last executing test programs: 2.510423291s ago: executing program 3 (id=10): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 2.257058769s ago: executing program 3 (id=12): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0x88, &(0x7f0000001980)=ANY=[@ANYBLOB='decompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666f7263652c666f7263652c6e6c733d6d616363656e746575726f00006172743d3078283a0f909e303030303030303030303030303030362c666f7263652c00b20a970faa9c317b6bcabe474cae31ba89c1625a2e9ee8a7648d4ffdae5266f879928f1e02635af5f47c0e5c4fba4c704be62a11d3462794532032457a1293a8950acffefbf2378e73ea9ae55a57ddb4c9be1aecc0ba25fd359c02636f7d3d9532e5e050859f2d2b4bffca2d8376e71c93f1153a992683cfe7"], 0x41, 0x705, &(0x7f0000002080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.242056759s ago: executing program 2 (id=13): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0xfffffffd}, 0x10) write(r0, &(0x7f00000004c0)="240000001a005f0400f9f4070009040180200000000800"/36, 0x24) 2.007797536s ago: executing program 0 (id=1): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x78}}, 0x4048000) 1.977052647s ago: executing program 2 (id=14): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0), &(0x7f00000000c0)=0xa4) 1.788657113s ago: executing program 3 (id=15): unshare(0x20000400) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2890}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000}, 0x0) 1.780369094s ago: executing program 1 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000010008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.768926684s ago: executing program 0 (id=17): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) 1.708518726s ago: executing program 2 (id=18): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', 0x1000}) 1.609970319s ago: executing program 1 (id=19): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.503184572s ago: executing program 2 (id=20): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 1.460281534s ago: executing program 0 (id=21): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.460162984s ago: executing program 3 (id=22): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d446c098cfc27eb8549d66e79219c2c3385e4508546e551a0de59631719ba089"}}}}}}}, 0x0) 1.389400806s ago: executing program 1 (id=23): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@nobh}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@usrquota}, {@user_xattr}]}, 0x3, 0x4e1, &(0x7f0000000a00)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 1.281567929s ago: executing program 3 (id=24): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x6229, &(0x7f00000072c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') truncate(&(0x7f0000000000)='./file1\x00', 0x5) 1.131744714s ago: executing program 2 (id=25): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) 1.130895574s ago: executing program 0 (id=33): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0xa, "9788"}, @global=@item_012={0x1, 0x1, 0x3, 'k'}]}}, 0x0}, 0x0) 568.520992ms ago: executing program 1 (id=26): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x14, 0x1e8, 0x0}) 252.358862ms ago: executing program 1 (id=27): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x7ff, 0xfffffff8, 0x100802, 0x2, 0x5}) 185.000814ms ago: executing program 3 (id=28): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @private0, 0x97b}, @in6={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}]}, &(0x7f0000000740)=0x10) 48.274689ms ago: executing program 2 (id=29): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) 0s ago: executing program 1 (id=30): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="b878", 0x2}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x5, 0x4, 0x8, 0x1, 0x5, 0x3, 0x2, 0x96, 0xff, 0x8, 0x4, 0x1, 0x3}, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 64.627849][ T5773] cgroup: Unknown subsys name 'net' [ 64.764365][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.146280][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.583012][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.591400][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.601866][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.610959][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.627632][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.643845][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.643843][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.652342][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.668356][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.669535][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.676808][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.682471][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.690833][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.698613][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.704959][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.711337][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.719886][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.731693][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.734171][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.748271][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.757202][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.764464][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.776978][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.785548][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.232093][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 68.318426][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 68.328671][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 68.402492][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.411294][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.419522][ T5785] bridge_slave_0: entered allmulticast mode [ 68.427037][ T5785] bridge_slave_0: entered promiscuous mode [ 68.456731][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.463872][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.471240][ T5785] bridge_slave_1: entered allmulticast mode [ 68.479360][ T5785] bridge_slave_1: entered promiscuous mode [ 68.511620][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 68.561484][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.575975][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.610575][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.618562][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.625712][ T5782] bridge_slave_0: entered allmulticast mode [ 68.633344][ T5782] bridge_slave_0: entered promiscuous mode [ 68.661263][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.668616][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.675782][ T5784] bridge_slave_0: entered allmulticast mode [ 68.683404][ T5784] bridge_slave_0: entered promiscuous mode [ 68.701191][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.708562][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.715862][ T5782] bridge_slave_1: entered allmulticast mode [ 68.722788][ T5782] bridge_slave_1: entered promiscuous mode [ 68.732381][ T5785] team0: Port device team_slave_0 added [ 68.741707][ T5785] team0: Port device team_slave_1 added [ 68.749337][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.757491][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.764652][ T5784] bridge_slave_1: entered allmulticast mode [ 68.771688][ T5784] bridge_slave_1: entered promiscuous mode [ 68.850336][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.865167][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.875565][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.882979][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.908992][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.922478][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.955018][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.977788][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.984749][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.010692][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.061084][ T5784] team0: Port device team_slave_0 added [ 69.070860][ T5784] team0: Port device team_slave_1 added [ 69.077362][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.084572][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.091940][ T5783] bridge_slave_0: entered allmulticast mode [ 69.099552][ T5783] bridge_slave_0: entered promiscuous mode [ 69.109378][ T5782] team0: Port device team_slave_0 added [ 69.115511][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.122692][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.129952][ T5783] bridge_slave_1: entered allmulticast mode [ 69.137120][ T5783] bridge_slave_1: entered promiscuous mode [ 69.176918][ T5782] team0: Port device team_slave_1 added [ 69.213497][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.220593][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.247488][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.283779][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.297691][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.308331][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.315292][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.342556][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.373977][ T5785] hsr_slave_0: entered promiscuous mode [ 69.380529][ T5785] hsr_slave_1: entered promiscuous mode [ 69.411557][ T5783] team0: Port device team_slave_0 added [ 69.420836][ T5783] team0: Port device team_slave_1 added [ 69.427388][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.434394][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.460758][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.474217][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.481274][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.507554][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.565941][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.573383][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.600315][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.644691][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.651776][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.678164][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.724282][ T5784] hsr_slave_0: entered promiscuous mode [ 69.730907][ T5784] hsr_slave_1: entered promiscuous mode [ 69.737631][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.745518][ T5784] Cannot create hsr debugfs directory [ 69.791350][ T5782] hsr_slave_0: entered promiscuous mode [ 69.798473][ T5782] hsr_slave_1: entered promiscuous mode [ 69.804662][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.813138][ T5795] Bluetooth: hci1: command tx timeout [ 69.813446][ T5795] Bluetooth: hci2: command tx timeout [ 69.817354][ T5789] Bluetooth: hci0: command tx timeout [ 69.823620][ T5782] Cannot create hsr debugfs directory [ 69.824995][ T5789] Bluetooth: hci3: command tx timeout [ 69.867196][ T5783] hsr_slave_0: entered promiscuous mode [ 69.873481][ T5783] hsr_slave_1: entered promiscuous mode [ 69.880116][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.888291][ T5783] Cannot create hsr debugfs directory [ 70.178438][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.199322][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.210774][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.244210][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.336735][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.350993][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.364582][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.379860][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.463871][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.486978][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.504715][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.527767][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.608081][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.620851][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.631958][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.652313][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.690208][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.741349][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.772813][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.780144][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.808243][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.815418][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.834609][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.930891][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.973616][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.988927][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.996044][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.015021][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.022185][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.034276][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.068067][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.105439][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.112637][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.142627][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.149837][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.170967][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.199263][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.206458][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.240301][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.247566][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.362559][ T5784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.373111][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.461882][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.574004][ T5785] veth0_vlan: entered promiscuous mode [ 71.590524][ T5785] veth1_vlan: entered promiscuous mode [ 71.711755][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.738993][ T5785] veth0_macvtap: entered promiscuous mode [ 71.759721][ T5785] veth1_macvtap: entered promiscuous mode [ 71.804217][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.840585][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.880370][ T5782] veth0_vlan: entered promiscuous mode [ 71.887592][ T5795] Bluetooth: hci0: command tx timeout [ 71.893703][ T5105] Bluetooth: hci2: command tx timeout [ 71.893719][ T50] Bluetooth: hci1: command tx timeout [ 71.896841][ T5789] Bluetooth: hci3: command tx timeout [ 71.903683][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.919596][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.930518][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.939823][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.976856][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.978843][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.983694][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.023205][ T5782] veth1_vlan: entered promiscuous mode [ 72.049832][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.167176][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.175193][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.232751][ T5784] veth0_vlan: entered promiscuous mode [ 72.239622][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.248736][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.255642][ T5784] veth1_vlan: entered promiscuous mode [ 72.273624][ T5782] veth0_macvtap: entered promiscuous mode [ 72.286488][ T5783] veth0_vlan: entered promiscuous mode [ 72.298673][ T5782] veth1_macvtap: entered promiscuous mode [ 72.341340][ T5783] veth1_vlan: entered promiscuous mode [ 72.358322][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.371951][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.394950][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.419949][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.432137][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.443690][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.473000][ T5784] veth0_macvtap: entered promiscuous mode [ 72.488186][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.499763][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.508743][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.518117][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.535382][ T5784] veth1_macvtap: entered promiscuous mode [ 72.579907][ T5783] veth0_macvtap: entered promiscuous mode [ 72.633478][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.644468][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.657544][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.668415][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.680824][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.705205][ T5783] veth1_macvtap: entered promiscuous mode [ 72.743898][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.761166][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.773042][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.784369][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.798167][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.840634][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.851892][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.863425][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.874094][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.884871][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.895573][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.908376][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.927490][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.937135][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.945003][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.966922][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.975707][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.993860][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.047600][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.070532][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.081097][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.092637][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.102810][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.113726][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.127203][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.189375][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.201404][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.211302][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.222554][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.245066][ T5881] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.8'. [ 73.258346][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.270371][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.522174][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.546176][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.686288][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.704998][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.738784][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.759498][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.832470][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.861024][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.927652][ T5895] syz.3.12[5895]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.968884][ T5789] Bluetooth: hci3: command tx timeout [ 73.974362][ T5789] Bluetooth: hci2: command tx timeout [ 73.980490][ T5105] Bluetooth: hci0: command tx timeout [ 73.980544][ T5795] Bluetooth: hci1: command tx timeout [ 74.041490][ T5895] loop3: detected capacity change from 0 to 1024 [ 74.178894][ T5902] sch_fq: defrate 4294967295 ignored. [ 74.180544][ T5895] hfsplus: bad catalog entry type [ 74.311915][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 74.706297][ T27] audit: type=1326 audit(1753359899.315:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58dd8e9a9 code=0x7ffc0000 [ 74.804681][ T27] audit: type=1326 audit(1753359899.315:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58dd8e9a9 code=0x7ffc0000 [ 74.855702][ T5920] loop1: detected capacity change from 0 to 512 [ 74.861052][ T27] audit: type=1326 audit(1753359899.345:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe58dd8d310 code=0x7ffc0000 [ 74.884223][ T27] audit: type=1326 audit(1753359899.345:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe58dd8d310 code=0x7ffc0000 [ 74.915594][ T5920] ======================================================= [ 74.915594][ T5920] WARNING: The mand mount option has been deprecated and [ 74.915594][ T5920] and is ignored by this kernel. Remove the mand [ 74.915594][ T5920] option from the mount to silence this warning. [ 74.915594][ T5920] ======================================================= [ 74.989587][ T27] audit: type=1326 audit(1753359899.345:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58dd8e9a9 code=0x7ffc0000 [ 75.012092][ T5920] EXT4-fs: Ignoring removed nobh option [ 75.062550][ T27] audit: type=1326 audit(1753359899.345:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58dd8e9a9 code=0x7ffc0000 [ 75.097406][ T27] audit: type=1326 audit(1753359899.355:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe58dd8e9a9 code=0x7ffc0000 [ 75.125075][ T27] audit: type=1326 audit(1753359899.365:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58dd8e9a9 code=0x7ffc0000 [ 75.157835][ T5920] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 75.175319][ T5920] System zones: 0-2, 18-18, 34-34 [ 75.190217][ T5920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.208691][ T5920] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.297274][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.363825][ T5920] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 75.363985][ T5922] loop3: detected capacity change from 0 to 32768 [ 75.432530][ T5922] [ 75.432530][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.432530][ T5922] [ 75.482737][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.512254][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.513740][ T5922] [ 75.513740][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.513740][ T5922] [ 75.541576][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.573736][ T5922] [ 75.573736][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.573736][ T5922] [ 75.590940][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 75.612263][ T5922] [ 75.612263][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.612263][ T5922] [ 75.626891][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.657728][ T5922] [ 75.657728][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.657728][ T5922] [ 75.678053][ T42] usb 1-1: config 0 descriptor?? [ 75.694391][ T5922] [ 75.694391][ T5922] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.694391][ T5922] [ 75.752553][ T111] [ 75.752553][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.752553][ T111] [ 75.868117][ T5935] loop1: detected capacity change from 0 to 128 [ 75.878070][ T41] [ 75.878070][ T41] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.878070][ T41] [ 75.903381][ T5935] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.925773][ T5935] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.936942][ T41] [ 75.936942][ T41] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 75.936942][ T41] [ 76.015372][ T5785] [ 76.015372][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.015372][ T5785] [ 76.029748][ T5785] [ 76.029748][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 76.029748][ T5785] [ 76.047792][ T5795] Bluetooth: hci1: command tx timeout [ 76.055075][ T50] Bluetooth: hci2: command tx timeout [ 76.055123][ T5789] Bluetooth: hci0: command tx timeout [ 76.061523][ T5795] Bluetooth: hci3: command tx timeout [ 76.082966][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.092444][ T110] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 76.096275][ T5938] netlink: 172 bytes leftover after parsing attributes in process `syz.2.29'. [ 76.104162][ T110] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 76.104196][ T110] CPU: 0 PID: 110 Comm: jfsCommit Not tainted 6.6.100-syzkaller #0 [ 76.104211][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.104223][ T110] RIP: 0010:lmLogSync+0xfc/0x9c0 [ 76.144443][ T110] Code: 1e 86 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 82 64 dd fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 66 64 dd fe 49 8b 3f e8 ae 85 b3 fe [ 76.164862][ T110] RSP: 0018:ffffc9000262fc40 EFLAGS: 00010202 [ 76.170955][ T110] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 76.178952][ T110] RDX: ffff888018b1bc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 76.186949][ T110] RBP: ffffc9000262fd48 R08: 0000000000000003 R09: 0000000000000000 [ 76.195019][ T110] R10: ffffc9000262fca0 R11: fffff520004c5f98 R12: ffff888024071000 [ 76.196563][ T42] logitech-hidpp-device 0003:046D:C262.0001: unbalanced collection at end of report description [ 76.202985][ T110] R13: dffffc0000000000 R14: ffff888024c00e38 R15: 0000000000000040 [ 76.203002][ T110] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 76.203014][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.203023][ T110] CR2: 00007fb6582e56c0 CR3: 0000000061e6e000 CR4: 00000000003506f0 [ 76.233215][ T42] logitech-hidpp-device 0003:046D:C262.0001: hidpp_probe:parse failed [ 76.236987][ T110] Call Trace: [ 76.237001][ T110] [ 76.237010][ T110] ? lmWriteRecord+0x1ac0/0x1ac0 [ 76.237034][ T110] ? __rwlock_init+0x150/0x150 [ 76.237053][ T110] jfs_syncpt+0x7b/0x90 [ 76.237067][ T110] txEnd+0x2e5/0x520 [ 76.237080][ T110] jfs_lazycommit+0x5a6/0xa60 [ 76.237097][ T110] ? txFreelock+0x5a0/0x5a0 [ 76.237111][ T110] ? do_task_dead+0xd0/0xd0 [ 76.237125][ T110] ? __kthread_parkme+0x7a/0x1c0 [ 76.237147][ T110] kthread+0x2fa/0x390 [ 76.237160][ T110] ? txFreelock+0x5a0/0x5a0 [ 76.237176][ T110] ? kthread_blkcg+0xd0/0xd0 [ 76.237189][ T110] ret_from_fork+0x48/0x80 [ 76.237206][ T110] ? kthread_blkcg+0xd0/0xd0 [ 76.237219][ T110] ret_from_fork_asm+0x11/0x20 [ 76.237243][ T110] [ 76.249246][ T42] logitech-hidpp-device: probe of 0003:046D:C262.0001 failed with error -22 [ 76.253335][ T110] Modules linked in: [ 76.257935][ T110] ---[ end trace 0000000000000000 ]--- [ 76.347927][ T110] RIP: 0010:lmLogSync+0xfc/0x9c0 [ 76.353065][ T110] Code: 1e 86 fe 4d 8d 7e d8 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 82 64 dd fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 66 64 dd fe 49 8b 3f e8 ae 85 b3 fe [ 76.373572][ T110] RSP: 0018:ffffc9000262fc40 EFLAGS: 00010202 [ 76.380931][ T110] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000000 [ 76.389754][ T110] RDX: ffff888018b1bc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 76.406286][ T110] RBP: ffffc9000262fd48 R08: 0000000000000003 R09: 0000000000000000 [ 76.415087][ T110] R10: ffffc9000262fca0 R11: fffff520004c5f98 R12: ffff888024071000 [ 76.423420][ T110] R13: dffffc0000000000 R14: ffff888024c00e38 R15: 0000000000000040 [ 76.431848][ T110] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 76.441243][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.449459][ T110] CR2: 00007fa31a781d38 CR3: 000000007876a000 CR4: 00000000003506e0 [ 76.457629][ T110] Kernel panic - not syncing: Fatal exception [ 76.460132][ T5870] usb 1-1: USB disconnect, device number 2 [ 76.469829][ T110] Kernel Offset: disabled [ 76.474144][ T110] Rebooting in 86400 seconds..