last executing test programs: 43.703205311s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200)={[{@barrier}, {@barrier_val}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@noauto_da_alloc}, {@quota}, {@quota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) 43.068575901s ago: executing program 3 (id=6): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) 41.84289655s ago: executing program 3 (id=14): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) 41.49684167s ago: executing program 32 (id=14): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) 3.348459474s ago: executing program 1 (id=230): r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0xee) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 3.105622822s ago: executing program 1 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x21, 0x1, {0x80000000, 0x80000001, 0x4, 0x4, 0x0, 0x8, 0x5, 0x5ab3, 0x81}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xe, 0x7f, 0x2, 0x400, 0x200}}, {0x4}}]}]}, 0x7c}}, 0x4000010) 2.899677189s ago: executing program 1 (id=237): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)=0x5) read$FUSE(r1, &(0x7f0000008400)={0x2020}, 0x2020) 2.487078501s ago: executing program 0 (id=242): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000800)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x189800, 0x1b0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000009c0)='./file0\x00', 0xa100014c) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)) 2.22296953s ago: executing program 4 (id=244): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/47, 0x2f}}], 0x1, 0x140, 0x0) 2.172296232s ago: executing program 2 (id=245): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x202000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) lseek(r1, 0x40000007, 0x0) 2.040646986s ago: executing program 0 (id=246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4200, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319}}}}}}, 0x0) 1.93073551s ago: executing program 2 (id=247): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.92731575s ago: executing program 4 (id=248): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000000c0)=0xf9, 0x4) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000e8ff060000004404730001000000"], 0x40}, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0xfdef) 1.845398362s ago: executing program 1 (id=249): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.794211763s ago: executing program 0 (id=250): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.675760127s ago: executing program 2 (id=251): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000001200)={0x1008, r1}, 0x0) 1.652299208s ago: executing program 4 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000000001) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x40, 0x0, 0x0) 1.489594593s ago: executing program 0 (id=253): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0x10, 0x0, 0x1, 0x0, 0x0, 0x24048017}, 0x48811) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={r2, 0x9, 0x3, 0x7}, &(0x7f0000000480)=0x10) 1.418385885s ago: executing program 2 (id=254): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) 1.300376419s ago: executing program 0 (id=255): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1.167896413s ago: executing program 2 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @random="dfda55376aa4", @broadcast, @device_b, {0x3, 0xff}}, @a_msdu}}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x2000c000) 1.123506425s ago: executing program 4 (id=257): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read(r0, &(0x7f0000000480)=""/226, 0xe2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 1.105348715s ago: executing program 1 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 923.917501ms ago: executing program 2 (id=259): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '\t\x00'}, @global=@item_012={0x2, 0x1, 0x0, "a844"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, '\x000'}, @local=@item_4={0x3, 0x2, 0x8, "0a52528d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0x2020) 809.498195ms ago: executing program 1 (id=260): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0xffff, 0x0) 734.859177ms ago: executing program 4 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x1019c0, 0x83) pread64(r0, 0x0, 0x0, 0x933) 453.828425ms ago: executing program 4 (id=262): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r1, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r1, 0x894}, {r2}, {r1, 0x900}], 0x3, 0x0, 0x0, 0x0) dup3(r2, r0, 0x0) 0s ago: executing program 0 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 80.018074][ T5762] cgroup: Unknown subsys name 'net' [ 80.152352][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.850400][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.531309][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.541021][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.549099][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.557329][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.566217][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.575132][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.583034][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.590727][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.599982][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.608002][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.615951][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.635625][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.644496][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.654301][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.663614][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.683321][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.698378][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.700286][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.707830][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.715514][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.728109][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.745118][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.755048][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.765397][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.162655][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 84.357002][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 84.371015][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.379292][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.387162][ T5779] bridge_slave_0: entered allmulticast mode [ 84.395025][ T5779] bridge_slave_0: entered promiscuous mode [ 84.410079][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.417374][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.424697][ T5779] bridge_slave_1: entered allmulticast mode [ 84.432390][ T5779] bridge_slave_1: entered promiscuous mode [ 84.449456][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.529115][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.549978][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.564086][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.638416][ T5779] team0: Port device team_slave_0 added [ 84.648308][ T5779] team0: Port device team_slave_1 added [ 84.728672][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.735986][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.743409][ T5774] bridge_slave_0: entered allmulticast mode [ 84.750864][ T5774] bridge_slave_0: entered promiscuous mode [ 84.785852][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.794264][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.801585][ T5774] bridge_slave_1: entered allmulticast mode [ 84.809262][ T5774] bridge_slave_1: entered promiscuous mode [ 84.828003][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.835261][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.861573][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.875845][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.882851][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.909867][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.944642][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.951842][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.959343][ T5780] bridge_slave_0: entered allmulticast mode [ 84.966856][ T5780] bridge_slave_0: entered promiscuous mode [ 84.995715][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.005204][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.012350][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.020984][ T5778] bridge_slave_0: entered allmulticast mode [ 85.028957][ T5778] bridge_slave_0: entered promiscuous mode [ 85.037068][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.045920][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.054078][ T5780] bridge_slave_1: entered allmulticast mode [ 85.061159][ T5780] bridge_slave_1: entered promiscuous mode [ 85.071120][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.108654][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.116304][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.124054][ T5778] bridge_slave_1: entered allmulticast mode [ 85.131104][ T5778] bridge_slave_1: entered promiscuous mode [ 85.174637][ T5774] team0: Port device team_slave_0 added [ 85.186004][ T5774] team0: Port device team_slave_1 added [ 85.218805][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.241969][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.257327][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.269985][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.313578][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.320589][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.353726][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.383377][ T5779] hsr_slave_0: entered promiscuous mode [ 85.389926][ T5779] hsr_slave_1: entered promiscuous mode [ 85.409196][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.416321][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.442517][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.475581][ T5778] team0: Port device team_slave_0 added [ 85.485259][ T5778] team0: Port device team_slave_1 added [ 85.495109][ T5780] team0: Port device team_slave_0 added [ 85.546633][ T5780] team0: Port device team_slave_1 added [ 85.553500][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.560539][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.586806][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.628081][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.635457][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.661782][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.696142][ T5774] hsr_slave_0: entered promiscuous mode [ 85.702689][ T5774] hsr_slave_1: entered promiscuous mode [ 85.709387][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.717592][ T5774] Cannot create hsr debugfs directory [ 85.744101][ T5783] Bluetooth: hci1: command tx timeout [ 85.753183][ T5783] Bluetooth: hci0: command tx timeout [ 85.760837][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.767984][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.794584][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.823188][ T5783] Bluetooth: hci2: command tx timeout [ 85.828842][ T5783] Bluetooth: hci3: command tx timeout [ 85.849417][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.858020][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.884470][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.943158][ T5778] hsr_slave_0: entered promiscuous mode [ 85.950608][ T5778] hsr_slave_1: entered promiscuous mode [ 85.957300][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.965008][ T5778] Cannot create hsr debugfs directory [ 86.072689][ T5780] hsr_slave_0: entered promiscuous mode [ 86.079815][ T5780] hsr_slave_1: entered promiscuous mode [ 86.086684][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.094551][ T5780] Cannot create hsr debugfs directory [ 86.413686][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.440561][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.454746][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.488743][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.534554][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.550579][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.562220][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.575127][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.676816][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.701437][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.712002][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.726406][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.834539][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.849904][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.860561][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.884604][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.967158][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.996002][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.011313][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.018748][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.073608][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.096601][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.103870][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.237033][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.315648][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.322859][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.339640][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.346900][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.401797][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.480184][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.530359][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.537623][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.579567][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.621349][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.628616][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.758867][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.824742][ T5783] Bluetooth: hci0: command tx timeout [ 87.830236][ T5783] Bluetooth: hci1: command tx timeout [ 87.847734][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.854979][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.903481][ T5783] Bluetooth: hci3: command tx timeout [ 87.908973][ T5783] Bluetooth: hci2: command tx timeout [ 87.937034][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.973750][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.981058][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.060949][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.132537][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.231201][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.286673][ T5779] veth0_vlan: entered promiscuous mode [ 88.329531][ T5779] veth1_vlan: entered promiscuous mode [ 88.425927][ T5774] veth0_vlan: entered promiscuous mode [ 88.472466][ T5774] veth1_vlan: entered promiscuous mode [ 88.528710][ T5779] veth0_macvtap: entered promiscuous mode [ 88.582798][ T5779] veth1_macvtap: entered promiscuous mode [ 88.600886][ T5774] veth0_macvtap: entered promiscuous mode [ 88.630265][ T5774] veth1_macvtap: entered promiscuous mode [ 88.646739][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.687471][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.712721][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.739827][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.755022][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.766952][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.780032][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.795732][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.811115][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.822445][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.848653][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.857806][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.867646][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.877074][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.908450][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.918679][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.927783][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.937305][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.024713][ T5780] veth0_vlan: entered promiscuous mode [ 89.034176][ T5778] veth0_vlan: entered promiscuous mode [ 89.062462][ T5780] veth1_vlan: entered promiscuous mode [ 89.080809][ T5778] veth1_vlan: entered promiscuous mode [ 89.219087][ T5780] veth0_macvtap: entered promiscuous mode [ 89.231036][ T5780] veth1_macvtap: entered promiscuous mode [ 89.238865][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.247835][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.280490][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.296986][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.371008][ T5778] veth0_macvtap: entered promiscuous mode [ 89.393663][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.401555][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.412462][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.417914][ T5778] veth1_macvtap: entered promiscuous mode [ 89.428626][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.437055][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.445304][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.456395][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.468832][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.481841][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.531478][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.552739][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.562760][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.576713][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.588069][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.598728][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.625144][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.650158][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.667634][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.681495][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.696558][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.710710][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.731273][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.741847][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.751803][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.762611][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.772544][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.787391][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.799066][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.812715][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.825422][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.838704][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.847784][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.870646][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903619][ T5783] Bluetooth: hci1: command tx timeout [ 89.909105][ T5783] Bluetooth: hci0: command tx timeout [ 89.933221][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.941988][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.983683][ T5777] Bluetooth: hci3: command tx timeout [ 89.989241][ T5783] Bluetooth: hci2: command tx timeout [ 89.993397][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.053346][ T5846] syz.3.4[5846]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.082502][ T5846] loop3: detected capacity change from 0 to 1024 [ 90.092039][ T5846] EXT4-fs: Ignoring removed bh option [ 90.135902][ T5846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.173417][ T5845] Illegal XDP return value 4213191684 on prog (id 2) dev syz_tun, expect packet loss! [ 90.329844][ T5851] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.4: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 90.369442][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.392555][ T5851] EXT4-fs (loop3): Remounting filesystem read-only [ 90.418264][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.450311][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.467055][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.521325][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.553029][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.627638][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.646884][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.723316][ T5817] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.790061][ T5855] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.933611][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 90.955443][ T5817] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 90.967766][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.978314][ T5817] usb 2-1: Product: syz [ 90.982544][ T5817] usb 2-1: Manufacturer: syz [ 90.995185][ T5817] usb 2-1: SerialNumber: syz [ 91.011418][ T5817] usb 2-1: config 0 descriptor?? [ 91.046455][ T5817] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 91.058856][ T5817] usb 2-1: Detected FT-X [ 91.283892][ T5817] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 91.638443][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.718068][ T5817] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.734389][ T2971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.984477][ T5777] Bluetooth: hci1: command tx timeout [ 91.991741][ T5764] usb 2-1: USB disconnect, device number 2 [ 91.992166][ T5783] Bluetooth: hci0: command tx timeout [ 92.048799][ T5764] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.063662][ T5783] Bluetooth: hci2: command tx timeout [ 92.087798][ T5764] ftdi_sio 2-1:0.0: device disconnected [ 92.154959][ T788] cfg80211: failed to load regulatory.db [ 92.260843][ T2971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.542787][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.563840][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.573762][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.598612][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.607332][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.626183][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.736845][ T2971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.909206][ T2971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.125158][ T5894] netlink: 104 bytes leftover after parsing attributes in process `syz.0.23'. [ 93.538101][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 93.583102][ T5841] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.789675][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.821458][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.841404][ T5890] loop2: detected capacity change from 0 to 32768 [ 93.859680][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.880944][ T5841] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.895469][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.928379][ T5841] usb 2-1: config 0 descriptor?? [ 93.998076][ T5912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'. [ 94.022086][ T5912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'. [ 94.397612][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.413912][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.429568][ T5880] bridge_slave_0: entered allmulticast mode [ 94.456186][ T5841] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 94.465278][ T5880] bridge_slave_0: entered promiscuous mode [ 94.474441][ T5841] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.492151][ T5841] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.510258][ T5841] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.528708][ T5841] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.544878][ T5841] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 94.565478][ T5841] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 94.577272][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.594261][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.603916][ T5880] bridge_slave_1: entered allmulticast mode [ 94.621283][ T5880] bridge_slave_1: entered promiscuous mode [ 94.638780][ T5841] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.706199][ T5783] Bluetooth: hci3: command tx timeout [ 94.875749][ T3383] usb 2-1: USB disconnect, device number 3 [ 94.957099][ T5931] loop0: detected capacity change from 0 to 16 [ 94.981165][ T5927] fido_id[5927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 95.028083][ T5931] erofs: (device loop0): mounted with root inode @ nid 36. [ 95.054462][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.114302][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.192267][ T5931] syz.0.31: attempt to access beyond end of device [ 95.192267][ T5931] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 95.233380][ T5931] syz.0.31: attempt to access beyond end of device [ 95.233380][ T5931] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 95.270435][ T5931] syz.0.31: attempt to access beyond end of device [ 95.270435][ T5931] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 95.392712][ T5880] team0: Port device team_slave_0 added [ 95.606546][ T5880] team0: Port device team_slave_1 added [ 95.736361][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.763580][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.790518][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.804573][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.811677][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.840987][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.003475][ T3383] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.151137][ T5880] hsr_slave_0: entered promiscuous mode [ 96.194257][ T5880] hsr_slave_1: entered promiscuous mode [ 96.214349][ T3383] usb 2-1: Using ep0 maxpacket: 8 [ 96.220221][ T5880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.253130][ T3383] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.253354][ T5880] Cannot create hsr debugfs directory [ 96.280175][ T3383] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.329897][ T3383] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 96.371593][ T2971] hsr_slave_0: left promiscuous mode [ 96.377401][ T3383] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 96.392425][ T2971] hsr_slave_1: left promiscuous mode [ 96.411035][ T3383] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 96.421981][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.436831][ T3383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.447083][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.474365][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.494776][ T3383] hub 2-1:1.0: bad descriptor, ignoring hub [ 96.500767][ T3383] hub: probe of 2-1:1.0 failed with error -5 [ 96.511474][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.543706][ T3383] cdc_wdm 2-1:1.0: skipping garbage [ 96.548997][ T3383] cdc_wdm 2-1:1.0: skipping garbage [ 96.555333][ T2971] bridge_slave_1: left allmulticast mode [ 96.570092][ T2971] bridge_slave_1: left promiscuous mode [ 96.580555][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.607188][ T3383] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 96.613968][ T3383] cdc_wdm 2-1:1.0: Unknown control protocol [ 96.624817][ T2971] bridge_slave_0: left allmulticast mode [ 96.637575][ T2971] bridge_slave_0: left promiscuous mode [ 96.657321][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.716103][ T2971] veth1_macvtap: left promiscuous mode [ 96.722455][ T2971] veth0_macvtap: left promiscuous mode [ 96.728546][ T2971] veth1_vlan: left promiscuous mode [ 96.734818][ T2971] veth0_vlan: left promiscuous mode [ 96.783747][ T5783] Bluetooth: hci3: command tx timeout [ 97.702205][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 97.752429][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 97.801793][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.857493][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.230883][ T2971] bond0 (unregistering): Released all slaves [ 98.611116][ T5979] loop0: detected capacity change from 0 to 512 [ 98.644392][ T5979] EXT4-fs: Ignoring removed bh option [ 98.678373][ T5979] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 98.766693][ T5979] EXT4-fs (loop0): 1 truncate cleaned up [ 98.814744][ T5979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.856823][ T5815] usb 2-1: USB disconnect, device number 4 [ 98.868037][ T5783] Bluetooth: hci3: command tx timeout [ 98.963301][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.986915][ T5979] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.44: bg 0: block 465: padding at end of block bitmap is not set [ 99.050497][ T5988] netlink: 'syz.2.46': attribute type 12 has an invalid length. [ 99.059050][ T5979] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 99.088422][ T5988] netlink: 'syz.2.46': attribute type 29 has an invalid length. [ 99.098441][ T5979] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.098441][ T5979] [ 99.123469][ T5988] netlink: 148 bytes leftover after parsing attributes in process `syz.2.46'. [ 99.132639][ T5988] netlink: 'syz.2.46': attribute type 2 has an invalid length. [ 99.142661][ T5979] EXT4-fs (loop0): Total free blocks count 0 [ 99.154128][ T5979] EXT4-fs (loop0): Free/Dirty block details [ 99.163337][ T5988] netlink: 'syz.2.46': attribute type 3 has an invalid length. [ 99.173140][ T5979] EXT4-fs (loop0): free_blocks=0 [ 99.185739][ T5979] EXT4-fs (loop0): dirty_blocks=2 [ 99.196117][ T5979] EXT4-fs (loop0): Block reservation details [ 99.214060][ T5979] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 99.286654][ T5880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.361728][ T5880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.434404][ T2960] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.462288][ T5880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.508995][ T5880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.898202][ T6013] loop0: detected capacity change from 0 to 8 [ 99.918831][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.999154][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.030948][ T6013] process 'syz.0.52' launched './file1' with NULL argv: empty string added [ 100.115807][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.123093][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.165084][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.172428][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.349621][ T23] IPVS: starting estimator thread 0... [ 100.473199][ T6022] IPVS: using max 22 ests per chain, 52800 per kthread [ 100.960007][ T5783] Bluetooth: hci3: command tx timeout [ 101.036878][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.255159][ T6046] ======================================================= [ 101.255159][ T6046] WARNING: The mand mount option has been deprecated and [ 101.255159][ T6046] and is ignored by this kernel. Remove the mand [ 101.255159][ T6046] option from the mount to silence this warning. [ 101.255159][ T6046] ======================================================= [ 101.609460][ T6026] loop0: detected capacity change from 0 to 32768 [ 101.783772][ T6026] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 102.033006][ T5880] veth0_vlan: entered promiscuous mode [ 102.107406][ T6026] XFS (loop0): Ending clean mount [ 102.107999][ T5880] veth1_vlan: entered promiscuous mode [ 102.156621][ T6026] XFS (loop0): Quotacheck needed: Please wait. [ 102.164890][ T6037] loop1: detected capacity change from 0 to 32768 [ 102.239645][ T5880] veth0_macvtap: entered promiscuous mode [ 102.316956][ T5880] veth1_macvtap: entered promiscuous mode [ 102.343069][ T6026] XFS (loop0): Quotacheck: Done. [ 102.486088][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.533131][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.559072][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.590050][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.610327][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.640481][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.652689][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.711623][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.739406][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.768602][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.803113][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.838744][ T5880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.857484][ T5880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.895118][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.910026][ T5778] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.014418][ T5880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.077555][ T5880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.120779][ T5880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.143221][ T5880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.511205][ T6085] loop1: detected capacity change from 0 to 128 [ 103.531572][ T6085] EXT4-fs: Ignoring removed i_version option [ 103.574399][ T6085] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.616589][ T6085] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.658738][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.723901][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.736038][ T6085] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 20: comm syz.1.68: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 103.839223][ T6085] EXT4-fs (loop1): Remounting filesystem read-only [ 103.860453][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.908730][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.936259][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.912958][ C0] sched: RT throttling activated [ 105.142500][ T6097] loop0: detected capacity change from 0 to 131072 [ 105.165914][ T6097] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 105.173037][ T6097] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 105.199270][ T6097] F2FS-fs (loop0): invalid crc value [ 105.244976][ T6097] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.309206][ T6097] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 105.316889][ T6097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 105.482305][ T28] audit: type=1800 audit(1780310840.242:2): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.69" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 105.554328][ T6120] netlink: 7 bytes leftover after parsing attributes in process `syz.2.73'. [ 105.601171][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'. [ 105.637788][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'. [ 105.902170][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 107.113310][ T5815] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.211101][ T6134] loop2: detected capacity change from 0 to 32768 [ 107.224828][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 107.265035][ T6134] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.78 (6134) [ 107.354123][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 107.365670][ T6134] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 107.411893][ T5815] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.423854][ T6134] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 107.432588][ T6134] BTRFS info (device loop2): enabling ssd optimizations [ 107.447992][ T5815] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.476894][ T5815] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.496479][ T6134] BTRFS info (device loop2): not using ssd optimizations [ 107.517488][ T6134] BTRFS info (device loop2): turning off barriers [ 107.533537][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.543269][ T6134] BTRFS info (device loop2): using free space tree [ 107.572813][ T5815] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 107.593569][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.655883][ T5815] usb 5-1: config 0 descriptor?? [ 108.088959][ T5815] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 108.119576][ T5815] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 108.129305][ T5815] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 108.149586][ T5815] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 108.170619][ T5815] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 108.191154][ T5780] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 108.209135][ T5815] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 108.237407][ T5815] gt683r_led 0003:1770:FF00.0002: invalid report_count 55463 [ 108.273333][ T5815] gt683r_led 0003:1770:FF00.0002: item 0 2 1 9 parsing failed [ 108.302888][ T5815] gt683r_led 0003:1770:FF00.0002: hid parsing failed [ 108.352220][ T5815] gt683r_led: probe of 0003:1770:FF00.0002 failed with error -22 [ 108.410543][ T5815] usb 5-1: USB disconnect, device number 2 [ 110.448068][ T6203] loop2: detected capacity change from 0 to 32768 [ 111.669499][ T6244] netlink: 428 bytes leftover after parsing attributes in process `syz.1.98'. [ 111.709661][ T6244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.98'. [ 112.007991][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 112.038409][ T6257] Zero length message leads to an empty skb [ 112.178573][ T6260] loop0: detected capacity change from 0 to 512 [ 112.215198][ T6260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.256045][ T6260] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.305761][ T6260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.382407][ T6260] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.104: bad orphan inode 131083 [ 112.530640][ T6260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.561665][ T6277] netlink: 'syz.2.111': attribute type 39 has an invalid length. [ 112.702447][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.073423][ T6291] gre0: entered promiscuous mode [ 113.078551][ T6291] gre0: entered allmulticast mode [ 114.058511][ T6320] loop1: detected capacity change from 0 to 1024 [ 114.127419][ T6320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.183770][ T6300] loop4: detected capacity change from 0 to 32768 [ 114.201225][ T6320] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.230277][ T6300] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 114.346119][ T6300] XFS (loop4): Ending clean mount [ 114.412758][ T6318] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.128: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.447721][ T6320] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.128: Freeing blocks not in datazone - block = 0, count = 1 [ 114.463514][ T6300] XFS (loop4): User initiated shutdown received. [ 114.470321][ T6300] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 114.485736][ T6300] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 114.634801][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.656144][ T3383] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.808048][ T5880] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 114.877220][ T3383] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.898681][ T3383] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 114.938603][ T3383] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.981821][ T3383] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 115.003690][ T3383] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.036126][ T3383] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.055717][ T3383] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.091509][ T3383] usb 1-1: Product: syz [ 115.096196][ T3383] usb 1-1: Manufacturer: syz [ 115.134571][ T3383] cdc_wdm 1-1:1.0: skipping garbage [ 115.157124][ T3383] cdc_wdm 1-1:1.0: skipping garbage [ 115.188460][ T3383] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 115.203125][ T3383] cdc_wdm 1-1:1.0: Unknown control protocol [ 115.628297][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 115.635288][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.642137][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.652004][ T6357] loop2: detected capacity change from 0 to 4096 [ 115.652910][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.665018][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.672791][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.679446][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.687506][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.694171][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.700588][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.707243][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.713662][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 115.720317][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 115.726440][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 115.735355][ T5815] usb 1-1: USB disconnect, device number 2 [ 115.936684][ T6347] loop1: detected capacity change from 0 to 32768 [ 115.974613][ T6347] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 116.059681][ T6347] XFS (loop1): Ending clean mount [ 116.163313][ T6367] batadv_slave_1: entered promiscuous mode [ 116.175117][ T6366] batadv_slave_1: left promiscuous mode [ 116.335222][ T5774] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 116.456092][ T6371] loop2: detected capacity change from 0 to 2048 [ 116.482012][ T6371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.564946][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.668714][ T28] audit: type=1804 audit(1780310851.422:3): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.141" name="/newroot/49/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 116.993936][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.039690][ T6391] loop4: detected capacity change from 0 to 256 [ 117.184142][ T6391] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 118.021526][ T6409] loop4: detected capacity change from 0 to 8192 [ 118.049472][ T6409] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 118.111354][ T6409] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 118.194746][ T6409] REISERFS (device loop4): using ordered data mode [ 118.232365][ T6409] reiserfs: using flush barriers [ 118.283341][ T6409] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.374426][ T6409] REISERFS (device loop4): checking transaction log (loop4) [ 118.398241][ T6409] REISERFS (device loop4): Using r5 hash to sort names [ 118.398724][ T6409] REISERFS (device loop4): using 3.5.x disk format [ 118.405938][ T6409] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 118.549855][ T6438] loop1: detected capacity change from 0 to 4096 [ 118.574008][ T6438] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.651363][ T6438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.803628][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.673072][ T6468] veth0: entered allmulticast mode [ 119.743163][ T5783] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 120.147751][ T6477] loop2: detected capacity change from 0 to 4096 [ 120.200483][ T6477] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 120.314772][ T6477] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 120.355578][ T6477] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 120.405306][ T6477] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 120.488806][ T6487] loop0: detected capacity change from 0 to 512 [ 120.520541][ T6487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.551430][ T5789] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.594714][ T6487] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.178: iget: bad i_size value: 38620345925642 [ 120.736710][ T6487] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.178: couldn't read orphan inode 15 (err -117) [ 120.786310][ T6487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.231763][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.616404][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 122.057521][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 122.513099][ T5815] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.734344][ T5815] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 122.751891][ T5815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.763352][ T5815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.800599][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 122.816882][ T5815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.837236][ T5815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.856891][ T5816] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.874264][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 122.892725][ T5815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.912149][ T5815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.933901][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 122.953177][ T5815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.962637][ T5815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.988891][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.004665][ T5815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.028291][ T5815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.053000][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.075828][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.099355][ T5815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.111007][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.141422][ T5815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.153844][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.173011][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.190179][ T5816] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.200873][ T5815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.216909][ T5815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.228354][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.254658][ T5816] usb 1-1: config 0 descriptor?? [ 123.270439][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.297693][ T5815] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.313192][ T5815] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.326015][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.336650][ T5815] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.346888][ T5815] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.366890][ T5815] usb 5-1: Product: syz [ 123.378625][ T5815] usb 5-1: Manufacturer: syz [ 123.383920][ T5815] usb 5-1: SerialNumber: syz [ 123.410925][ T5815] usb 5-1: config 0 descriptor?? [ 123.450554][ T5815] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 123.605533][ T6534] loop1: detected capacity change from 0 to 40427 [ 123.632414][ T6534] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.663642][ T6534] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.725131][ T5816] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 123.738141][ T6534] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.782841][ T5816] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 123.855315][ T9] usb 5-1: USB disconnect, device number 3 [ 123.891409][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 123.991225][ T6534] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 124.023209][ T6534] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.054748][ T5816] usb 1-1: USB disconnect, device number 3 [ 124.130783][ T6554] fido_id[6554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 124.305363][ T6562] syz.2.202 uses obsolete (PF_INET,SOCK_PACKET) [ 124.576403][ T5774] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 124.595187][ T5774] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 124.602832][ T5774] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 124.646904][ T5774] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 124.657046][ T5774] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 124.687908][ T5774] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 124.720183][ T5774] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 124.915421][ T6575] loop4: detected capacity change from 0 to 1024 [ 124.975406][ T6575] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 125.009952][ T6579] loop2: detected capacity change from 0 to 512 [ 125.073173][ T6579] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.176254][ T6579] EXT4-fs (loop2): 1 truncate cleaned up [ 125.210250][ T6579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.363101][ T5841] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.584259][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 125.597745][ T5841] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 125.617382][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.627445][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.657856][ T5841] usb 1-1: Product: syz [ 125.662120][ T5841] usb 1-1: Manufacturer: syz [ 125.693009][ T5841] usb 1-1: SerialNumber: syz [ 125.714819][ T5841] usb 1-1: config 0 descriptor?? [ 126.204976][ T5841] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 126.258016][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.288802][ T5841] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 126.308684][ T5841] usb 1-1: media controller created [ 126.365998][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.415237][ T6581] dtv5100: wlen = 0, aborting. [ 126.458435][ T5841] zl10353_read_register: readreg error (reg=127, ret==0) [ 126.465813][ T5841] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 126.474133][ T5841] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 126.488562][ T5841] usb 1-1: USB disconnect, device number 4 [ 126.616569][ T5841] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 126.670561][ T5816] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.883153][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 126.904806][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.921789][ T5816] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.932168][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.956378][ T5816] usb 2-1: config 0 descriptor?? [ 126.966839][ T5816] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 127.220739][ T5815] usb 2-1: USB disconnect, device number 5 [ 127.225926][ T6630] vlan2: entered allmulticast mode [ 127.261883][ T6630] bond0: entered allmulticast mode [ 127.274828][ T6630] bond_slave_0: entered allmulticast mode [ 127.285748][ T6630] bond_slave_1: entered allmulticast mode [ 127.372606][ T6632] netlink: 14 bytes leftover after parsing attributes in process `syz.2.218'. [ 127.515086][ T6632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.524705][ T6632] bond_slave_0: left allmulticast mode [ 127.543646][ T6632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.556449][ T6632] bond_slave_1: left allmulticast mode [ 127.579698][ T6632] bond0 (unregistering): Released all slaves [ 127.703386][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.914388][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 127.925070][ T9] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 127.970034][ T9] usb 1-1: config 0 has no interface number 0 [ 127.992017][ T9] usb 1-1: config 0 interface 101 has no altsetting 0 [ 128.023553][ T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 128.043302][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.051920][ T9] usb 1-1: Product: syz [ 128.065295][ T9] usb 1-1: Manufacturer: syz [ 128.069981][ T9] usb 1-1: SerialNumber: syz [ 128.118278][ T9] usb 1-1: config 0 descriptor?? [ 128.164667][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 128.483388][ T6654] loop2: detected capacity change from 0 to 1024 [ 128.514740][ T6654] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 128.514740][ T6654] [ 129.066103][ T9] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 129.718103][ T9] gspca_se401: read req failed req 0x06 error -71 [ 129.743293][ T9] se401: probe of 1-1:0.101 failed with error -71 [ 129.777240][ T9] usb 1-1: USB disconnect, device number 5 [ 131.236337][ T6721] loop0: detected capacity change from 0 to 256 [ 131.991003][ T6744] netlink: 'syz.1.249': attribute type 12 has an invalid length. [ 132.037564][ T6744] netlink: 'syz.1.249': attribute type 29 has an invalid length. [ 132.082301][ T6744] netlink: 148 bytes leftover after parsing attributes in process `syz.1.249'. [ 132.153250][ T6744] netlink: 59 bytes leftover after parsing attributes in process `syz.1.249'. [ 132.994917][ T28] audit: type=1326 audit(1780310867.752:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.1.260" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdedb79ce59 code=0x0 [ 133.043064][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 133.108004][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.123197][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.243074][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 133.257457][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.277850][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.301117][ T6761] loop0: detected capacity change from 0 to 32768 [ 133.311337][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.338464][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.351854][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.368369][ T23] usb 3-1: config 0 descriptor?? [ 133.494544][ T6761] UFO tlock:0xffffc9000286a168 [ 133.617257][ T112] list_add corruption. next is NULL. [ 133.623563][ T112] ------------[ cut here ]------------ [ 133.629082][ T112] kernel BUG at lib/list_debug.c:28! [ 133.634455][ T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 133.640582][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 133.647912][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.658108][ T112] RIP: 0010:__list_add_valid_or_report+0xba/0xf0 [ 133.664509][ T112] Code: 4c 89 fe 4c 89 f2 48 89 d9 e8 12 21 4b 06 0f 0b 48 c7 c7 e0 9a 1c 8b e8 04 21 4b 06 0f 0b 48 c7 c7 80 9b 1c 8b e8 f6 20 4b 06 <0f> 0b 48 c7 c7 e0 9b 1c 8b 4c 89 f6 48 89 d9 e8 e2 20 4b 06 0f 0b [ 133.684196][ T112] RSP: 0018:ffffc900025c7c70 EFLAGS: 00010046 [ 133.690324][ T112] RAX: 0000000000000022 RBX: 0000000000000000 RCX: e59a820d74193500 [ 133.698633][ T112] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 133.706747][ T112] RBP: ffff88802bf2dd90 R08: ffffc900025c7967 R09: 1ffff920004b8f2c [ 133.714769][ T112] R10: dffffc0000000000 R11: fffff520004b8f2d R12: ffffc90002649340 [ 133.722796][ T112] R13: 0000000000000000 R14: ffff88802bf2de40 R15: ffff88802bf2dda0 [ 133.730827][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 133.739895][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.746533][ T112] CR2: 00007fff7d9690c0 CR3: 0000000063558000 CR4: 00000000003506f0 [ 133.754553][ T112] Call Trace: [ 133.757888][ T112] [ 133.760864][ T112] diUpdatePMap+0x62d/0xe50 [ 133.765417][ T112] txUpdateMap+0x6c2/0x890 [ 133.769918][ T112] jfs_lazycommit+0x429/0xa70 [ 133.774665][ T112] ? txFreelock+0x5a0/0x5a0 [ 133.779238][ T112] ? do_task_dead+0xd0/0xd0 [ 133.783794][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 133.788791][ T112] kthread+0x2fa/0x390 [ 133.792914][ T112] ? txFreelock+0x5a0/0x5a0 [ 133.797464][ T112] ? kthread_blkcg+0xd0/0xd0 [ 133.802102][ T112] ret_from_fork+0x48/0x80 [ 133.806575][ T112] ? kthread_blkcg+0xd0/0xd0 [ 133.811214][ T112] ret_from_fork_asm+0x11/0x20 [ 133.816035][ T112] [ 133.819092][ T112] Modules linked in: [ 133.823044][ T112] ---[ end trace 0000000000000000 ]--- [ 133.828536][ T112] RIP: 0010:__list_add_valid_or_report+0xba/0xf0 [ 133.834908][ T112] Code: 4c 89 fe 4c 89 f2 48 89 d9 e8 12 21 4b 06 0f 0b 48 c7 c7 e0 9a 1c 8b e8 04 21 4b 06 0f 0b 48 c7 c7 80 9b 1c 8b e8 f6 20 4b 06 <0f> 0b 48 c7 c7 e0 9b 1c 8b 4c 89 f6 48 89 d9 e8 e2 20 4b 06 0f 0b [ 133.854573][ T112] RSP: 0018:ffffc900025c7c70 EFLAGS: 00010046 [ 133.860695][ T112] RAX: 0000000000000022 RBX: 0000000000000000 RCX: e59a820d74193500 [ 133.868708][ T112] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 133.876720][ T112] RBP: ffff88802bf2dd90 R08: ffffc900025c7967 R09: 1ffff920004b8f2c [ 133.884741][ T112] R10: dffffc0000000000 R11: fffff520004b8f2d R12: ffffc90002649340 [ 133.892769][ T112] R13: 0000000000000000 R14: ffff88802bf2de40 R15: ffff88802bf2dda0 [ 133.900793][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 133.909772][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.916387][ T112] CR2: 00007fff7d9690c0 CR3: 0000000063558000 CR4: 00000000003506f0 [ 133.924518][ T112] Kernel panic - not syncing: Fatal exception [ 133.930803][ T112] Kernel Offset: disabled [ 133.935154][ T112] Rebooting in 86400 seconds..