last executing test programs: 5.575610124s ago: executing program 1 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0xc0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/195, 0xc3) 5.435949638s ago: executing program 1 (id=253): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvzLZF+VVEROWHVNHY+KOlBZWDF43eNDHRA15MalsIslBDSyKEaDUGj4bEu/FkjP4FnvRi1JOJV70bEqLEBPSga2Z2prSlu9Cyyy7u55PM9r2dt/ved2fezJt53Q2gZw1lD0nExoj4JSIG69mlBYbqf65cOjv516Wzk0nUaq/+nuTlLl86O1kWLV+3ocgMpxHph0lRyVKzp88cm6hWp08W+dG542+Pzp4+8+TR4xNHpo9Mnxg/ePDA/rFnnh5/qiVxZnFd3vHuzK6k7/XzL08eOv/mD1/1RcT23fX1i+O4KemGheRQFvgftdzyYo+0pLLusWlROunrYENYlUpEZJurP+//g1GJqxtvMF78oKONA9oqOzeta7x6vgb8jyXR6RYAnVGe6LPr33K5RUOPrnDxufoFUBb3lWKpr+mLtCjT38b674uIQ/N/f5otUWyHfza2sUIAoOd9k41/nlhp/JfG9kXlNhdzKFsi4q6I2BoRd0fEtoi4JyIve28xnlmN+tRQZSF/7fgzvbDm4G5ANv57tpjbWjr+q4/+arXav5UitymPvz85fLQ6va/4TIajf12WH2tSx7cv/Pxxo3VDi8Z/2ZLVX44Fi3Zc6Ft2g25qYm6iVYPSi+9H7OhbKf5kYSYgiYj7I2LH6t56c5k4+tgXuxoVun78TbRgnqn2WcSj9e0/H8viLyXN5ydH74jq9L7Rcq+41o8/nXulUf03FX8LZNt//dL9f1mJwT+TxfO1s6uv49yvHzW8plzr/j+QvJbPWQ8Uz70zMTd3cixiIHkpzy95fvzqa8t8WT6Lf3jvyv1/a/GaLP6dEZHtxLsj4oGI2FO0/cGIeCgi9jaJ//vnH35r7fG3Vxb/1IrHv4X9f8vS7b/6ROXYd183qv/Gtv+BPDVcPJMf/66jcXOiOp0d1te8NwMAAMDtJ42IjZGkIwvpNB0Zqf8P/7ZYn1ZnZucePzxz6sRU/TsCW6I/Le90DRb3Q7Or7bFkvnjH+v3R8eJecXm/dH9x3/iTyp15fmRypjrV4dih121o0P8zv1U63Tqg7XxfC3rX8v6fdqgdwK3n/A+9S/+H3qX/Q+9a1P+/PHVuZ554L3/cs7BixbmAJr8cAtwenP+hd+n/0Lv0f+hd+j/0pJv5Xn93Jwa6oxmrT3ze3xXNuF4i0mZl3ohb3rDoio+l1Ymk6Y9ZtDHR6SMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD//ys68O0=") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{}, {0x2, 0x3}, {0x2, 0x7}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x5}, [{0x8, 0x2}, {0x8, 0x3}], {}, {0x20, 0x3}}, 0x5c, 0x3) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0xffffe1ac, 0x8, 0x6, 0x7}) 5.072209308s ago: executing program 1 (id=255): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x322, 0x4c, 0x9, 0x5, 0xfb, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 4.041252647s ago: executing program 1 (id=262): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000a40)='NX.', 0x3}, {0x0}], 0x2) 3.248253309s ago: executing program 2 (id=270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 3.093495834s ago: executing program 2 (id=271): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0xcc, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x53}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb25d35777cbafc1426174f08076f8d7843e4010880"], 0x22c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.950301568s ago: executing program 2 (id=273): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2000021, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 2.479170771s ago: executing program 2 (id=275): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 2.220496908s ago: executing program 1 (id=276): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)={0x20, 0xe, 0x4c, "53bc2a96c75340f0534fd4a7529b625f5937e927684011593689d887dbdcfc57acda427de89c59dc359be10cca4c76ef364b67ab90ca3400fa0f7feda6d49421931e3c7d8c94bec99d73b179"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x89, 0x2}}) 1.692762973s ago: executing program 0 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b804c0001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 1.690605383s ago: executing program 2 (id=280): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) 1.264514515s ago: executing program 0 (id=281): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d03420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0) 1.104909839s ago: executing program 0 (id=282): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x6c}}, 0x4004800) 1.040351841s ago: executing program 3 (id=283): socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) 753.30061ms ago: executing program 3 (id=284): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast1}], 0x10) sendmmsg$inet6(r0, &(0x7f00000032c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000340)='n', 0x1}], 0x1}}], 0x1, 0x40044) 591.601954ms ago: executing program 0 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 555.666085ms ago: executing program 3 (id=286): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6000, 0x390, 0x420, 0x98, 0x130, 0x130, 0x508, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@loopback, @local, 0xffffff00, 0xff, 'veth0\x00', 'nicvf0\x00', {}, {0xff}, 0x5e, 0x6, 0x1e}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffff00, 'batadv0\x00', 'pimreg0\x00', {}, {}, 0x67, 0x1, 0x49}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_bridge\x00', 'pim6reg\x00', {}, {}, 0x5e, 0x0, 0x65}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xa8}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x80}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 479.225987ms ago: executing program 3 (id=287): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 311.367282ms ago: executing program 0 (id=288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c004010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b800000015000501"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 227.626574ms ago: executing program 3 (id=289): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 143.189277ms ago: executing program 1 (id=290): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x40, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x2]}}}}]}, 0x88}}, 0x0) 84.890238ms ago: executing program 2 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) 14.23998ms ago: executing program 3 (id=292): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000200)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x3) 0s ago: executing program 0 (id=293): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. syzkaller login: [ 76.925091][ T5760] cgroup: Unknown subsys name 'net' [ 77.028795][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.692024][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.277900][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.287252][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.295370][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.303624][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.311556][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.321791][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.330450][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.342735][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.360267][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.380522][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.388327][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.402858][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.410198][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.419088][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.433136][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.443144][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.452374][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.460510][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.468613][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.468969][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.483808][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.493039][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.500910][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.508302][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.993985][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.032571][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.045895][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 81.142696][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 81.263926][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.271726][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.279007][ T5775] bridge_slave_0: entered allmulticast mode [ 81.287598][ T5775] bridge_slave_0: entered promiscuous mode [ 81.307104][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.314335][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.321752][ T5775] bridge_slave_1: entered allmulticast mode [ 81.328896][ T5775] bridge_slave_1: entered promiscuous mode [ 81.353935][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.361154][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.368468][ T5772] bridge_slave_0: entered allmulticast mode [ 81.375837][ T5772] bridge_slave_0: entered promiscuous mode [ 81.394046][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.404289][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.411557][ T5772] bridge_slave_1: entered allmulticast mode [ 81.418574][ T5772] bridge_slave_1: entered promiscuous mode [ 81.441778][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.448981][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.456440][ T5777] bridge_slave_0: entered allmulticast mode [ 81.464248][ T5777] bridge_slave_0: entered promiscuous mode [ 81.522884][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.530245][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.537410][ T5777] bridge_slave_1: entered allmulticast mode [ 81.544602][ T5777] bridge_slave_1: entered promiscuous mode [ 81.565116][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.578018][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.590871][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.602552][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.653941][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.661549][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.669163][ T5779] bridge_slave_0: entered allmulticast mode [ 81.676394][ T5779] bridge_slave_0: entered promiscuous mode [ 81.686482][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.712213][ T5772] team0: Port device team_slave_0 added [ 81.728654][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.735940][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.743426][ T5779] bridge_slave_1: entered allmulticast mode [ 81.751280][ T5779] bridge_slave_1: entered promiscuous mode [ 81.760427][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.783009][ T5772] team0: Port device team_slave_1 added [ 81.802299][ T5775] team0: Port device team_slave_0 added [ 81.836105][ T5777] team0: Port device team_slave_0 added [ 81.844081][ T5775] team0: Port device team_slave_1 added [ 81.876378][ T5777] team0: Port device team_slave_1 added [ 81.905397][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.926558][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.934055][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.960337][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.983626][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.990759][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.017099][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.031215][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.051508][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.058496][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.085360][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.113856][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.123239][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.149859][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.182133][ T5779] team0: Port device team_slave_0 added [ 82.191450][ T5779] team0: Port device team_slave_1 added [ 82.210335][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.217322][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.243897][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.256948][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.264084][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.290073][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.340924][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.347925][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.373906][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.386455][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.393497][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.419453][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.470139][ T5774] Bluetooth: hci0: command tx timeout [ 82.485073][ T5772] hsr_slave_0: entered promiscuous mode [ 82.491767][ T5772] hsr_slave_1: entered promiscuous mode [ 82.526559][ T5775] hsr_slave_0: entered promiscuous mode [ 82.533059][ T5775] hsr_slave_1: entered promiscuous mode [ 82.540003][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.547757][ T5775] Cannot create hsr debugfs directory [ 82.549713][ T5774] Bluetooth: hci3: command tx timeout [ 82.558756][ T5774] Bluetooth: hci1: command tx timeout [ 82.558779][ T5783] Bluetooth: hci2: command tx timeout [ 82.587235][ T5777] hsr_slave_0: entered promiscuous mode [ 82.593689][ T5777] hsr_slave_1: entered promiscuous mode [ 82.600676][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.608280][ T5777] Cannot create hsr debugfs directory [ 82.655110][ T5779] hsr_slave_0: entered promiscuous mode [ 82.662271][ T5779] hsr_slave_1: entered promiscuous mode [ 82.668601][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.676300][ T5779] Cannot create hsr debugfs directory [ 83.109827][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.123112][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.134590][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.146172][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.222561][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.241651][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.256551][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.266727][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.371875][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.383680][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.394235][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.404709][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.495785][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.524341][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.536578][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.553074][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.622535][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.646681][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.679145][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.704455][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.734869][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.742279][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.755606][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.762885][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.794526][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.801719][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.867525][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.886201][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.893479][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.975872][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.026498][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.033821][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.052614][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.059866][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.091395][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.155182][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.194041][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.201291][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.254688][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.262031][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.393188][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.528810][ T5775] veth0_vlan: entered promiscuous mode [ 84.550816][ T5774] Bluetooth: hci0: command tx timeout [ 84.584028][ T5775] veth1_vlan: entered promiscuous mode [ 84.630203][ T5774] Bluetooth: hci1: command tx timeout [ 84.630755][ T5778] Bluetooth: hci2: command tx timeout [ 84.635755][ T5774] Bluetooth: hci3: command tx timeout [ 84.683327][ T5775] veth0_macvtap: entered promiscuous mode [ 84.695463][ T5775] veth1_macvtap: entered promiscuous mode [ 84.776855][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.813755][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.833091][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.886015][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.895574][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.904984][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.913909][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.973466][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.987100][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.016432][ T5777] veth0_vlan: entered promiscuous mode [ 85.068983][ T5777] veth1_vlan: entered promiscuous mode [ 85.138874][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.161256][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.224195][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.235337][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.252029][ T5777] veth0_macvtap: entered promiscuous mode [ 85.267577][ T5772] veth0_vlan: entered promiscuous mode [ 85.284761][ T5779] veth0_vlan: entered promiscuous mode [ 85.314662][ T5777] veth1_macvtap: entered promiscuous mode [ 85.335897][ T5779] veth1_vlan: entered promiscuous mode [ 85.352823][ T5772] veth1_vlan: entered promiscuous mode [ 85.427100][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.451595][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.465270][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.497913][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.515643][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.527398][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.556194][ T5779] veth0_macvtap: entered promiscuous mode [ 85.582816][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.597083][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.600657][ T5835] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.627347][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.636172][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.657344][ T5779] veth1_macvtap: entered promiscuous mode [ 85.723822][ T5772] veth0_macvtap: entered promiscuous mode [ 85.737803][ T5772] veth1_macvtap: entered promiscuous mode [ 85.780725][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.791529][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.802036][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.812789][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.824766][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.848191][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.869099][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.880681][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.891260][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.901477][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.920026][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.938961][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.992029][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.003036][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.013470][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.027118][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.038397][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.050704][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.061362][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.073105][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.083937][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.095762][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.107483][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.119695][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.127179][ T5838] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 86.135195][ T5838] netlink: 'syz.3.6': attribute type 2 has an invalid length. [ 86.152910][ T5839] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 86.169344][ T5839] netlink: 'syz.3.6': attribute type 2 has an invalid length. [ 86.192272][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.201791][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.211280][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.221082][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.238792][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.267626][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.286081][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.294964][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.332009][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.346824][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.482134][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.504095][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.547064][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.580557][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.630426][ T5774] Bluetooth: hci0: command tx timeout [ 86.646789][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.676075][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.710353][ T5783] Bluetooth: hci1: command tx timeout [ 86.713243][ T5778] Bluetooth: hci3: command tx timeout [ 86.716056][ T5774] Bluetooth: hci2: command tx timeout [ 86.752656][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.813517][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.816165][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 86.945855][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.972810][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.001289][ T5847] loop6: detected capacity change from 0 to 8 [ 87.034675][ T5847] Dev loop6: unable to read RDB block 8 [ 87.074899][ T5847] loop6: unable to read partition table [ 87.108234][ T5847] loop6: partition table beyond EOD, truncated [ 87.169258][ T5847] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 87.402128][ T5854] pim6reg1: tun_chr_ioctl cmd 35108 [ 87.806606][ T5865] syz.3.14[5865]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.197975][ T5876] overlayfs: upper fs does not support file handles, falling back to index=off. [ 88.254612][ T5876] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 88.380303][ T5831] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.579284][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 88.593442][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.619317][ T5831] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.641603][ T5831] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 88.659395][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.677892][ T5831] usb 3-1: Product: syz [ 88.682194][ T5831] usb 3-1: Manufacturer: syz [ 88.686975][ T5831] usb 3-1: SerialNumber: syz [ 88.698491][ T5865] loop3: detected capacity change from 0 to 32768 [ 88.710619][ T5774] Bluetooth: hci0: command tx timeout [ 88.732126][ T5831] usb 3-1: config 0 descriptor?? [ 88.790259][ T5774] Bluetooth: hci3: command tx timeout [ 88.793630][ T5778] Bluetooth: hci2: command tx timeout [ 88.795727][ T5783] Bluetooth: hci1: command tx timeout [ 88.946343][ T5892] loop1: detected capacity change from 0 to 512 [ 88.977830][ T5892] ======================================================= [ 88.977830][ T5892] WARNING: The mand mount option has been deprecated and [ 88.977830][ T5892] and is ignored by this kernel. Remove the mand [ 88.977830][ T5892] option from the mount to silence this warning. [ 88.977830][ T5892] ======================================================= [ 89.041787][ T5831] usb 3-1: USB disconnect, device number 2 [ 89.405040][ T5898] netlink: 76 bytes leftover after parsing attributes in process `syz.1.28'. [ 89.434257][ T5783] block nbd0: Receive control failed (result -32) [ 89.441298][ T5774] block nbd0: Receive control failed (result -32) [ 89.449257][ T5898] netlink: 528 bytes leftover after parsing attributes in process `syz.1.28'. [ 90.419633][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.630656][ T5813] usb 1-1: Using ep0 maxpacket: 8 [ 90.641048][ T5813] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.669720][ T5813] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.689516][ T5813] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.710069][ T5813] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.759279][ T5813] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.785755][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.026951][ T5813] usb 1-1: GET_CAPABILITIES returned 0 [ 91.039614][ T5813] usbtmc 1-1:16.0: can't read capabilities [ 91.105096][ T5933] loop3: detected capacity change from 0 to 32768 [ 91.170880][ T5933] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.291875][ T1189] usb 1-1: USB disconnect, device number 2 [ 91.336561][ T5933] XFS (loop3): Ending clean mount [ 91.400677][ T5933] XFS (loop3): User initiated shutdown received. [ 91.420631][ T5933] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 91.449654][ T5933] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 91.575197][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.691209][ T5959] netlink: 'syz.1.49': attribute type 21 has an invalid length. [ 91.924981][ T5964] loop3: detected capacity change from 0 to 256 [ 92.024006][ T5964] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.077164][ T788] cfg80211: failed to load regulatory.db [ 92.118156][ T5966] loop1: detected capacity change from 0 to 4096 [ 92.791385][ T5987] loop6: detected capacity change from 0 to 8 [ 92.819024][ T5763] Dev loop6: unable to read RDB block 8 [ 92.842087][ T5763] loop6: unable to read partition table [ 92.850563][ T5763] loop6: partition table beyond EOD, truncated [ 92.882211][ T5987] Dev loop6: unable to read RDB block 8 [ 92.892333][ T5987] loop6: unable to read partition table [ 92.898360][ T5987] loop6: partition table beyond EOD, truncated [ 92.928628][ T5987] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 92.982777][ T5994] loop1: detected capacity change from 0 to 8 [ 93.052230][ T5994] SQUASHFS error: Unable to read directory block [629:fe] [ 93.119443][ T5831] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 93.255310][ T5999] loop0: detected capacity change from 0 to 1024 [ 93.332187][ T5831] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.358748][ T5831] usb 4-1: config 0 has no interface number 0 [ 93.381664][ T5831] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 93.414362][ T5831] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 93.429598][ T5831] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.439012][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.466402][ T5831] usb 4-1: config 0 descriptor?? [ 93.481298][ T5989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 93.500442][ T5831] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 93.733148][ T5831] usb 4-1: USB disconnect, device number 2 [ 93.909603][ T5813] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.122733][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.133222][ T5813] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 94.149484][ T5813] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 94.157716][ T5813] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 94.190379][ T5813] usb 2-1: config 129 has no interface number 0 [ 94.209423][ T5813] usb 2-1: config 129 has no interface number 1 [ 94.215790][ T5813] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 94.249236][ T5813] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 94.269419][ T5813] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 94.300474][ T5813] usb 2-1: config 129 interface 135 has no altsetting 0 [ 94.307587][ T5813] usb 2-1: config 129 interface 5 has no altsetting 0 [ 94.332818][ T5813] usb 2-1: string descriptor 0 read error: -22 [ 94.347459][ T5813] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 94.370583][ T6013] loop2: detected capacity change from 0 to 32768 [ 94.393374][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.440709][ T5813] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 94.448035][ T5813] usb 2-1: MIDIStreaming interface descriptor not found [ 94.456716][ T6013] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.486809][ T6023] macvlan0: entered promiscuous mode [ 94.545065][ T6023] netlink: 'syz.3.75': attribute type 2 has an invalid length. [ 94.711538][ T6013] XFS (loop2): Ending clean mount [ 94.757363][ T6013] XFS (loop2): Quotacheck needed: Please wait. [ 94.855054][ T6013] XFS (loop2): Quotacheck: Done. [ 94.901917][ T5813] usb 2-1: USB disconnect, device number 2 [ 94.951197][ T6017] loop0: detected capacity change from 0 to 32768 [ 95.001739][ T6017] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.132894][ T6017] XFS (loop0): Ending clean mount [ 95.172527][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.173599][ T6017] XFS (loop0): Quotacheck needed: Please wait. [ 95.339148][ T6017] XFS (loop0): Quotacheck: Done. [ 95.560214][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.844089][ T6054] loop1: detected capacity change from 0 to 2048 [ 95.968681][ T6057] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.235874][ T6054] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 96.679833][ T788] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 96.881724][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.890683][ T788] usb 3-1: not running at top speed; connect to a high speed hub [ 96.903981][ T788] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 96.919353][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.937621][ T788] usb 3-1: Product: syz [ 96.947747][ T788] usb 3-1: Manufacturer: syz [ 96.952670][ T788] usb 3-1: SerialNumber: syz [ 97.053786][ T6090] loop3: detected capacity change from 0 to 2048 [ 97.173408][ T6093] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.210071][ T788] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 97.285913][ T6090] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 97.478343][ T6087] loop0: detected capacity change from 0 to 32768 [ 97.515659][ T6087] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.524521][ T5831] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.645945][ T6087] XFS (loop0): Ending clean mount [ 97.729396][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 97.774363][ T5831] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 97.804093][ T788] gp8psk: usb out operation failed. [ 97.818692][ T788] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 97.825863][ T5831] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 97.846165][ T788] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 97.873951][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 97.887161][ T788] usb 3-1: USB disconnect, device number 3 [ 97.887636][ T5772] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 97.902253][ T5831] usb 2-1: Product: syz [ 97.906458][ T5831] usb 2-1: Manufacturer: syz [ 97.911541][ T5831] usb 2-1: SerialNumber: syz [ 97.927567][ T5831] usb 2-1: config 0 descriptor?? [ 97.945296][ T6095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.954273][ T5831] hub 2-1:0.0: bad descriptor, ignoring hub [ 97.973312][ T5831] hub: probe of 2-1:0.0 failed with error -5 [ 98.210359][ T6115] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 98.299683][ T788] usb 2-1: USB disconnect, device number 3 [ 98.331617][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.340146][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.359695][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.367161][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.392616][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.407183][ T9] Process accounting resumed [ 98.419511][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.432971][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.451531][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.466693][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.491818][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.512194][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.524024][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.534840][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.545076][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.555716][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.575299][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.588531][ T5813] hid-generic 0000:0000:000E.0001: unknown main item tag 0x0 [ 98.623315][ T5813] hid-generic 0000:0000:000E.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 98.795324][ T6125] fido_id[6125]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.311842][ T6122] loop2: detected capacity change from 0 to 40427 [ 99.375087][ T6122] F2FS-fs (loop2): invalid crc value [ 99.402843][ T6122] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.568011][ T6122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.655247][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 99.693525][ T6122] syz.2.111: attempt to access beyond end of device [ 99.693525][ T6122] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 99.716105][ T6122] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 99.727312][ T6122] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 99.995378][ T6139] loop0: detected capacity change from 0 to 32768 [ 100.083781][ T6139] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.425535][ T6165] loop1: detected capacity change from 0 to 256 [ 100.436868][ T6139] XFS (loop0): Ending clean mount [ 100.446362][ T6165] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.485252][ T6165] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.634984][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.481253][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.138'. [ 102.737927][ T6238] loop3: detected capacity change from 0 to 512 [ 102.829812][ T6238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 102.853633][ T6238] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.020170][ T6238] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 103.042768][ T6238] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 103.059133][ T6238] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.156: Failed to acquire dquot type 0 [ 103.183745][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.185560][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 103.262644][ T6251] loop2: detected capacity change from 0 to 512 [ 103.559827][ T6251] EXT4-fs: Ignoring removed bh option [ 103.566866][ T6251] EXT4-fs (loop2): Test dummy encryption mode enabled [ 103.574390][ T6251] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.599245][ T6251] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.637100][ T6251] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.162: inode has both inline data and extents flags [ 103.702650][ T6251] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.162: couldn't read orphan inode 15 (err -117) [ 103.762520][ T6251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.013900][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.180128][ T6277] netlink: 104 bytes leftover after parsing attributes in process `syz.3.170'. [ 104.379409][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 104.411257][ T6280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.172'. [ 104.455028][ T6280] ip6gretap1: entered allmulticast mode [ 104.645415][ T6288] loop3: detected capacity change from 0 to 4096 [ 104.670729][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.729845][ T6291] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.889248][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 104.921496][ T788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.943606][ T788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.971447][ T788] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.978149][ T788] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.039232][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.080414][ T788] usb 1-1: config 0 descriptor?? [ 105.108912][ T6297] capability: warning: `syz.2.180' uses 32-bit capabilities (legacy support in use) [ 105.140465][ T6297] program syz.2.180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.326570][ T6285] loop1: detected capacity change from 0 to 40427 [ 105.383175][ T6285] F2FS-fs (loop1): Corrupted extension count (33554469 + 1 > 64) [ 105.407082][ T6285] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 105.451318][ T6285] F2FS-fs (loop1): invalid crc value [ 105.514318][ T788] hid (null): usage index exceeded [ 105.632909][ T6285] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 105.646300][ T6285] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.720242][ T5762] usb 1-1: USB disconnect, device number 3 [ 105.874410][ T6311] loop2: detected capacity change from 0 to 4096 [ 105.917491][ T6312] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.984458][ T28] audit: type=1800 audit(1777566701.061:2): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.185" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 106.015279][ T28] audit: type=1800 audit(1777566701.081:3): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.185" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 106.574188][ T6325] veth0_to_team: entered promiscuous mode [ 106.595734][ T6325] gretap0: entered promiscuous mode [ 107.223873][ T6321] loop2: detected capacity change from 0 to 32768 [ 107.254823][ T6321] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.382723][ T6321] XFS (loop2): Ending clean mount [ 107.436695][ T6321] XFS (loop2): Quotacheck needed: Please wait. [ 107.550925][ T6321] XFS (loop2): Quotacheck: Done. [ 107.673678][ T28] audit: type=1800 audit(1777566702.751:4): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.190" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 107.748906][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.766694][ T5831] kernel read not supported for file /dsp1 (pid: 5831 comm: kworker/0:3) [ 107.788937][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 107.833970][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.916564][ T6354] bridge_slave_1: left allmulticast mode [ 107.943664][ T6354] bridge_slave_1: left promiscuous mode [ 107.965218][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.996062][ T6356] loop0: detected capacity change from 0 to 4096 [ 108.103568][ T6357] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.330719][ T6364] loop6: detected capacity change from 0 to 524287999 [ 108.370327][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.379835][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.390834][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.400075][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.412282][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.421543][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.431592][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.440830][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.451599][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.460836][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.470013][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.479282][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.489041][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.498288][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.516432][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.525718][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.543237][ T6364] ldm_validate_partition_table(): Disk read failed. [ 108.617369][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.626663][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.635832][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 108.645188][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.661242][ T6364] Dev loop6: unable to read RDB block 0 [ 108.698754][ T6364] loop6: unable to read partition table [ 108.712724][ T6364] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾xИCÖ) failed (rc=-5) [ 108.752653][ T5765] ldm_validate_partition_table(): Disk read failed. [ 108.784514][ T5765] Dev loop6: unable to read RDB block 0 [ 108.824998][ T5765] loop6: unable to read partition table [ 108.855217][ T6366] ldm_validate_partition_table(): Disk read failed. [ 108.877245][ T6366] Dev loop6: unable to read RDB block 0 [ 108.894302][ T6366] loop6: unable to read partition table [ 108.904864][ T6366] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾xИCÖ) failed (rc=-5) [ 110.015123][ T6404] loop0: detected capacity change from 0 to 256 [ 110.022606][ T6404] exfat: Deprecated parameter 'utf8' [ 110.028028][ T6404] exfat: Deprecated parameter 'utf8' [ 110.034635][ T6404] exfat: Deprecated parameter 'utf8' [ 110.053130][ T6404] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 111.318166][ T6412] loop0: detected capacity change from 0 to 32768 [ 111.481493][ T6412] ea_get: invalid extended attribute [ 111.512550][ T6415] mmap: syz.3.226 (6415) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.528183][ T6412] ffff8880781ab170: 04 00 00 00 .... [ 111.594021][ T6425] ea_get: invalid extended attribute [ 111.634419][ T6425] ffff8880781ab170: 04 00 00 00 .... [ 111.670203][ T6427] ea_get: invalid extended attribute [ 111.675564][ T6427] ffff8880781ab170: 04 00 00 00 .... [ 112.307430][ T6435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.232'. [ 112.327278][ T6435] Zero length message leads to an empty skb [ 112.555220][ T6445] loop1: detected capacity change from 0 to 256 [ 112.620954][ T5810] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.700708][ T6445] FAT-fs (loop1): Directory bread(block 64) failed [ 112.717610][ T6445] FAT-fs (loop1): Directory bread(block 65) failed [ 112.758441][ T6445] FAT-fs (loop1): Directory bread(block 66) failed [ 112.771551][ T6445] FAT-fs (loop1): Directory bread(block 67) failed [ 112.781779][ T6445] FAT-fs (loop1): Directory bread(block 68) failed [ 112.788382][ T6445] FAT-fs (loop1): Directory bread(block 69) failed [ 112.824769][ T6445] FAT-fs (loop1): Directory bread(block 70) failed [ 112.837281][ T6445] FAT-fs (loop1): Directory bread(block 71) failed [ 112.839381][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 112.845889][ T6445] FAT-fs (loop1): Directory bread(block 72) failed [ 112.861006][ T6449] netlink: 'syz.3.239': attribute type 39 has an invalid length. [ 112.869023][ T6445] FAT-fs (loop1): Directory bread(block 73) failed [ 112.878767][ T5810] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 112.889588][ T5810] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 112.904952][ T5810] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 112.925992][ T5810] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 112.948320][ T5810] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 112.974651][ T5810] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.006896][ T5810] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.049111][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.318177][ T5810] usb 3-1: GET_CAPABILITIES returned 0 [ 113.334592][ T5810] usbtmc 3-1:16.0: can't read capabilities [ 113.540605][ T788] usb 3-1: USB disconnect, device number 4 [ 114.227092][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.248'. [ 114.593071][ T6480] loop1: detected capacity change from 0 to 512 [ 114.624736][ T6480] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.253: inode has both inline data and extents flags [ 114.649630][ T6480] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.253: couldn't read orphan inode 15 (err -117) [ 114.681373][ T6480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.751775][ T6480] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 114.814355][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.976092][ T6476] loop0: detected capacity change from 0 to 40427 [ 114.994102][ T6476] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 115.004903][ T6476] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.017241][ T6476] F2FS-fs (loop0): heap/no_heap options were deprecated [ 115.038579][ T6476] F2FS-fs (loop0): invalid crc value [ 115.061744][ T6476] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.161498][ T6476] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 115.171422][ T6476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 115.327144][ T6476] syz.0.252: attempt to access beyond end of device [ 115.327144][ T6476] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.351660][ T6476] F2FS-fs (loop0): Remounting filesystem read-only [ 115.359847][ T6476] syz.0.252: attempt to access beyond end of device [ 115.359847][ T6476] loop0: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 115.375035][ T6476] F2FS-fs (loop0): Remounting filesystem read-only [ 115.590100][ T6497] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.259'. [ 115.626707][ T6497] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.259'. [ 115.949285][ T5810] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.139431][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 116.153490][ T5810] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 116.163383][ T5810] usb 4-1: config 0 has no interface number 0 [ 116.170129][ T5810] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.180428][ T5810] usb 4-1: config 0 interface 89 has no altsetting 0 [ 116.190184][ T5810] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 116.199548][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.215166][ T5810] usb 4-1: Product: syz [ 116.223167][ T5810] usb 4-1: Manufacturer: syz [ 116.227817][ T5810] usb 4-1: SerialNumber: syz [ 116.232626][ T5762] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.254944][ T5810] usb 4-1: config 0 descriptor?? [ 116.282701][ T5810] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 116.293767][ T5810] em28xx 4-1:0.89: Video interface 89 found: [ 116.300401][ T6512] pimreg: tun_chr_ioctl cmd 1074812118 [ 116.439324][ T5762] usb 2-1: Using ep0 maxpacket: 8 [ 116.452290][ T5762] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 116.467222][ T6516] Illegal XDP return value 4294967294 on prog (id 20) dev N/A, expect packet loss! [ 116.472645][ T5762] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.502430][ T5762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.512985][ T5762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.525981][ T5762] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.540474][ T5762] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.550093][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.695562][ T6520] process 'syz.0.269' launched './file1' with NULL argv: empty string added [ 116.782900][ T5762] usb 2-1: GET_CAPABILITIES returned 0 [ 116.799129][ T5762] usbtmc 2-1:16.0: can't read capabilities [ 116.906342][ T5810] em28xx 4-1:0.89: chip ID is em2710 [ 116.972920][ T6529] loop2: detected capacity change from 0 to 128 [ 117.023241][ T5813] usb 2-1: USB disconnect, device number 4 [ 117.043877][ T6527] loop0: detected capacity change from 0 to 4096 [ 117.071865][ T6529] syz.2.273: attempt to access beyond end of device [ 117.071865][ T6529] loop2: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 117.125653][ T6529] syz.2.273: attempt to access beyond end of device [ 117.125653][ T6529] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 117.170910][ T6530] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.210243][ T5810] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 117.221409][ T6527] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 117.229908][ T5810] em28xx 4-1:0.89: board has no eeprom [ 117.247303][ T6527] Remounting filesystem read-only [ 117.290648][ T5772] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 117.299887][ T5810] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 117.299927][ T5810] em28xx 4-1:0.89: analog set to bulk mode. [ 117.306562][ T788] em28xx 4-1:0.89: Registering V4L2 extension [ 117.308085][ T5772] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 117.327349][ T5772] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 117.355759][ T5772] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 117.368756][ T5810] usb 4-1: USB disconnect, device number 3 [ 117.378516][ T5810] em28xx 4-1:0.89: Disconnecting em28xx [ 117.386152][ T5772] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 117.416266][ T5772] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 117.449442][ T5772] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 117.456818][ T5772] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 117.491410][ T5772] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 117.491793][ T788] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 117.507198][ T5772] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 117.514983][ T788] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 117.522917][ T5772] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 117.530575][ T788] em28xx 4-1:0.89: No AC97 audio processor [ 117.538506][ T5772] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 117.556159][ T788] usb 4-1: Decoder not found [ 117.561017][ T5772] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 117.568469][ T5772] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 117.576742][ T788] em28xx 4-1:0.89: failed to create media graph [ 117.583622][ T5772] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 117.591743][ T788] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 117.599639][ T5772] NILFS (loop0): discard dirty page: offset=270336, ino=3 [ 117.612435][ T788] em28xx 4-1:0.89: Registering snapshot button... [ 117.619039][ T5772] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 117.636172][ T788] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input6 [ 117.692303][ T788] em28xx 4-1:0.89: Remote control support is not available for this card. [ 117.746117][ T5810] em28xx 4-1:0.89: Closing input extension [ 117.790140][ T5810] em28xx 4-1:0.89: Deregistering snapshot button [ 117.847953][ T6537] loop0: detected capacity change from 0 to 512 [ 117.879880][ T6537] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.274: inode has both inline data and extents flags [ 117.919655][ T6537] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.274: couldn't read orphan inode 15 (err -117) [ 117.942902][ T6537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.005468][ T5810] em28xx 4-1:0.89: Freeing device [ 118.039441][ T1189] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.080622][ T6542] loop3: detected capacity change from 0 to 512 [ 118.087977][ T6542] EXT4-fs: Ignoring removed bh option [ 118.096871][ T6542] EXT4-fs: inline encryption not supported [ 118.104460][ T6542] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.212713][ T6542] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 118.233719][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.260081][ T1189] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.276121][ T6542] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.278: bg 0: block 248: padding at end of block bitmap is not set [ 118.292993][ T6542] Quota error (device loop3): write_blk: dquota write failed [ 118.298294][ T1189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.319316][ T6542] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 118.330931][ T6542] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.278: Failed to acquire dquot type 1 [ 118.382377][ T1189] usb 2-1: config 0 descriptor?? [ 118.411601][ T1189] cp210x 2-1:0.0: cp210x converter detected [ 118.438241][ T6542] EXT4-fs (loop3): 1 truncate cleaned up [ 118.472070][ T6542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 118.518683][ T6549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.279'. [ 118.690044][ T28] audit: type=1800 audit(1777566713.761:5): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.278" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 118.812700][ T1189] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 118.852237][ T1189] usb 2-1: cp210x converter now attached to ttyUSB0 [ 118.871069][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 118.896223][ T49] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 118.916829][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 119.019344][ T6553] nbd1: detected capacity change from 0 to 63 [ 119.120091][ T5810] usb 2-1: USB disconnect, device number 5 [ 119.138056][ T5774] block nbd1: Receive control failed (result -104) [ 119.147584][ T5783] block nbd1: Receive control failed (result -32) [ 119.156074][ T97] block nbd1: Dead connection, failed to find a fallback [ 119.163582][ T97] block nbd1: shutting down sockets [ 119.169092][ T97] blk_print_req_error: 43 callbacks suppressed [ 119.169105][ T97] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 119.186591][ T97] buffer_io_error: 42 callbacks suppressed [ 119.186604][ T97] Buffer I/O error on dev nbd1, logical block 1, async page read [ 119.200749][ T97] Buffer I/O error on dev nbd1, logical block 2, async page read [ 119.208531][ T97] Buffer I/O error on dev nbd1, logical block 3, async page read [ 119.222351][ T5810] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.254142][ T6547] loop2: detected capacity change from 0 to 32768 [ 119.293036][ T5810] cp210x 2-1:0.0: device disconnected [ 119.422805][ T6547] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root [ 119.422805][ T6547] [ 119.460567][ T6547] ERROR: (device loop2): remounting filesystem as read-only [ 119.524798][ T6563] dummy0: entered allmulticast mode [ 119.560664][ T6562] dummy0: left allmulticast mode [ 119.824717][ T113] BUG: Bad page state in process jfsCommit pfn:78ec0 [ 119.844990][ T113] page:ffffea0001e3b000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x78ec0 [ 119.882965][ T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 119.901659][ T113] page_type: 0xffffffff() [ 119.911398][ T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000 [ 119.941150][ T113] raw: 000000000000001c ffff888078fb12e8 00000000ffffffff 0000000000000000 [ 119.968383][ T113] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 120.003959][ T113] page_owner tracks the page as allocated [ 120.020297][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6547, tgid 6546 (syz.2.280), ts 119371173625, free_ts 119319491980 [ 120.056870][ T113] post_alloc_hook+0x1c1/0x200 [ 120.061966][ T113] get_page_from_freelist+0x1951/0x19e0 [ 120.067580][ T113] __alloc_pages+0x1f0/0x460 [ 120.072903][ T113] folio_alloc+0x1e/0x30 [ 120.077205][ T113] filemap_alloc_folio+0xdf/0x490 [ 120.082422][ T113] do_read_cache_folio+0x364/0x7d0 [ 120.087590][ T113] do_read_cache_page+0x32/0x250 [ 120.092710][ T113] __get_metapage+0x31a/0xfa0 [ 120.097443][ T113] diRead+0x6d3/0xb90 [ 120.101607][ T113] jfs_iget+0x90/0x440 [ 120.108797][ T113] jfs_fill_super+0x712/0xad0 [ 120.119297][ T113] mount_bdev+0x221/0x2d0 [ 120.123695][ T113] legacy_get_tree+0xea/0x180 [ 120.128411][ T113] vfs_get_tree+0x8c/0x280 [ 120.142711][ T113] do_new_mount+0x24b/0xa40 [ 120.153914][ T113] __se_sys_mount+0x2e7/0x3d0 [ 120.158680][ T113] page last free stack trace: [ 120.179962][ T113] free_unref_page_prepare+0x7b2/0x8c0 [ 120.185520][ T113] free_unref_page+0x32/0x2e0 [ 120.208991][ T113] vfree+0x1a6/0x320 [ 120.213073][ T113] delayed_vfree_work+0x55/0x80 [ 120.218015][ T113] process_scheduled_works+0xa5d/0x15d0 [ 120.223842][ T113] worker_thread+0xa55/0xfc0 [ 120.228496][ T113] kthread+0x2fa/0x390 [ 120.232668][ T113] ret_from_fork+0x48/0x80 [ 120.237140][ T113] ret_from_fork_asm+0x11/0x20 [ 120.259359][ T113] Modules linked in: [ 120.263452][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 120.270710][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.280834][ T113] Call Trace: [ 120.284195][ T113] [ 120.287169][ T113] dump_stack_lvl+0x18c/0x250 [ 120.291907][ T113] ? show_regs_print_info+0x20/0x20 [ 120.297170][ T113] ? swiotlb_print_info+0x70/0x70 [ 120.302269][ T113] ? dump_page+0xba3/0x14a0 [ 120.306833][ T113] bad_page+0x14b/0x170 [ 120.311047][ T113] free_unref_page_prepare+0x85f/0x8c0 [ 120.316587][ T113] free_unref_page+0x32/0x2e0 [ 120.321322][ T113] ? __folio_put+0xef/0x210 [ 120.325879][ T113] txUnlock+0x27e/0xcb0 [ 120.330101][ T113] ? lockdep_hardirqs_on+0x98/0x150 [ 120.335333][ T113] jfs_lazycommit+0x56e/0xa70 [ 120.340041][ T113] ? txFreelock+0x5a0/0x5a0 [ 120.344582][ T113] ? do_task_dead+0xd0/0xd0 [ 120.349117][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 120.354079][ T113] kthread+0x2fa/0x390 [ 120.358188][ T113] ? txFreelock+0x5a0/0x5a0 [ 120.362743][ T113] ? kthread_blkcg+0xd0/0xd0 [ 120.367363][ T113] ret_from_fork+0x48/0x80 [ 120.371810][ T113] ? kthread_blkcg+0xd0/0xd0 [ 120.376438][ T113] ret_from_fork_asm+0x11/0x20 [ 120.381248][ T113] [ 120.407707][ T113] Disabling lock debugging due to kernel taint [ 120.417947][ T113] page:ffffea0001e3b000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x78ec0 [ 120.429656][ T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 120.450990][ T113] page_type: 0xffffffff() [ 120.461179][ T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000 [ 120.481954][ T113] raw: 000000000000001c ffff888078fb12e8 00000000ffffffff 0000000000000000 [ 120.491220][ T113] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 120.520387][ T113] page_owner tracks the page as allocated [ 120.526220][ T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6547, tgid 6546 (syz.2.280), ts 119371173625, free_ts 119319491980 [ 120.544721][ T113] post_alloc_hook+0x1c1/0x200 [ 120.549797][ T113] get_page_from_freelist+0x1951/0x19e0 [ 120.555445][ T113] __alloc_pages+0x1f0/0x460 [ 120.560329][ T113] folio_alloc+0x1e/0x30 [ 120.564664][ T113] filemap_alloc_folio+0xdf/0x490 [ 120.569991][ T113] do_read_cache_folio+0x364/0x7d0 [ 120.575223][ T113] do_read_cache_page+0x32/0x250 [ 120.580439][ T113] __get_metapage+0x31a/0xfa0 [ 120.585212][ T113] diRead+0x6d3/0xb90 [ 120.589512][ T113] jfs_iget+0x90/0x440 [ 120.593680][ T113] jfs_fill_super+0x712/0xad0 [ 120.598461][ T113] mount_bdev+0x221/0x2d0 [ 120.603235][ T113] legacy_get_tree+0xea/0x180 [ 120.608056][ T113] vfs_get_tree+0x8c/0x280 [ 120.612879][ T113] do_new_mount+0x24b/0xa40 [ 120.618682][ T113] __se_sys_mount+0x2e7/0x3d0 [ 120.623864][ T113] page last free stack trace: [ 120.628625][ T113] free_unref_page_prepare+0x7b2/0x8c0 [ 120.634610][ T113] free_unref_page+0x32/0x2e0 [ 120.639560][ T113] vfree+0x1a6/0x320 [ 120.643554][ T113] delayed_vfree_work+0x55/0x80 [ 120.648521][ T113] process_scheduled_works+0xa5d/0x15d0 [ 120.654565][ T113] worker_thread+0xa55/0xfc0 [ 120.659460][ T113] kthread+0x2fa/0x390 [ 120.663647][ T113] ret_from_fork+0x48/0x80 [ 120.668152][ T113] ret_from_fork_asm+0x11/0x20 [ 120.673808][ T113] ------------[ cut here ]------------ [ 120.679546][ T113] kernel BUG at include/linux/mm.h:1458! [ 120.685930][ T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 120.692029][ T113] CPU: 1 PID: 113 Comm: jfsCommit Tainted: G B syzkaller #0 [ 120.700702][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.710758][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 120.716060][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 e7 71 d9 fe e9 25 ff ff ff e8 cd 3a 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 6d a4 c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 e6 3e 81 [ 120.735705][ T113] RSP: 0018:ffffc90002ce7cc0 EFLAGS: 00010246 [ 120.741817][ T113] RAX: 267fc7228f7dd000 RBX: ffff888078fb12e8 RCX: 267fc7228f7dd000 [ 120.749822][ T113] RDX: 0000000000000000 RSI: ffffffff8b1c8f80 RDI: ffffffff8b1c8f40 [ 120.757908][ T113] RBP: 000000000000007f R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 120.765895][ T113] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: ffff888078fb1310 [ 120.773890][ T113] R13: ffffea0001e3b034 R14: 1ffff1100f1f6262 R15: 1ffff1100f1f626f [ 120.781894][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 120.790848][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.797459][ T113] CR2: 0000560415a72168 CR3: 00000000307e8000 CR4: 00000000003506e0 [ 120.805459][ T113] Call Trace: [ 120.808771][ T113] [ 120.811751][ T113] txUnlock+0x427/0xcb0 [ 120.815951][ T113] jfs_lazycommit+0x56e/0xa70 [ 120.820659][ T113] ? txFreelock+0x5a0/0x5a0 [ 120.825192][ T113] ? do_task_dead+0xd0/0xd0 [ 120.829717][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 120.834682][ T113] kthread+0x2fa/0x390 [ 120.838775][ T113] ? txFreelock+0x5a0/0x5a0 [ 120.843310][ T113] ? kthread_blkcg+0xd0/0xd0 [ 120.847922][ T113] ret_from_fork+0x48/0x80 [ 120.852370][ T113] ? kthread_blkcg+0xd0/0xd0 [ 120.856977][ T113] ret_from_fork_asm+0x11/0x20 [ 120.861814][ T113] [ 120.864853][ T113] Modules linked in: [ 120.875175][ T113] ---[ end trace 0000000000000000 ]--- [ 120.880809][ T113] RIP: 0010:put_metapage+0x253/0x340 [ 120.886218][ T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 e7 71 d9 fe e9 25 ff ff ff e8 cd 3a 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 6d a4 c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 e6 3e 81 [ 120.906114][ T113] RSP: 0018:ffffc90002ce7cc0 EFLAGS: 00010246 [ 120.912332][ T113] RAX: 267fc7228f7dd000 RBX: ffff888078fb12e8 RCX: 267fc7228f7dd000 [ 120.920382][ T113] RDX: 0000000000000000 RSI: ffffffff8b1c8f80 RDI: ffffffff8b1c8f40 [ 120.929433][ T113] RBP: 000000000000007f R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 120.937461][ T113] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: ffff888078fb1310 [ 120.945555][ T113] R13: ffffea0001e3b034 R14: 1ffff1100f1f6262 R15: 1ffff1100f1f626f [ 120.954870][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 120.964121][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.970777][ T113] CR2: 0000560415a72168 CR3: 00000000192fa000 CR4: 00000000003506e0 [ 120.978788][ T113] Kernel panic - not syncing: Fatal exception [ 120.985461][ T113] Kernel Offset: disabled [ 120.989796][ T113] Rebooting in 86400 seconds..