veth0_macvtap: entered promiscuous mode [ 86.855389][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.865305][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.895604][ T5777] veth1_macvtap: entered promiscuous mode [ 86.981786][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.996198][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.007566][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.019465][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.031775][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.044782][ T3419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.049805][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.070374][ T3419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.084798][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.096005][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.106992][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.117113][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.128361][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.140541][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.162132][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.177462][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.196226][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.248819][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.270846][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.324127][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.339446][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.349250][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.358067][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.370869][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.383152][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.394865][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.405780][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.418030][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.434085][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.452282][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.939089][ T5792] Bluetooth: hci0: command tx timeout [ 88.018871][ T5792] Bluetooth: hci1: command tx timeout [ 88.096369][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.105449][ T5782] Bluetooth: hci2: command tx timeout [ 88.112415][ T5792] Bluetooth: hci3: command tx timeout [ 88.355266][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.412969][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.439029][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.463085][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.491071][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.430197][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.438076][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.585309][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.595623][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.708958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.308797][ C1] sched: RT throttling activated [ 91.309509][ T5792] Bluetooth: hci0: command tx timeout [ 91.309531][ T5782] Bluetooth: hci1: command tx timeout [ 91.314546][ T5792] Bluetooth: hci3: command tx timeout [ 91.320000][ T5782] Bluetooth: hci2: command tx timeout [ 92.197591][ T173] cfg80211: failed to load regulatory.db [ 92.313123][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.329828][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.330133][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.407331][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.520284][ T5859] Bluetooth: MGMT ver 1.22 [ 92.524929][ T5859] Bluetooth: hci0: unsupported parameter 255 [ 92.531621][ T5859] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 93.048316][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.573561][ T5873] syz_tun: entered allmulticast mode [ 93.584962][ T5873] Zero length message leads to an empty skb [ 94.354176][ T5865] syz_tun: left allmulticast mode [ 94.463235][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.689487][ T5876] team0: Port device team_slave_0 removed [ 96.301233][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 98.220173][ T5900] hugetlbfs: syz.3.13 (5900): Using mlock ulimits for SHM_HUGETLB is obsolete [ 98.561266][ T5902] syz.0.12[5902]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.148268][ T5902] loop0: detected capacity change from 0 to 256 [ 99.507703][ T5902] ======================================================= [ 99.507703][ T5902] WARNING: The mand mount option has been deprecated and [ 99.507703][ T5902] and is ignored by this kernel. Remove the mand [ 99.507703][ T5902] option from the mount to silence this warning. [ 99.507703][ T5902] ======================================================= [ 100.730943][ T5915] vivid-005: kernel_thread() failed [ 101.223879][ T5913] loop3: detected capacity change from 0 to 256 [ 101.233941][ T5913] exfat: Unknown parameter '0x000000000000001cÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ' [ 101.614384][ T5909] loop1: detected capacity change from 0 to 4096 [ 101.641287][ T5909] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 101.691477][ T5793] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.727493][ T5909] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 101.864470][ T5909] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 102.818932][ T5909] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 102.909072][ T5909] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.220509][ T5909] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 103.529085][ T5909] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.555254][ T5909] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 103.590870][ T5909] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.618085][ T5909] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 104.049778][ T5933] loop0: detected capacity change from 0 to 1024 [ 104.057521][ T5933] EXT4-fs: Ignoring removed i_version option [ 104.112904][ T5935] UBIFS error (pid: 5935): cannot open "", error -22 [ 105.615180][ T5933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.067342][ T5944] tipc: Started in network mode [ 106.072873][ T5944] tipc: Node identity ea1b1a41266f, cluster identity 4711 [ 106.086678][ T5944] tipc: Enabled bearer , priority 0 [ 106.157818][ T5946] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.611741][ T5944] syzkaller0: entered promiscuous mode [ 106.802752][ T5944] syzkaller0: entered allmulticast mode [ 106.823414][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.868353][ T5944] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 106.981518][ T34] Bluetooth: hci4: Frame reassembly failed (-84) [ 106.988446][ T1036] Bluetooth: hci4: Frame reassembly failed (-84) [ 107.200044][ T173] tipc: Node number set to 3430160961 [ 107.260256][ T5944] tipc: Resetting bearer [ 107.953242][ T5942] tipc: Resetting bearer [ 108.169722][ T5942] tipc: Disabling bearer [ 108.979196][ T5786] Bluetooth: hci4: command 0x1003 tx timeout [ 108.979259][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.436348][ T5974] xt_TCPMSS: Only works on TCP SYN packets [ 116.309583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 116.593419][ T5981] befs: (nullb0): invalid magic header [ 117.609334][ T5993] loop1: detected capacity change from 0 to 128 [ 117.741263][ T5993] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.067059][ T5993] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.081378][ T6013] overlayfs: failed to resolve './bus': -2 [ 123.266029][ T6014] loop0: detected capacity change from 0 to 131072 [ 123.989580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.808835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.159918][ T6031] tipc: Started in network mode [ 126.229911][ T6031] tipc: Node identity dee8a5acb6aa, cluster identity 4711 [ 126.439697][ T6031] tipc: Enabled bearer , priority 0 [ 126.648302][ T6036] syzkaller0: entered promiscuous mode [ 126.784153][ T6036] syzkaller0: entered allmulticast mode [ 127.264450][ T6043] process 'syz.3.45' launched './file0' with NULL argv: empty string added [ 127.683312][ T6046] input: syz0 as /devices/virtual/input/input5 [ 127.888141][ T6047] loop1: detected capacity change from 0 to 512 [ 127.940004][ T6047] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 128.056270][ T6047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 128.065909][ T6047] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.085333][ T6047] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.46: bg 0: block 361: padding at end of block bitmap is not set [ 128.114497][ T6047] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 128.124777][ T6047] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.46: attempt to clear invalid blocks 33619980 len 1 [ 128.140713][ T6047] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.46: invalid indirect mapped block 1811939328 (level 0) [ 128.159975][ T6047] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.46: invalid indirect mapped block 2185560079 (level 1) [ 128.177148][ T6047] EXT4-fs (loop1): 1 truncate cleaned up [ 128.195030][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 129.234471][ T6036] tipc: Resetting bearer [ 129.426896][ T6036] tipc: Disabling bearer [ 129.853474][ T5822] tipc: Node number set to 1749198252 [ 129.858637][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 130.765288][ T6060] loop0: detected capacity change from 0 to 32768 [ 130.796713][ T6062] ptrace attach of ""[6063] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6062] [ 131.669663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.079211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.369899][ T6060] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 134.033255][ T6060] syz.0.50 (6060) used greatest stack depth: 18968 bytes left [ 134.254257][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.268935][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.466333][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 134.741288][ T6085] NILFS (nullb0): couldn't find nilfs on the device [ 136.674998][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 139.983430][ T6109] warning: `syz.2.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.946287][ T6120] loop2: detected capacity change from 0 to 4096 [ 142.767875][ T6127] Set syz0 is full, maxelem 0 reached [ 142.780640][ T6127] autofs4:pid:6127:autofs_fill_super: called with bogus options [ 144.664728][ T6142] bridge0: port 3(erspan0) entered blocking state [ 144.672265][ T6142] bridge0: port 3(erspan0) entered disabled state [ 144.679498][ T6142] erspan0: entered allmulticast mode [ 144.686886][ T6142] erspan0: entered promiscuous mode [ 144.693770][ T6142] bridge0: port 3(erspan0) entered blocking state [ 144.700562][ T6142] bridge0: port 3(erspan0) entered forwarding state [ 144.716804][ T6142] erspan0: left allmulticast mode [ 144.721918][ T6142] erspan0: left promiscuous mode [ 144.727164][ T6142] bridge0: port 3(erspan0) entered disabled state [ 145.354537][ T6145] loop2: detected capacity change from 0 to 128 [ 145.409852][ T6145] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.497073][ T6145] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.337146][ T6152] tipc: Started in network mode [ 150.399148][ T6152] tipc: Node identity 1000001, cluster identity 4369 [ 150.405889][ T6152] tipc: Node number set to 16777217 [ 150.414708][ T6152] tipc: Cannot configure node identity twice [ 151.756947][ T6169] loop1: detected capacity change from 0 to 131072 [ 151.815863][ T6169] F2FS-fs (loop1): invalid crc value [ 151.856354][ T6169] F2FS-fs (loop1): Found nat_bits in checkpoint [ 151.889893][ T6152] tipc: Enabling of bearer rejected, failed to enable media [ 151.951888][ T6169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 153.190442][ T6184] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 154.692262][ T6180] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 158.578903][ C0] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 159.271648][ T6215] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 159.797005][ T6222] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 162.864104][ T6237] loop0: detected capacity change from 0 to 4096 [ 162.904424][ T6237] __ntfs_error: 13 callbacks suppressed [ 162.904438][ T6237] ntfs: (device loop0): parse_options(): Unrecognized mount option mft_zonier. [ 162.932727][ T6246] loop3: detected capacity change from 0 to 128 [ 162.975810][ T6246] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 162.998069][ T6247] loop1: detected capacity change from 0 to 2048 [ 163.026305][ T6246] hpfs: filesystem error: improperly stopped [ 163.054963][ T6246] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 163.071286][ T5793] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.137240][ T6246] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 163.285852][ T6246] hpfs: You really don't want any checks? You are crazy... [ 163.418373][ T6246] hpfs: hpfs_map_sector(): read error [ 163.560296][ T6246] hpfs: code page support is disabled [ 163.616573][ T6247] NILFS (loop1): corrupt root inode [ 163.703671][ T6246] hpfs: hpfs_map_4sectors(): unaligned read [ 163.853770][ T6246] hpfs: hpfs_map_4sectors(): unaligned read [ 163.933320][ T6246] hpfs: filesystem error: unable to find root dir [ 164.380802][ T6257] syz_tun: entered allmulticast mode [ 165.105481][ T6252] syz_tun: left allmulticast mode [ 165.317425][ T6267] loop2: detected capacity change from 0 to 128 [ 166.600899][ T6269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.472828][ T6288] loop0: detected capacity change from 0 to 64 [ 171.567794][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 171.927737][ T6299] loop1: detected capacity change from 0 to 4096 [ 172.069242][ T6303] loop3: detected capacity change from 0 to 128 [ 172.125407][ T6299] ntfs: volume version 3.1. [ 172.152500][ T6303] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 172.192809][ T6303] hpfs: filesystem error: improperly stopped [ 172.193062][ T6299] ntfs: (device loop1): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is not present but $INDEX_ROOT indicated it is. [ 172.226615][ T6303] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 172.245303][ T6299] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 172.258373][ T6303] hpfs: You really don't want any checks? You are crazy... [ 172.258420][ T6303] hpfs: Code page index out of array [ 172.258437][ T6303] hpfs: code page support is disabled [ 172.279588][ T6303] hpfs: filesystem error: map_dirent: not a directory [ 172.298938][ T6299] ntfs: (device loop1): load_system_files(): Failed to load root directory. [ 172.299215][ T6303] [ 172.336127][ T6303] hpfs: hpfs_map_4sectors(): unaligned read [ 172.340291][ T6299] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files. [ 172.360626][ T6303] hpfs: filesystem error: unable to find root dir [ 172.674978][ T6306] loop3: detected capacity change from 0 to 8 [ 172.740143][ T6306] unable to read id index table [ 172.764748][ T6301] loop0: detected capacity change from 0 to 32768 [ 172.812661][ T6301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.107 (6301) [ 172.870591][ T6295] loop2: detected capacity change from 0 to 40427 [ 172.912553][ T6295] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 172.928888][ T6295] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 172.947990][ T6295] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 172.971310][ T6295] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 172.984994][ T6295] F2FS-fs (loop2): invalid crc value [ 172.996175][ T6295] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.020714][ T6301] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.079228][ T6301] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 173.096299][ T6312] loop3: detected capacity change from 0 to 128 [ 173.108410][ T6295] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 173.119031][ T6301] BTRFS info (device loop0): force clearing of disk cache [ 173.126380][ T6301] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 173.144079][ T6295] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 173.165017][ T6301] BTRFS info (device loop0): enabling auto defrag [ 173.176623][ T6301] BTRFS info (device loop0): max_inline at 0 [ 173.183143][ T6301] BTRFS info (device loop0): enabling disk space caching [ 173.193616][ T5791] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.223069][ T6301] BTRFS info (device loop0): disk space caching is enabled [ 173.513681][ T6329] loop3: detected capacity change from 0 to 4096 [ 173.528550][ T6301] BTRFS info (device loop0): enabling ssd optimizations [ 173.574792][ T6329] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 173.587443][ T6301] BTRFS info (device loop0): rebuilding free space tree [ 173.682234][ T6329] ntfs3: loop3: Failed to load $MFT (-22). [ 173.693293][ T6333] loop2: detected capacity change from 0 to 64 [ 173.777844][ T6333] hfs: keylen 9474 too large [ 173.809043][ T6333] hfs: get root inode failed [ 173.857020][ T6301] BTRFS info (device loop0): disabling free space tree [ 173.889178][ T6301] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.944917][ T6301] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.998687][ T6307] loop1: detected capacity change from 0 to 32768 [ 174.052589][ T6307] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.109 (6307) [ 174.149676][ T6307] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 174.328661][ T6307] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 174.530957][ T6307] BTRFS info (device loop1): turning off barriers [ 174.701234][ T6307] BTRFS info (device loop1): enabling auto defrag [ 174.854922][ T6307] BTRFS info (device loop1): disabling tree log [ 175.004465][ T6307] BTRFS info (device loop1): max_inline at 0 [ 175.064305][ T6307] BTRFS info (device loop1): enabling disk space caching [ 175.072312][ T5778] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.129000][ T6307] BTRFS info (device loop1): enabling ssd optimizations [ 175.136033][ T6307] BTRFS info (device loop1): using spread ssd allocation scheme [ 175.209421][ T6307] BTRFS error (device loop1): cannot disable free space tree [ 175.355176][ T6307] BTRFS error (device loop1): open_ctree failed: -22 [ 175.370998][ T5784] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (5784) [ 178.453134][ T6350] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 179.791980][ T6357] loop3: detected capacity change from 0 to 128 [ 181.489280][ T6366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.807490][ T6374] loop1: detected capacity change from 0 to 1024 [ 181.853279][ T6374] hfsplus: part requires an argument [ 181.867135][ T6374] hfsplus: unable to parse mount options [ 181.878401][ T6375] loop3: detected capacity change from 0 to 512 [ 181.921769][ T6375] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 181.939366][ T6375] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 181.971181][ T6375] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 181.998255][ T6377] loop0: detected capacity change from 0 to 1024 [ 181.998924][ T6375] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c040e01c, mo2=0000] [ 182.060221][ T6375] EXT4-fs (loop3): too many log groups per flexible block group [ 182.119027][ T6375] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 182.145445][ T6375] EXT4-fs (loop3): mount failed [ 182.235757][ T6377] hfsplus: unable to load nls mapping "cv1251" [ 182.262505][ T6377] hfsplus: unable to parse mount options [ 182.374462][ T6387] loop2: detected capacity change from 0 to 1024 [ 182.410114][ T6387] EXT4-fs: Invalid commit interval -2147483647, must be smaller than 21474836 [ 186.944191][ T6405] loop0: detected capacity change from 0 to 256 [ 187.883054][ T6405] FAT-fs (loop0): codepage cp86 not found [ 187.982685][ T6414] loop1: detected capacity change from 0 to 256 [ 188.085830][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 188.118506][ T6416] loop0: detected capacity change from 0 to 1764 [ 188.240978][ T6416] isofs_fill_super: get root inode failed [ 188.626501][ T6422] loop1: detected capacity change from 0 to 4096 [ 188.649292][ T6422] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 188.888573][ T6422] ntfs3: loop1: $UpCase is corrupted. [ 189.100490][ T6432] Cannot find set identified by id 0 to match [ 189.647437][ T6418] loop2: detected capacity change from 0 to 40427 [ 189.682334][ T6418] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 189.698833][ T6418] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 189.731953][ T6418] F2FS-fs (loop2): invalid crc_offset: 1 [ 194.326535][ T6451] ptrace attach of ""[6452] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6451] [ 196.119394][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.125783][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.612775][ T6464] ptrace attach of ""[6465] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6464] [ 199.050089][ T6467] ptrace attach of ""[6468] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6467] [ 199.986908][ T6474] loop3: detected capacity change from 0 to 1024 [ 200.116823][ T5782] Bluetooth: Frame is too long (len 18, expected len 4) [ 200.217008][ T6474] hfsplus: found bad thread record in catalog [ 200.349870][ T5787] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.452347][ T6479] loop2: detected capacity change from 0 to 2048 [ 203.875973][ T6505] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 204.054737][ T6505] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 204.063734][ T6505] udc dummy_udc.0: failed to start g1: -22 [ 204.077578][ T6505] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 204.090907][ T6505] UDC core: g1: couldn't find an available UDC or it's busy [ 204.169944][ T6510] ptrace attach of ""[6511] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6510] [ 205.088121][ T6513] loop2: detected capacity change from 0 to 2048 [ 205.194916][ T5787] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.136453][ T6517] loop0: detected capacity change from 0 to 128 [ 206.238944][ T6517] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 206.324769][ T6517] hpfs: filesystem error: improperly stopped [ 206.345951][ T6517] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 206.376462][ T6517] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 206.407842][ T6517] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 206.447107][ T6521] loop1: detected capacity change from 0 to 16 [ 206.526543][ T6521] erofs: (device loop1): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 206.615354][ T6520] loop2: detected capacity change from 0 to 8192 [ 206.654620][ T6520] REISERFS warning (device loop2): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 207.020903][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 207.022166][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 209.568952][ T6541] ptrace attach of ""[6542] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6541] [ 212.781240][ T6571] loop1: detected capacity change from 0 to 2364 [ 212.904072][ T6553] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.021401][ T6579] loop0: detected capacity change from 0 to 64 [ 213.346563][ T6593] loop1: detected capacity change from 0 to 8 [ 213.366258][ T6593] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 213.476824][ T6589] loop3: detected capacity change from 0 to 1156 [ 213.509509][ T6589] ISOFS: unable to read i-node block [ 213.515610][ T6589] isofs_fill_super: get root inode failed [ 214.320141][ T6553] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.719845][ T6605] loop3: detected capacity change from 0 to 64 [ 214.759550][ T6605] hfs: unable to read volume bitmap [ 214.880327][ T6592] loop0: detected capacity change from 0 to 32768 [ 214.955383][ T5782] Bluetooth: hci0: unexpected event for opcode 0x041c [ 215.011466][ T6592] (syz.0.197,6592,1):ocfs2_find_slot:468 ERROR: no free slots available! [ 215.092001][ T6592] (syz.0.197,6592,1):ocfs2_mount_volume:1807 ERROR: status = -22 [ 215.138315][ T6592] (syz.0.197,6592,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 215.313103][ T6597] loop1: detected capacity change from 0 to 32768 [ 215.353353][ T6597] jfs_mount: Mount Failure: File System Dirty. [ 215.376666][ T6597] Mount JFS Failure: -22 [ 215.389666][ T6597] jfs_mount failed w/return code = -22 [ 215.509675][ T5838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 215.601308][ T6618] loop3: detected capacity change from 0 to 8 [ 215.799096][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 215.882650][ T5838] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 216.175443][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.276970][ T6618] SQUASHFS error: xz decompression failed, data probably corrupt [ 216.312258][ T5838] usb 3-1: config 0 has no interface number 0 [ 216.356386][ T6618] SQUASHFS error: Failed to read block 0x108: -5 [ 216.389151][ T5838] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 216.418678][ T6618] SQUASHFS error: Unable to read metadata cache entry [106] [ 216.453201][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.472245][ T6618] SQUASHFS error: Unable to read inode 0x11f [ 216.512759][ T5838] usb 3-1: Product: syz [ 216.516993][ T5838] usb 3-1: Manufacturer: syz [ 216.554702][ T5838] usb 3-1: SerialNumber: syz [ 216.580125][ T6622] loop1: detected capacity change from 0 to 2048 [ 216.603486][ T5838] usb 3-1: config 0 descriptor?? [ 216.662482][ T5838] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 216.698396][ T5838] usb 3-1: No valid video chain found. [ 216.761240][ T6622] Alternate GPT is invalid, using primary GPT. [ 216.790700][ T6622] loop1: p1 p2 p3 [ 216.883755][ T5822] usb 3-1: USB disconnect, device number 2 [ 216.952165][ T6628] loop3: detected capacity change from 0 to 64 [ 217.170617][ T6630] FAT-fs (loop1): Directory bread(block 64) failed [ 217.191885][ T6630] FAT-fs (loop1): Directory bread(block 65) failed [ 217.210450][ T6630] FAT-fs (loop1): Directory bread(block 66) failed [ 217.235170][ T6630] FAT-fs (loop1): Directory bread(block 67) failed [ 217.253734][ T6630] FAT-fs (loop1): Directory bread(block 68) failed [ 217.273930][ T6630] FAT-fs (loop1): Directory bread(block 69) failed [ 217.300225][ T6630] FAT-fs (loop1): Directory bread(block 70) failed [ 217.305951][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 217.320233][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 217.322546][ T6553] udevd[6553]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 217.349202][ T6630] FAT-fs (loop1): Directory bread(block 71) failed [ 217.369399][ T6630] FAT-fs (loop1): Directory bread(block 72) failed [ 217.399043][ T6630] FAT-fs (loop1): Directory bread(block 73) failed [ 218.092533][ T6648] ptrace attach of ""[6649] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6648] [ 219.125355][ T6650] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 219.949888][ T6634] set_capacity_and_notify: 1 callbacks suppressed [ 219.949905][ T6634] loop3: detected capacity change from 0 to 32768 [ 219.999075][ T6634] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.216 (6634) [ 220.062520][ T6634] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.086883][ T6634] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 220.095343][ T6652] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6653] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6652] [ 220.153271][ T6634] BTRFS info (device loop3): enabling auto defrag [ 220.174842][ T6634] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 220.190747][ T6634] BTRFS info (device loop3): use zstd compression, level 3 [ 220.198371][ T6634] BTRFS info (device loop3): turning on async discard [ 220.247307][ T6634] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 220.264160][ T6634] BTRFS info (device loop3): trying to use backup root at mount time [ 220.272757][ T6634] BTRFS info (device loop3): enabling disk space caching [ 220.284825][ T6634] BTRFS info (device loop3): enabling ssd optimizations [ 220.292261][ T6634] BTRFS info (device loop3): using spread ssd allocation scheme [ 220.325661][ T6634] BTRFS info (device loop3): setting nodatacow, compression disabled [ 220.374209][ T6634] BTRFS info (device loop3): force zlib compression, level 3 [ 220.394349][ T6634] BTRFS info (device loop3): use zstd compression, level 3 [ 220.414179][ T6634] BTRFS info (device loop3): turning off async discard [ 220.433955][ T6634] BTRFS error (device loop3): cannot disable free space tree [ 220.492320][ T6634] BTRFS error (device loop3): open_ctree failed: -22 [ 222.196625][ T6681] loop3: detected capacity change from 0 to 8192 [ 222.243739][ T6681] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 222.295718][ T6681] REISERFS warning (device loop3): sh-2012 read_super_block: found unknown format "15" of reiserfs with non-standard magic [ 222.657934][ T6701] loop2: detected capacity change from 0 to 512 [ 222.706672][ T6701] EXT4-fs: Ignoring removed orlov option [ 222.765218][ T6701] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 222.831758][ T6701] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #15: comm syz.2.242: corrupted xattr block 252: invalid header [ 223.625475][ T6711] loop0: detected capacity change from 0 to 256 [ 223.640135][ T6711] exfat: Unknown parameter '0x00000000000000caÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ' [ 223.829461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 224.238972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 224.474977][ T6712] loop1: detected capacity change from 0 to 256 [ 224.499396][ T6701] EXT4-fs (loop2): Remounting filesystem read-only [ 224.506012][ T6701] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 224.571128][ T6701] EXT4-fs (loop2): 1 orphan inode deleted [ 224.576097][ T5793] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.592224][ T6701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.867709][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.125139][ T6716] loop2: detected capacity change from 0 to 16 [ 225.139912][ T5777] cgroup: fork rejected by pids controller in /syz1 [ 225.165211][ T6716] erofs: (device loop2): mounted with root inode @ nid 36. [ 225.400711][ T6719] loop2: detected capacity change from 0 to 16 [ 225.462858][ T6719] erofs: (device loop2): mounted with root inode @ nid 36. [ 225.560580][ T6703] loop3: detected capacity change from 0 to 32768 [ 225.574627][ T6719] syz.2.250: attempt to access beyond end of device [ 225.574627][ T6719] loop2: rw=524288, sector=74, nr_sectors = 2048 limit=16 [ 225.597344][ T6719] syz.2.250: attempt to access beyond end of device [ 225.597344][ T6719] loop2: rw=524288, sector=2122, nr_sectors = 512 limit=16 [ 225.650685][ T6703] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.698005][ T6703] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 225.718011][ T6703] XFS (loop3): log mount failed [ 226.145260][ T3419] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.207909][ T6731] loop0: detected capacity change from 0 to 256 [ 226.257157][ T6731] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 226.381981][ T3419] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.489005][ T6736] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 226.532652][ T6736] netlink: 172 bytes leftover after parsing attributes in process `syz.3.255'. [ 226.810730][ T6742] loop3: detected capacity change from 0 to 16 [ 226.846755][ T6742] erofs: (device loop3): mounted with root inode @ nid 36. [ 226.893508][ T6742] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 226.920438][ T3419] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.159493][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.174244][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.187555][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.199716][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.217131][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.225528][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.303938][ T6746] loop3: detected capacity change from 0 to 256 [ 227.397659][ T6746] FAT-fs (loop3): Directory bread(block 64) failed [ 227.403735][ T6738] loop0: detected capacity change from 0 to 32768 [ 227.419767][ T6746] FAT-fs (loop3): Directory bread(block 65) failed [ 227.437362][ T6746] FAT-fs (loop3): Directory bread(block 66) failed [ 227.445224][ T3419] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.452907][ T6746] FAT-fs (loop3): Directory bread(block 67) failed [ 227.463244][ T6746] FAT-fs (loop3): Directory bread(block 68) failed [ 227.471362][ T6746] FAT-fs (loop3): Directory bread(block 69) failed [ 227.478224][ T6746] FAT-fs (loop3): Directory bread(block 70) failed [ 227.485573][ T6746] FAT-fs (loop3): Directory bread(block 71) failed [ 227.492954][ T6746] FAT-fs (loop3): Directory bread(block 72) failed [ 227.502807][ T6746] FAT-fs (loop3): Directory bread(block 73) failed [ 227.514836][ T6738] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 227.640857][ T6738] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.759698][ T6738] XFS (loop0): Ending clean mount [ 227.780730][ T6738] XFS (loop0): Quotacheck needed: Please wait. [ 227.952581][ T6738] XFS (loop0): Quotacheck: Done. [ 227.990497][ T6759] loop2: detected capacity change from 0 to 1024 [ 228.048347][ T6759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 228.067937][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.115565][ T6759] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.265714][ T3419] tipc: Left network mode [ 228.331002][ T6759] EXT4-fs error (device loop2): ext4_xattr_block_list:766: inode #15: comm syz.2.262: corrupted xattr block 128: invalid size in ea xattr [ 228.569322][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.682249][ T6773] loop0: detected capacity change from 0 to 2048 [ 228.724391][ T6773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.058582][ T6743] chnl_net:caif_netlink_parms(): no params data found [ 229.167625][ T6786] loop2: detected capacity change from 0 to 256 [ 229.221046][ T6786] exfat: Deprecated parameter 'namecase' [ 229.251505][ T6788] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 229.299162][ T5782] Bluetooth: hci3: command tx timeout [ 229.312534][ T6788] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 229.352168][ T6790] erofs: (device loop3): mounted with root inode @ nid 36. [ 229.389986][ T6786] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 229.478639][ T6790] syz.3.269: attempt to access beyond end of device [ 229.478639][ T6790] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 229.549637][ T6790] syz.3.269: attempt to access beyond end of device [ 229.549637][ T6790] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 229.634501][ T28] audit: type=1800 audit(1785777172.335:2): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.269" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 230.085050][ T6802] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 230.140425][ T6800] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 230.235112][ T6802] syz.2.271: attempt to access beyond end of device [ 230.235112][ T6802] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 230.325025][ T6800] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 230.369337][ T6743] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.401372][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.441530][ T6743] bridge_slave_0: entered allmulticast mode [ 230.474955][ T6743] bridge_slave_0: entered promiscuous mode [ 230.627174][ T6797] set_capacity_and_notify: 4 callbacks suppressed [ 230.627191][ T6797] loop0: detected capacity change from 0 to 32768 [ 230.694910][ T6797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.270 (6797) [ 230.758386][ T6743] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.797466][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.853006][ T6743] bridge_slave_1: entered allmulticast mode [ 230.860652][ T6743] bridge_slave_1: entered promiscuous mode [ 230.876208][ T6797] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.925368][ T6797] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 230.955756][ T6743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.972019][ T6797] BTRFS info (device loop0): force clearing of disk cache [ 231.004144][ T6797] BTRFS info (device loop0): force zlib compression, level 3 [ 231.039350][ T6797] BTRFS info (device loop0): enabling auto defrag [ 231.063793][ T6797] BTRFS info (device loop0): max_inline at 0 [ 231.072212][ T6743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.093698][ T6797] BTRFS info (device loop0): using free space tree [ 231.284661][ T6743] team0: Port device team_slave_0 added [ 231.379187][ T5782] Bluetooth: hci3: command tx timeout [ 231.381914][ T6797] BTRFS info (device loop0): enabling ssd optimizations [ 231.419932][ T6797] BTRFS info (device loop0): auto enabling async discard [ 231.427444][ T6743] team0: Port device team_slave_1 added [ 231.432122][ T6797] BTRFS info (device loop0): rebuilding free space tree [ 231.462664][ T6833] loop3: detected capacity change from 0 to 4096 [ 231.636098][ T6838] loop2: detected capacity change from 0 to 512 [ 231.646183][ T6833] ntfs: volume version 3.1. [ 231.714200][ T6838] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 231.763386][ T6833] ntfs: (device loop3): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 231.779405][ T6838] UDF-fs: Scanning with blocksize 512 failed [ 231.801379][ T5778] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.844770][ T6838] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 231.875838][ T6838] UDF-fs: Scanning with blocksize 1024 failed [ 231.928771][ T6838] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 231.936238][ T6838] UDF-fs: Scanning with blocksize 2048 failed [ 231.993095][ T6838] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 232.090608][ T5793] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (5793) [ 232.104914][ T6838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.495954][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 232.614639][ T6851] ptrace attach of ""[6853] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6851] [ 233.034068][ T6855] ptrace attach of ""[6856] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6855] [ 233.598816][ T5786] Bluetooth: hci3: command tx timeout [ 234.487089][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.494182][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.529903][ T6743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.609666][ T6743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.659949][ T6743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.772845][ T6743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.875435][ T3419] hsr_slave_0: left promiscuous mode [ 234.898034][ T3419] hsr_slave_1: left promiscuous mode [ 234.957643][ T3419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.997990][ T3419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.084698][ T3419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.124565][ T3419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.196388][ T3419] bridge_slave_1: left allmulticast mode [ 235.226059][ T3419] bridge_slave_1: left promiscuous mode [ 235.266483][ T3419] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.336522][ T3419] bridge_slave_0: left allmulticast mode [ 235.348830][ T3419] bridge_slave_0: left promiscuous mode [ 235.364894][ T3419] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.470857][ T3419] veth1_macvtap: left promiscuous mode [ 235.476961][ T3419] veth0_macvtap: left promiscuous mode [ 235.496110][ T3419] veth1_vlan: left promiscuous mode [ 235.513488][ T3419] veth0_vlan: left promiscuous mode [ 235.620377][ T5786] Bluetooth: hci3: command tx timeout [ 235.709634][ T6865] loop0: detected capacity change from 0 to 32768 [ 235.977529][ T6872] loop2: detected capacity change from 0 to 256 [ 236.005471][ T6872] exfat: Deprecated parameter 'namecase' [ 236.015909][ T6872] exfat: Deprecated parameter 'namecase' [ 236.075640][ T6872] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 236.671196][ T6870] loop3: detected capacity change from 0 to 32768 [ 236.851457][ T6882] ptrace attach of ""[6883] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6882] [ 237.489121][ T6870] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 237.497846][ T6870] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 237.867286][ T6870] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 237.958450][ T5853] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 237.994180][ T5853] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 238.097784][ T6887] loop2: detected capacity change from 0 to 64 [ 238.758916][ T6889] ptrace attach of ""[6890] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6889] [ 238.834760][ T5853] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 840ms [ 238.843398][ T5853] gfs2: fsid=syz:syz.0: jid=0: Done [ 238.850446][ T6870] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 238.888127][ T6870] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 239.643910][ T6896] loop2: detected capacity change from 0 to 1764 [ 239.991688][ T6900] loop3: detected capacity change from 0 to 16 [ 239.999405][ T6900] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 240.329231][ T6906] loop2: detected capacity change from 0 to 1764 [ 240.375701][ T6906] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 240.452280][ T6908] loop0: detected capacity change from 0 to 1024 [ 240.552100][ T6908] hfsplus: invalid length 32517 has been corrected to 255 [ 240.791248][ T3419] team0 (unregistering): Port device team_slave_1 removed [ 240.873062][ T6912] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 240.880099][ T6912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.924997][ T6912] vhci_hcd vhci_hcd.0: Device attached [ 240.940741][ T3419] team0 (unregistering): Port device team_slave_0 removed [ 240.952816][ T6913] vhci_hcd: connection closed [ 240.993172][ T3451] vhci_hcd: stop threads [ 241.029829][ T3451] vhci_hcd: release socket [ 241.054702][ T3451] vhci_hcd: disconnect device [ 241.114722][ T5853] vhci_hcd: vhci_device speed not set [ 241.120510][ T6919] loop2: detected capacity change from 0 to 4096 [ 241.148337][ T3419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.229152][ T6921] ptrace attach of ""[6922] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6921] [ 241.880898][ T6919] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 241.959308][ T6919] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 242.026440][ T6919] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 242.119017][ T6919] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 242.186374][ T3419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.204241][ T6919] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 242.290654][ T6919] ntfs: volume version 3.1. [ 242.389599][ T6919] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 242.467030][ T6919] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 242.588901][ T6919] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 242.664694][ T6919] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 242.721566][ T6919] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 242.940420][ T6932] capability: warning: `syz.0.307' uses deprecated v2 capabilities in a way that may be insecure [ 243.249142][ T6935] loop0: detected capacity change from 0 to 16 [ 243.260532][ T6935] erofs: (device loop0): mounted with root inode @ nid 36. [ 243.767198][ T6943] ptrace attach of ""[6944] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6943] [ 244.638006][ T6948] loop2: detected capacity change from 0 to 1024 [ 244.824436][ T6948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.017198][ T3419] bond0 (unregistering): Released all slaves [ 245.144855][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.406959][ T6955] loop3: detected capacity change from 0 to 1764 [ 245.863984][ T6941] loop0: detected capacity change from 0 to 32768 [ 245.889344][ T6743] hsr_slave_0: entered promiscuous mode [ 245.913926][ T6743] hsr_slave_1: entered promiscuous mode [ 245.956821][ T6941] [ 245.956821][ T6941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 245.956821][ T6941] [ 245.969127][ T6743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.987659][ T6743] Cannot create hsr debugfs directory [ 246.002926][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 246.050240][ T6941] [ 246.050240][ T6941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.050240][ T6941] [ 246.091583][ T6941] [ 246.091583][ T6941] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.091583][ T6941] [ 246.362175][ T5778] [ 246.362175][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.362175][ T5778] [ 246.372975][ T5778] [ 246.372975][ T5778] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 246.372975][ T5778] [ 247.396601][ T6994] ptrace attach of ""[6995] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6994] [ 248.082952][ T6997] loop3: detected capacity change from 0 to 64 [ 248.633968][ T6999] loop2: detected capacity change from 0 to 4096 [ 249.256427][ T6999] ntfs3: loop2: ino=9, attr_set_size [ 249.468320][ T6743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.523385][ T6743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.564062][ T6743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.609372][ T6743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.644530][ T7015] loop2: detected capacity change from 0 to 128 [ 249.691100][ T7015] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 249.876191][ T7019] capability: warning: `syz.0.335' uses 32-bit capabilities (legacy support in use) [ 249.903812][ T6743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.991213][ T6743] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.065403][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.073495][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.079109][ T5786] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 250.127127][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.134432][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.435181][ T7010] loop3: detected capacity change from 0 to 32768 [ 250.450050][ T7031] loop2: detected capacity change from 0 to 1024 [ 250.522974][ T7033] ptrace attach of ""[7034] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7033] [ 251.252383][ T7010] [ 251.252383][ T7010] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.252383][ T7010] [ 251.301357][ T7031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.336816][ T6743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.894227][ T3451] [ 251.894227][ T3451] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.894227][ T3451] [ 251.950512][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.971975][ T3451] [ 251.971975][ T3451] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 251.971975][ T3451] [ 252.051108][ T5776] [ 252.051108][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.051108][ T5776] [ 252.147527][ T114] [ 252.147527][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.147527][ T114] [ 252.231697][ T5776] [ 252.231697][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 252.231697][ T5776] [ 252.623483][ T6743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.851486][ T7057] ptrace attach of ""[7058] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7057] [ 253.624335][ T6743] veth0_vlan: entered promiscuous mode [ 253.735591][ T6743] veth1_vlan: entered promiscuous mode [ 253.769074][ T7063] loop3: detected capacity change from 0 to 64 [ 253.946662][ T6743] veth0_macvtap: entered promiscuous mode [ 254.072069][ T6743] veth1_macvtap: entered promiscuous mode [ 254.193233][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.251799][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.299145][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.338778][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.614985][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.640571][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.722145][ T7075] ptrace attach of ""[7076] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7075] [ 255.481726][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.563902][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.680953][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.759378][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.804109][ T7083] Illegal XDP return value 14 on prog (id 17) dev N/A, expect packet loss! [ 255.863045][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.944381][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.950834][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.959650][ T6743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.027913][ T6743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.114628][ T6743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.252956][ T6743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.346216][ T6743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.402775][ T6743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.469088][ T6743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.768320][ T7103] loop2: detected capacity change from 0 to 256 [ 256.974372][ T3419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.046872][ T3419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.100964][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.180921][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.200592][ T7111] ptrace attach of ""[7112] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7111] [ 258.665432][ T7125] loop1: detected capacity change from 0 to 8 [ 258.842705][ T7125] SQUASHFS error: Failed to read block 0x6fc: -5 [ 258.908840][ T7125] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 259.036637][ T7133] loop2: detected capacity change from 0 to 256 [ 259.087399][ T7133] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.117121][ T7133] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 259.237459][ T7133] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x640de592, utbl_chksum : 0xe619d30d) [ 259.280797][ T7133] exFAT-fs (loop2): failed to load alloc-bitmap [ 259.287174][ T7133] exFAT-fs (loop2): failed to recognize exfat type [ 259.670079][ T7149] ptrace attach of ""[7150] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7149] [ 260.325836][ T7152] x_tables: unsorted underflow at hook 3 [ 260.568961][ T5786] Bluetooth: hci1: unexpected event for opcode 0x080e [ 261.454774][ T7173] loop2: detected capacity change from 0 to 512 [ 261.664663][ T7173] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000103) [ 261.830469][ T7182] Invalid option length (1048212) for dns_resolver key [ 261.856861][ T7159] loop1: detected capacity change from 0 to 32768 [ 261.987354][ T7159] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 262.217390][ T7190] ptrace attach of ""[7191] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7190] [ 262.835780][ T5793] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.168550][ T7216] loop0: detected capacity change from 0 to 4096 [ 264.409405][ T5786] Bluetooth: hci3: Malformed Event: 0x02 [ 264.480753][ T7228] ptrace attach of ""[7229] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7228] [ 265.472981][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 265.472996][ T28] audit: type=1326 audit(1785777208.175:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860bb9e019 code=0x7ffc0000 [ 265.605726][ T28] audit: type=1326 audit(1785777208.235:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860bb9e019 code=0x7ffc0000 [ 265.640535][ T7216] EXT4-fs (loop0): Test dummy encryption mode enabled [ 265.663106][ T7216] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 265.774022][ T28] audit: type=1326 audit(1785777208.235:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860bb9e019 code=0x7ffc0000 [ 266.002576][ T28] audit: type=1326 audit(1785777208.265:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f860bb9e019 code=0x7ffc0000 [ 266.179328][ T28] audit: type=1326 audit(1785777208.265:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860bb9e019 code=0x7ffc0000 [ 266.203171][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.298825][ T28] audit: type=1326 audit(1785777208.265:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f860bb9e019 code=0x7ffc0000 [ 266.388848][ T28] audit: type=1326 audit(1785777208.265:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f860bb9e019 code=0x7ffc0000 [ 266.475143][ T28] audit: type=1326 audit(1785777208.265:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.3.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f860bb9e019 code=0x7ffc0000 [ 266.499088][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.742834][ T7256] ip6tnl1: entered promiscuous mode [ 268.039633][ T7277] IPv6: Can't replace route, no match found [ 271.303188][ T7340] netlink: 'syz.3.438': attribute type 5 has an invalid length. [ 271.357720][ T7343] netlink: 44 bytes leftover after parsing attributes in process `syz.0.439'. [ 272.499569][ T7361] ptrace attach of ""[7362] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7361] [ 275.636768][ T7369] loop2: detected capacity change from 0 to 64 [ 275.888887][ T7375] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 275.965680][ T7373] loop3: detected capacity change from 0 to 4096 [ 276.122269][ T7373] ntfs: volume version 3.1. [ 276.209674][ T7373] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is not present but $INDEX_ROOT indicated it is. [ 276.411256][ T7386] xt_CONNSECMARK: invalid mode: 0 [ 276.439072][ T7373] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 276.439352][ T7373] ntfs: (device loop3): load_system_files(): Failed to load root directory. [ 276.442996][ T7373] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 279.381184][ T7422] xt_CONNSECMARK: invalid mode: 0 [ 280.588882][ T7433] ptrace attach of ""[7434] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7433] [ 281.020261][ T7435] xt_CONNSECMARK: invalid mode: 0 [ 281.575802][ T7428] loop2: detected capacity change from 0 to 4096 [ 281.834778][ T7428] ntfs: volume version 3.1. [ 281.885361][ T7428] ntfs: (device loop2): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is not present but $INDEX_ROOT indicated it is. [ 281.952453][ T7428] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 281.988979][ T7428] ntfs: (device loop2): load_system_files(): Failed to load root directory. [ 282.014731][ T7428] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files. [ 284.447445][ T7473] ptrace attach of ""[7474] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7473] [ 284.523423][ T7472] xt_CONNSECMARK: invalid mode: 0 [ 285.196685][ T7481] xt_CONNSECMARK: invalid mode: 0 [ 286.786224][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'. [ 287.907387][ T7510] ptrace attach of ""[7512] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7510] [ 287.917804][ T7507] ptrace attach of ""[7513] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7507] [ 288.908296][ T7504] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7514] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7504] [ 291.061358][ T7516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.068616][ T7516] IPv6: NLM_F_CREATE should be set when creating new route [ 291.076075][ T7516] IPv6: NLM_F_CREATE should be set when creating new route [ 291.083348][ T7516] IPv6: NLM_F_CREATE should be set when creating new route [ 295.557137][ T7554] loop2: detected capacity change from 0 to 1024 [ 295.694128][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 295.709398][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 295.742199][ T7557] hfsplus: request for non-existent node 33423360 in B*Tree [ 295.753678][ T7557] hfsplus: request for non-existent node 33423360 in B*Tree [ 295.812738][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 295.828311][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 295.860704][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 295.868376][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 295.887327][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 295.924817][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.480243][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.488112][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.517437][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.530264][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.554749][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.564949][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.592647][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.601722][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.623424][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.637459][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.695610][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.704233][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.724665][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 296.877421][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 297.835032][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 297.987199][ T7554] hfsplus: request for non-existent node 33423360 in B*Tree [ 298.085661][ T7557] hfsplus: request for non-existent node 33423360 in B*Tree [ 298.093938][ T7557] hfsplus: request for non-existent node 33423360 in B*Tree [ 302.487649][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 303.181790][ T7595] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 303.738946][ T7596] ptrace attach of ""[7601] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7596] [ 304.019906][ T7595] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 304.028125][ T7595] udc dummy_udc.0: failed to start g1: -22 [ 305.749440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 306.112399][ T7595] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 306.155766][ T7595] UDC core: g1: couldn't find an available UDC or it's busy [ 309.214699][ T7614] IPVS: Error connecting to the multicast addr [ 310.869305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 315.702067][ T7648] sctp: [Deprecated]: syz.2.531 (pid 7648) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.702067][ T7648] Use struct sctp_sack_info instead [ 315.935361][ T7656] xt_CONNSECMARK: invalid mode: 0 [ 316.979460][ T7667] hub 8-0:1.0: USB hub found [ 317.503795][ T7667] hub 8-0:1.0: 1 port detected [ 317.975583][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.982024][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.406145][ T7687] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 319.509006][ T7683] usb usb8: usbfs: process 7683 (syz.1.539) did not claim interface 0 before use [ 320.365174][ T7690] xt_CONNSECMARK: invalid mode: 0 [ 321.122638][ T7704] xt_CONNSECMARK: invalid mode: 0 [ 325.497659][ T7726] xt_CONNSECMARK: invalid mode: 0 [ 326.230008][ T7734] netlink: 'syz.0.557': attribute type 3 has an invalid length. [ 326.237736][ T7734] netlink: 132 bytes leftover after parsing attributes in process `syz.0.557'. [ 327.107623][ T7740] Bluetooth: hci0: unsupported parameter 255 [ 327.113802][ T7740] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 329.880310][ T7760] xt_CONNSECMARK: invalid mode: 0 [ 332.018233][ T7782] loop3: detected capacity change from 0 to 2048 [ 332.029757][ T7781] [ 332.032175][ T7781] ====================================================== [ 332.039220][ T7781] WARNING: possible circular locking dependency detected [ 332.046306][ T7781] syzkaller #0 Not tainted [ 332.050751][ T7781] ------------------------------------------------------ [ 332.057794][ T7781] syz.1.570/7781 is trying to acquire lock: [ 332.063710][ T7781] ffff888020138670 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 332.075258][ T7781] [ 332.075258][ T7781] but task is already holding lock: [ 332.082709][ T7781] ffff88805c061120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 332.091838][ T7781] [ 332.091838][ T7781] which lock already depends on the new lock. [ 332.091838][ T7781] [ 332.102266][ T7781] [ 332.102266][ T7781] the existing dependency chain (in reverse order) is: [ 332.111316][ T7781] [ 332.111316][ T7781] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 332.119010][ T7781] __mutex_lock+0x135/0xc80 [ 332.124072][ T7781] tcm_set_name+0x2a/0x90 [ 332.128949][ T7781] function_make+0x199/0x350 [ 332.134091][ T7781] configfs_mkdir+0x515/0x9e0 [ 332.139303][ T7781] vfs_mkdir+0x2a5/0x470 [ 332.144076][ T7781] do_mkdirat+0x1dc/0x450 [ 332.148954][ T7781] __x64_sys_mkdir+0x6e/0x80 [ 332.154097][ T7781] do_syscall_64+0x55/0xb0 [ 332.159065][ T7781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.165502][ T7781] [ 332.165502][ T7781] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 332.173804][ T7781] __mutex_lock+0x135/0xc80 [ 332.178876][ T7781] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 332.185608][ T7781] configfs_symlink+0x5a5/0xfe0 [ 332.191027][ T7781] vfs_symlink+0x138/0x2b0 [ 332.195998][ T7781] do_symlinkat+0x1ba/0x400 [ 332.201052][ T7781] __x64_sys_symlink+0x7e/0x90 [ 332.206355][ T7781] do_syscall_64+0x55/0xb0 [ 332.211312][ T7781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.217733][ T7781] [ 332.217733][ T7781] -> #0 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 332.226469][ T7781] __lock_acquire+0x37ef/0x7d80 [ 332.231959][ T7781] lock_acquire+0x19e/0x420 [ 332.237025][ T7781] down_write+0x97/0x200 [ 332.241841][ T7781] configfs_depend_item_unlocked+0x157/0x430 [ 332.248385][ T7781] usbg_make_tpg+0x1f7/0x580 [ 332.253551][ T7781] target_fabric_make_tpg+0xa4/0x6d0 [ 332.259408][ T7781] configfs_mkdir+0x515/0x9e0 [ 332.264647][ T7781] vfs_mkdir+0x2a5/0x470 [ 332.269450][ T7781] do_mkdirat+0x1dc/0x450 [ 332.274336][ T7781] __x64_sys_mkdir+0x6e/0x80 [ 332.279490][ T7781] do_syscall_64+0x55/0xb0 [ 332.284465][ T7781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.290946][ T7781] [ 332.290946][ T7781] other info that might help us debug this: [ 332.290946][ T7781] [ 332.301213][ T7781] Chain exists of: [ 332.301213][ T7781] &sb->s_type->i_mutex_key#21 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 332.301213][ T7781] [ 332.315968][ T7781] Possible unsafe locking scenario: [ 332.315968][ T7781] [ 332.323449][ T7781] CPU0 CPU1 [ 332.328823][ T7781] ---- ---- [ 332.334211][ T7781] lock(&opts->dep_lock); [ 332.338645][ T7781] lock(gadget_subsys.su_mutex); [ 332.346215][ T7781] lock(&opts->dep_lock); [ 332.353153][ T7781] lock(&sb->s_type->i_mutex_key#21); [ 332.358633][ T7781] [ 332.358633][ T7781] *** DEADLOCK *** [ 332.358633][ T7781] [ 332.366902][ T7781] 5 locks held by syz.1.570/7781: [ 332.371978][ T7781] #0: ffff888142adc418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 332.381243][ T7781] #1: ffff888076061fc0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 332.392142][ T7781] #2: ffffffff8db2b830 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 332.401936][ T7781] #3: ffffffff8de58f08 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 332.411607][ T7781] #4: ffff88805c061120 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 332.421119][ T7781] [ 332.421119][ T7781] stack backtrace: [ 332.427032][ T7781] CPU: 0 PID: 7781 Comm: syz.1.570 Not tainted syzkaller #0 [ 332.434316][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.444388][ T7781] Call Trace: [ 332.447673][ T7781] [ 332.450609][ T7781] dump_stack_lvl+0x18c/0x250 [ 332.455312][ T7781] ? load_image+0x420/0x420 [ 332.459832][ T7781] ? show_regs_print_info+0x20/0x20 [ 332.465043][ T7781] ? print_circular_bug+0x12b/0x1a0 [ 332.470252][ T7781] check_noncircular+0x2fc/0x400 [ 332.475215][ T7781] ? look_up_lock_class+0x75/0x140 [ 332.480371][ T7781] ? print_deadlock_bug+0x5d0/0x5d0 [ 332.485612][ T7781] ? lockdep_lock+0xf5/0x230 [ 332.490217][ T7781] ? __lock_acquire+0x357f/0x7d80 [ 332.495262][ T7781] ? _find_first_zero_bit+0xd6/0x100 [ 332.500581][ T7781] __lock_acquire+0x37ef/0x7d80 [ 332.505476][ T7781] ? is_bpf_text_address+0x28f/0x2a0 [ 332.510774][ T7781] ? verify_lock_unused+0x140/0x140 [ 332.516006][ T7781] lock_acquire+0x19e/0x420 [ 332.520534][ T7781] ? configfs_depend_item_unlocked+0x157/0x430 [ 332.526725][ T7781] ? trace_raw_output_contention_end+0xd0/0xd0 [ 332.532901][ T7781] ? __might_sleep+0xe0/0xe0 [ 332.537533][ T7781] ? rcu_is_watching+0x15/0xb0 [ 332.542310][ T7781] ? read_lock_is_recursive+0x20/0x20 [ 332.547709][ T7781] ? trace_contention_end+0x39/0xe0 [ 332.552961][ T7781] ? __mutex_lock+0x30d/0xc80 [ 332.557646][ T7781] ? do_syscall_64+0x55/0xb0 [ 332.562240][ T7781] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.568315][ T7781] down_write+0x97/0x200 [ 332.572573][ T7781] ? configfs_depend_item_unlocked+0x157/0x430 [ 332.578758][ T7781] ? down_read_killable+0x340/0x340 [ 332.584042][ T7781] configfs_depend_item_unlocked+0x157/0x430 [ 332.590091][ T7781] usbg_make_tpg+0x1f7/0x580 [ 332.594803][ T7781] ? usbg_drop_tport+0x20/0x20 [ 332.599627][ T7781] ? vscnprintf+0x80/0x80 [ 332.604010][ T7781] target_fabric_make_tpg+0xa4/0x6d0 [ 332.609327][ T7781] ? target_fabric_release_wwn+0xb0/0xb0 [ 332.614989][ T7781] configfs_mkdir+0x515/0x9e0 [ 332.619717][ T7781] vfs_mkdir+0x2a5/0x470 [ 332.624012][ T7781] do_mkdirat+0x1dc/0x450 [ 332.628365][ T7781] ? vfs_mkdir+0x470/0x470 [ 332.632814][ T7781] ? getname_flags+0x20a/0x500 [ 332.637645][ T7781] __x64_sys_mkdir+0x6e/0x80 [ 332.642263][ T7781] do_syscall_64+0x55/0xb0 [ 332.646711][ T7781] ? clear_bhb_loop+0x40/0x90 [ 332.651405][ T7781] ? clear_bhb_loop+0x40/0x90 [ 332.656099][ T7781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.662014][ T7781] RIP: 0033:0x7f10e679e019 [ 332.666450][ T7781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.686089][ T7781] RSP: 002b:00007f10e759a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 332.694545][ T7781] RAX: ffffffffffffffda RBX: 00007f10e6a25fa0 RCX: 00007f10e679e019 [ 332.702525][ T7781] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 332.710508][ T7781] RBP: 00007f10e683500c R08: 0000000000000000 R09: 0000000000000000 [ 332.718488][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.726464][ T7781] R13: 00007f10e6a26038 R14: 00007f10e6a25fa0 R15: 00007ffe57457138 [ 332.735077][ T7781] [ 332.844689][ T7781] Rounding down aligned max_sectors from 4294967295 to 4294967288