last executing test programs: 12.701394128s ago: executing program 4 (id=152): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x8c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x10) read$FUSE(r0, &(0x7f0000006a80)={0x2020}, 0x2020) 11.275639412s ago: executing program 4 (id=155): socket$inet(0x2, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x24044000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002e0009002abd70000000000004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 10.447908858s ago: executing program 1 (id=157): fchdir(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000300)=0x40) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000518260e702500000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.689972451s ago: executing program 1 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x7f, 0x0}}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 9.586534974s ago: executing program 4 (id=160): io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) 8.871642496s ago: executing program 1 (id=162): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1c68, &(0x7f00000001c0)={0x0, 0xaebb, 0x2, 0x20000a, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8.653435773s ago: executing program 4 (id=164): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f0000000240)=ANY=[], 0xf7, 0x1501, &(0x7f0000001980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r3, &(0x7f0000000fc0)=""/224, 0xe0) 8.032588772s ago: executing program 1 (id=166): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffd, @mcast1}, 0x33) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 6.075611312s ago: executing program 4 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) 6.050345703s ago: executing program 1 (id=171): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(r1, 0x0, 0x98) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006180)={0x24, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) removexattr(0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xadb, 0x8, 0x5, 0x8000080}, 0x0, 0x0, &(0x7f0000000000)) 4.875563919s ago: executing program 4 (id=173): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x84, 0x0, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 3.001596007s ago: executing program 1 (id=176): writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000d00)="294108ffab92e6d5e8ebde70f5fc6f31b0cd6c91ee3cee8cff5a303e0ea59fa081c03f5d829fe72c54e5de4d1103b7005cc7255bd13b5d0ea1ae0a8e29a1f17b95be845cffbeff4d0f73ebcfe954a913a317bf911829", 0x56}, {&(0x7f0000000580)="8b14", 0x2}], 0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000140)=ANY=[]) 1.567698671s ago: executing program 3 (id=186): r0 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) 1.458814864s ago: executing program 3 (id=188): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(0xffffffffffffffff, 0x8919, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x60, 0x3, 0x14, 0x3}, 0x8, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0}) 778.891876ms ago: executing program 2 (id=190): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e00010069703667726574617000000034000280140007"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x400c050) 777.967365ms ago: executing program 0 (id=191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x28, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x2, 0xfffd, 0x0, 0x3, {[@md5sig={0x13, 0x12, "7e643306a489bade4218f210e1f3f0a2"}]}}}}}}}}, 0x0) 679.239518ms ago: executing program 2 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 631.68495ms ago: executing program 0 (id=193): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a00"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) 621.32466ms ago: executing program 3 (id=194): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 602.479841ms ago: executing program 2 (id=195): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c) personality(0x87bf5ac905ea0f7f) connect$inet6(r0, &(0x7f0000001d40)={0xa, 0x4e0d, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x24) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c040) 475.657185ms ago: executing program 3 (id=196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="1cdecc02d08a4f57a1080b2dcf5738e3aad03a24407cf8f340a770716006ca1d15ddef39d0f5e94f240e8cc7", 0x2c, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0xffffff1e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) sendto$inet6(r0, &(0x7f0000000180)="d8", 0x1, 0x20000040, 0x0, 0x0) 452.165506ms ago: executing program 2 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r1, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) 441.385116ms ago: executing program 3 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070026bd7000fddbdf2505000000180001801400020073797a5f74756e0000000000000000000c000380040003800400010008000500"], 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 283.688261ms ago: executing program 0 (id=199): syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f00000006c0), 0x0, 0x0, {0x2b}, 0x0, 0xffffffffffffffe2, 0x0, 0x0}, 0x58) 260.839042ms ago: executing program 0 (id=200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x80000000, 0x9000, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) 258.048882ms ago: executing program 3 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0xc050) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r4) sendmsg$inet6(r4, 0x0, 0x0) r5 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) 230.362382ms ago: executing program 2 (id=202): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x2, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) 35.638168ms ago: executing program 0 (id=203): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffe, 0x1, &(0x7f0000006680)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 35.328678ms ago: executing program 2 (id=204): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 0 (id=205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000940)=[{&(0x7f0000000000)=""/129, 0x81}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000a00)=""/137, 0x89}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 46.103996][ T4175] cgroup: Unknown subsys name 'net' [ 46.209482][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.402382][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 49.294768][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 49.356562][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 49.382937][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 49.416327][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 49.498190][ T4200] chnl_net:caif_netlink_parms(): no params data found [ 49.512626][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.519880][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.528137][ T4197] device bridge_slave_0 entered promiscuous mode [ 49.546644][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.553857][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.561406][ T4187] device bridge_slave_0 entered promiscuous mode [ 49.569374][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.576585][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.584771][ T4197] device bridge_slave_1 entered promiscuous mode [ 49.613812][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.620868][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.629110][ T4187] device bridge_slave_1 entered promiscuous mode [ 49.674280][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.681349][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.689155][ T4196] device bridge_slave_0 entered promiscuous mode [ 49.699140][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.706437][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.714744][ T4188] device bridge_slave_0 entered promiscuous mode [ 49.724047][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.735385][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.746067][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.755582][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.763171][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.771255][ T4196] device bridge_slave_1 entered promiscuous mode [ 49.781114][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.788228][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.796393][ T4188] device bridge_slave_1 entered promiscuous mode [ 49.816270][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.859698][ T4187] team0: Port device team_slave_0 added [ 49.873988][ T4197] team0: Port device team_slave_0 added [ 49.881389][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.896682][ T4187] team0: Port device team_slave_1 added [ 49.904279][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.914945][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.925418][ T4197] team0: Port device team_slave_1 added [ 49.947714][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.954917][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.963146][ T4200] device bridge_slave_0 entered promiscuous mode [ 49.971578][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.002557][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.009630][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.017477][ T4200] device bridge_slave_1 entered promiscuous mode [ 50.037159][ T4196] team0: Port device team_slave_0 added [ 50.044000][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.050948][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.077056][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.101178][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.108250][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.134206][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.147381][ T4188] team0: Port device team_slave_0 added [ 50.154747][ T4196] team0: Port device team_slave_1 added [ 50.162581][ T4188] team0: Port device team_slave_1 added [ 50.168661][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.175836][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.201801][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.214683][ T4200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.224180][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.231128][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.257509][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.289800][ T4200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.309970][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.316975][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.343167][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.384672][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.391625][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.417858][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.429446][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.436645][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.463041][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.480609][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.487880][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.514074][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.528145][ T4197] device hsr_slave_0 entered promiscuous mode [ 50.535632][ T4197] device hsr_slave_1 entered promiscuous mode [ 50.553180][ T4200] team0: Port device team_slave_0 added [ 50.567469][ T4187] device hsr_slave_0 entered promiscuous mode [ 50.574911][ T4187] device hsr_slave_1 entered promiscuous mode [ 50.581476][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.589641][ T4187] Cannot create hsr debugfs directory [ 50.609237][ T4200] team0: Port device team_slave_1 added [ 50.647391][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.654621][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.680605][ T4200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.698091][ T4200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.705149][ T4200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.731115][ T4200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.764355][ T4196] device hsr_slave_0 entered promiscuous mode [ 50.770999][ T4196] device hsr_slave_1 entered promiscuous mode [ 50.777901][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.786282][ T4196] Cannot create hsr debugfs directory [ 50.809764][ T4188] device hsr_slave_0 entered promiscuous mode [ 50.816500][ T4188] device hsr_slave_1 entered promiscuous mode [ 50.823640][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.831197][ T4188] Cannot create hsr debugfs directory [ 50.866871][ T4200] device hsr_slave_0 entered promiscuous mode [ 50.874541][ T4200] device hsr_slave_1 entered promiscuous mode [ 50.881128][ T4200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.889017][ T4200] Cannot create hsr debugfs directory [ 51.022887][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 51.022888][ T1107] Bluetooth: hci3: command 0x0409 tx timeout [ 51.035492][ T4189] Bluetooth: hci0: command 0x0409 tx timeout [ 51.105192][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 51.117399][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 51.145718][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.158072][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.167059][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.176477][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.235481][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.248944][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.263050][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.272948][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.320685][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.330027][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.350797][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.365559][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.375547][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.409943][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.419356][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.431465][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.443899][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.460116][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.471139][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.481862][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.490030][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.498851][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.511055][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.518315][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.553737][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.562351][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.570859][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.580017][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.587128][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.595750][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.604745][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.625498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.634720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.644750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.672690][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.683296][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.700465][ T4200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.710003][ T4200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.722789][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.733728][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.742143][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.750358][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.760102][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.768409][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.777350][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.787358][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.801313][ T4200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.835730][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.850705][ T4200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.867667][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.875887][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.899199][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.910047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.922739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.931201][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.938318][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.960734][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.978766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.986772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.997125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.006029][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.013137][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.021325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.029465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.037161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.069452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.078208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.088149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.097275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.106031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.115564][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.122673][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.130164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.138993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.147623][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.154708][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.162670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.171086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.179697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.187503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.197894][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.205581][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.252100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.260842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.269622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.278998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.288017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.297069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.305911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.314334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.322787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.330936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.339377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.347935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.356202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.364567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.376456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.388195][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.398402][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.414584][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.437706][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.473566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.481249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.511605][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.538422][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.568253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.588965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.606786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.619713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.642236][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.649321][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.657814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.679836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.689015][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.696180][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.704390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.720039][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.730447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.770360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.780306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.795874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.805748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.814529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.823682][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.830731][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.838497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.848924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.857700][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.864803][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.873717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.881114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.888771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.897336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.911038][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.928987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.937203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.946852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.956383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.965777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.974455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.993318][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.010759][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.022443][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.039098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.048815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.057722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.069878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.078735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.087523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.096412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.104525][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 53.110808][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 53.111701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.117015][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 53.136055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.144088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.151555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.160023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.183130][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 53.189218][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 53.211775][ T4200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.226656][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.235338][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.250381][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.259263][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.268245][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.277787][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.286542][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.296503][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.305243][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.332384][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.340536][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.354185][ T4187] device veth0_vlan entered promiscuous mode [ 53.365315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.373174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.384778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.394558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.406090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.414144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.427134][ T4197] device veth0_vlan entered promiscuous mode [ 53.439625][ T4196] device veth0_vlan entered promiscuous mode [ 53.457686][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.467438][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.477553][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.485708][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.493894][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.501661][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.513718][ T4197] device veth1_vlan entered promiscuous mode [ 53.538817][ T4196] device veth1_vlan entered promiscuous mode [ 53.548451][ T4187] device veth1_vlan entered promiscuous mode [ 53.559773][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.617079][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.630798][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.640245][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.649039][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.670032][ T4196] device veth0_macvtap entered promiscuous mode [ 53.685269][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.693759][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.705908][ T4196] device veth1_macvtap entered promiscuous mode [ 53.723248][ T4187] device veth0_macvtap entered promiscuous mode [ 53.734485][ T4197] device veth0_macvtap entered promiscuous mode [ 53.743257][ T4187] device veth1_macvtap entered promiscuous mode [ 53.751304][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.759600][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.768177][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.776457][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.784297][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.793140][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.801488][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.809320][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.817018][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.827839][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.836763][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.862880][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.872290][ T4197] device veth1_macvtap entered promiscuous mode [ 53.885911][ T4188] device veth0_vlan entered promiscuous mode [ 53.893110][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.901042][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.909832][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.917647][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.926242][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.936481][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.947234][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.958582][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.973257][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.981669][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.994794][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.004084][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.013571][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.022040][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.039961][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.051908][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.064724][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.076871][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.086032][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.095214][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.104006][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.116420][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.125382][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.134520][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.143478][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.156779][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.168274][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.178430][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.189411][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.201846][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.210622][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.220122][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.231005][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.240300][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.257395][ T4188] device veth1_vlan entered promiscuous mode [ 54.273159][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.284530][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.294662][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.307408][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.318415][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.328921][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.337940][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.346820][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.355543][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.368010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.376280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.386817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.406565][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.416460][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.425336][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.459631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.468240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.490885][ T4200] device veth0_vlan entered promiscuous mode [ 54.512791][ T4188] device veth0_macvtap entered promiscuous mode [ 54.521352][ T4188] device veth1_macvtap entered promiscuous mode [ 54.531264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.538982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.548662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.557258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.566064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.580332][ T4200] device veth1_vlan entered promiscuous mode [ 54.631436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.670392][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.674372][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.693460][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.706163][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.706186][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.715661][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.731246][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.742653][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.752734][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.763807][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.774936][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.814361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.822647][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.823193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.830465][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.842563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.855212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.864125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.873090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.881415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.890722][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.901622][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.911459][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.923750][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.933871][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.945073][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.956578][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.978936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.987939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.005495][ T4200] device veth0_macvtap entered promiscuous mode [ 55.012178][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.019985][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.038884][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.047690][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.057821][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.066992][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.078477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.086810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.112674][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.122030][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.136098][ T4200] device veth1_macvtap entered promiscuous mode [ 55.151323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.167834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.183368][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 55.190301][ T1415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.190555][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 55.204266][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 55.210891][ T1415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.230016][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.242894][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.255379][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.267028][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 55.267615][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.273480][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 55.290108][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.300602][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.310412][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.320983][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.333306][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.351170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.373879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.393216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.424583][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.459986][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.480531][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.530595][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.540740][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.551310][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.561136][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.573303][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.608274][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.678802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.687496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.702551][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.725525][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.747284][ T4274] loop2: detected capacity change from 0 to 256 [ 55.756917][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.766103][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.815010][ T4274] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.858628][ T4274] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.876112][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.915078][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.953697][ T1415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.981466][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.991498][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.010025][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.011918][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.063555][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.071892][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.191322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.203312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.211366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.021990][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 57.042001][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 57.051983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 57.061983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 57.071982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 57.081982][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 57.091975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 57.101976][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 57.111979][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 57.121987][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 57.474556][ T4289] loop2: detected capacity change from 0 to 131072 [ 57.503086][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 57.523149][ T4289] XFS: ikeep mount option is deprecated. [ 57.876917][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 57.884154][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 57.892217][ T4233] Bluetooth: hci2: command 0x0419 tx timeout [ 57.900162][ T4233] Bluetooth: hci4: command 0x0419 tx timeout [ 57.944245][ T4289] XFS (loop2): Mounting V5 Filesystem [ 58.054825][ T4319] netlink: 136 bytes leftover after parsing attributes in process `syz.1.15'. [ 58.067682][ T4289] XFS (loop2): Starting recovery (logdev: internal) [ 58.155670][ T4289] XFS (loop2): Ending recovery (logdev: internal) [ 58.819957][ T4302] loop0: detected capacity change from 0 to 32768 [ 58.965707][ T4302] XFS (loop0): Mounting V5 Filesystem [ 59.310269][ T4302] XFS (loop0): Ending clean mount [ 59.476773][ T4324] loop1: detected capacity change from 0 to 32768 [ 59.635268][ T4324] ======================================================= [ 59.635268][ T4324] WARNING: The mand mount option has been deprecated and [ 59.635268][ T4324] and is ignored by this kernel. Remove the mand [ 59.635268][ T4324] option from the mount to silence this warning. [ 59.635268][ T4324] ======================================================= [ 59.876895][ T4324] JBD2: Ignoring recovery information on journal [ 59.987911][ T4196] XFS (loop0): Unmounting Filesystem [ 60.024563][ T4324] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 60.209720][ T26] audit: type=1804 audit(1779728137.126:2): pid=4324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.16" name="/newroot/2/file1/file1" dev="loop1" ino=17059 res=1 errno=0 [ 60.241708][ T4350] block device autoloading is deprecated and will be removed. [ 60.296279][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 60.527489][ T4353] loop3: detected capacity change from 0 to 1764 [ 60.839521][ T4363] xt_CONNSECMARK: invalid mode: 66 [ 61.919831][ T4366] ODEBUG: Out of memory. ODEBUG disabled [ 62.836090][ T4374] Zero length message leads to an empty skb [ 63.092935][ T4376] loop3: detected capacity change from 0 to 32768 [ 63.142170][ T4376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.27 (4376) [ 63.164384][ T4376] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 63.173381][ T4376] BTRFS info (device loop3): setting nodatacow, compression disabled [ 63.181517][ T4376] BTRFS info (device loop3): force clearing of disk cache [ 63.188716][ T4376] BTRFS info (device loop3): enabling ssd optimizations [ 63.195727][ T4376] BTRFS info (device loop3): using spread ssd allocation scheme [ 63.203418][ T4376] BTRFS info (device loop3): turning off barriers [ 63.209893][ T4376] BTRFS info (device loop3): disabling free space tree [ 63.216802][ T4376] BTRFS info (device loop3): not using ssd optimizations [ 63.223873][ T4376] BTRFS info (device loop3): not using spread ssd allocation scheme [ 63.231866][ T4376] BTRFS info (device loop3): has skinny extents [ 63.310664][ T4197] XFS (loop2): Unmounting Filesystem [ 63.596762][ T4397] loop0: detected capacity change from 0 to 2048 [ 63.617050][ T4376] BTRFS info (device loop3): clearing free space tree [ 63.624605][ T4376] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.634563][ T4376] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.742389][ T4376] loop3: detected capacity change from 32768 to 0 [ 63.811763][ T4342] loop: Write error at byte offset 9223372036860022779, length 4096. [ 63.874850][ C1] blk_update_request: I/O error, dev loop3, sector 10248 op 0x1:(WRITE) flags 0x1800 phys_seg 2 prio class 0 [ 63.879373][ T4397] NILFS (loop0): invalid segment: Magic number mismatch [ 63.886897][ C1] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 63.904669][ T4342] loop: Write error at byte offset 9223372036860035067, length 4096. [ 63.921994][ T4342] loop: Write error at byte offset 9223372036860047355, length 4096. [ 63.942034][ C1] blk_update_request: I/O error, dev loop3, sector 10272 op 0x1:(WRITE) flags 0x1800 phys_seg 2 prio class 0 [ 63.953659][ C1] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 63.963692][ C1] blk_update_request: I/O error, dev loop3, sector 10296 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 0 [ 63.963794][ T4397] NILFS (loop0): trying rollback from an earlier position [ 63.975287][ C1] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 63.996100][ T4376] BTRFS: error (device loop3) in __btrfs_update_delayed_inode:995: errno=-5 IO failure [ 64.005999][ T4376] BTRFS info (device loop3): forced readonly [ 64.012103][ T4376] BTRFS: error (device loop3) in __btrfs_run_delayed_items:1089: errno=-5 IO failure [ 64.022043][ T4376] BTRFS warning (device loop3): Skipping commit of aborted transaction. [ 64.030420][ T4376] BTRFS: error (device loop3) in cleanup_transaction:2021: errno=-5 IO failure [ 64.067750][ T4376] BTRFS: error (device loop3) in free_log_tree:3428: errno=-5 IO failure [ 64.077053][ T4376] BTRFS: error (device loop3) in free_log_tree:3428: errno=-5 IO failure [ 64.082734][ T4397] NILFS (loop0): recovery complete [ 64.159587][ T4404] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.845642][ T4417] md: md2 stopped. [ 64.983759][ T4431] block device autoloading is deprecated and will be removed. [ 65.001494][ T4425] md: md2 stopped. [ 65.332185][ T4408] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 65.782534][ T4408] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.960502][ T4408] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 66.015899][ T4408] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 66.069991][ T4408] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.186489][ T4408] usb 3-1: config 0 descriptor?? [ 66.305187][ T4408] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 66.346177][ T4408] dvb-usb: bulk message failed: -22 (3/0) [ 66.387265][ T4408] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 66.404332][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 66.408070][ T4455] loop3: detected capacity change from 0 to 1024 [ 66.452913][ T4408] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 66.474916][ T4408] usb 3-1: media controller created [ 66.537566][ T4408] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.585672][ T4408] dvb-usb: bulk message failed: -22 (6/0) [ 66.600242][ T4408] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 66.654050][ T4408] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 66.695690][ T4408] dvb-usb: schedule remote query interval to 150 msecs. [ 66.729060][ T4408] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 66.883803][ T4408] dvb-usb: bulk message failed: -22 (1/0) [ 66.889732][ T4408] dvb-usb: error while querying for an remote control event. [ 66.935103][ T4409] usb 3-1: USB disconnect, device number 2 [ 67.196636][ T4409] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 68.151722][ T4477] block device autoloading is deprecated and will be removed. [ 68.332796][ T4409] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.612355][ T4409] usb 1-1: Using ep0 maxpacket: 8 [ 68.762577][ T4409] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.863970][ T4409] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.950073][ T4409] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 70.206536][ T4409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.263398][ T4409] usb 1-1: config 0 descriptor?? [ 70.384661][ T4497] loop3: detected capacity change from 0 to 128 [ 70.752302][ T4262] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.822288][ T4409] usbhid 1-1:0.0: can't add hid device: -71 [ 70.828313][ T4409] usbhid: probe of 1-1:0.0 failed with error -71 [ 70.843994][ T4409] usb 1-1: USB disconnect, device number 2 [ 71.202784][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.209382][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.216940][ T4262] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 71.249429][ T4262] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.492263][ T4262] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.529471][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.584622][ T4262] usb 2-1: Product: syz [ 71.644409][ T4262] usb 2-1: Manufacturer: syz [ 71.655901][ T4262] usb 2-1: SerialNumber: syz [ 71.689653][ T4262] usb 2-1: config 0 descriptor?? [ 71.713156][ T4493] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 71.743818][ T4262] usb 2-1: selecting invalid altsetting 0 [ 72.095835][ T4493] usb 2-1: selecting invalid altsetting 0 [ 72.101777][ T4493] usb 2-1: 0:0: usb_set_interface failed (-22) [ 72.116140][ T4493] usb 2-1: selecting invalid altsetting 0 [ 72.123326][ T4493] usb 2-1: 0:0: usb_set_interface failed (-22) [ 72.179173][ T4493] usb 2-1: selecting invalid altsetting 0 [ 72.181959][ T4262] usb 2-1: USB disconnect, device number 2 [ 72.203741][ T4524] loop0: detected capacity change from 0 to 64 [ 72.210082][ T4493] usb 2-1: 0:0: usb_set_interface failed (-22) [ 72.321260][ T26] audit: type=1800 audit(1779728149.236:3): pid=4524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.64" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 72.337881][ T4520] loop3: detected capacity change from 0 to 32768 [ 72.340383][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.496384][ T4520] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.63 (4520) [ 72.602619][ T4520] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 72.630869][ T4520] BTRFS info (device loop3): using free space tree [ 72.640907][ T4520] BTRFS info (device loop3): has skinny extents [ 72.705430][ T4529] loop2: detected capacity change from 0 to 4096 [ 72.773142][ T4529] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.868280][ T4529] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.66: corrupted inode contents [ 72.899580][ T4529] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.66: mark_inode_dirty error [ 72.943407][ T4529] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.66: corrupted inode contents [ 73.006424][ T4529] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.66: mark_inode_dirty error [ 73.046406][ T4548] loop1: detected capacity change from 0 to 8192 [ 73.048649][ T4520] BTRFS info (device loop3): enabling ssd optimizations [ 73.088475][ T4529] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.66: corrupted inode contents [ 73.109433][ T4529] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.66: mark_inode_dirty error [ 73.149720][ T26] audit: type=1800 audit(1779728150.066:4): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.63" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 73.191395][ T4529] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.66: corrupted inode contents [ 73.221515][ T4529] EXT4-fs error (device loop2): ext4_truncate:4286: inode #15: comm syz.2.66: mark_inode_dirty error [ 73.244953][ T4548] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 73.248337][ T4529] EXT4-fs error (device loop2): ext4_evict_inode:295: comm syz.2.66: couldn't truncate inode 15 (err -117) [ 73.317690][ T4548] FAT-fs (loop1): Filesystem has been set read-only [ 73.536255][ T4527] loop0: detected capacity change from 0 to 32768 [ 73.622131][ T4527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.65 (4527) [ 74.642742][ C1] sched: RT throttling activated [ 74.994259][ T4559] Bluetooth: hci1: command 0x0406 tx timeout [ 75.025874][ T4527] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 75.069896][ T4527] BTRFS info (device loop0): metadata ratio 2 [ 75.088606][ T4527] BTRFS info (device loop0): metadata ratio 4 [ 75.116873][ T4527] BTRFS info (device loop0): force zlib compression, level 3 [ 75.262598][ T4527] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 75.302866][ T4527] BTRFS info (device loop0): use zstd compression, level 3 [ 75.675612][ T4527] BTRFS info (device loop0): force clearing of disk cache [ 75.694614][ T4527] BTRFS info (device loop0): allowing degraded mounts [ 75.711748][ T4527] BTRFS info (device loop0): max_inline at 0 [ 75.731148][ T4527] BTRFS info (device loop0): using free space tree [ 75.743509][ T4527] BTRFS info (device loop0): has skinny extents [ 75.754094][ T4233] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.984253][ T4527] BTRFS error (device loop0): open_ctree failed: -12 [ 76.016120][ T4180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4180) [ 76.110862][ T4562] loop1: detected capacity change from 0 to 32768 [ 76.132370][ T4233] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 76.382301][ T4233] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 76.448784][ T4608] No such timeout policy "syz1" [ 77.175010][ T1110] cfg80211: failed to load regulatory.db [ 77.218574][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.257468][ T4233] usb 4-1: Product: syz [ 77.287455][ T4233] usb 4-1: Manufacturer: syz [ 77.329402][ T4233] usb 4-1: SerialNumber: syz [ 77.545306][ T4233] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 78.906709][ T4233] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 79.115640][ T4233] usb 4-1: USB disconnect, device number 2 [ 79.773503][ T4631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.897523][ T4636] loop0: detected capacity change from 0 to 1764 [ 80.616779][ T4646] loop3: detected capacity change from 0 to 512 [ 80.634729][ T4648] loop1: detected capacity change from 0 to 64 [ 80.894146][ T4646] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.912585][ T4646] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.973370][ T4659] loop1: detected capacity change from 0 to 16 [ 81.003713][ T4646] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 81.117307][ T4659] erofs: (device loop1): mounted with root inode @ nid 36. [ 81.706240][ T4672] attempt to access beyond end of device [ 81.706240][ T4672] loop1: rw=524288, want=7864336, limit=16 [ 81.719419][ T4672] attempt to access beyond end of device [ 81.719419][ T4672] loop1: rw=0, want=7864336, limit=16 [ 81.731818][ T26] audit: type=1800 audit(1779728158.656:5): pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 82.001566][ T4672] syz.1.95 (4672) used greatest stack depth: 21104 bytes left [ 82.015709][ T4666] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 82.570009][ T4682] loop0: detected capacity change from 0 to 32768 [ 82.626824][ T4682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.101 (4682) [ 82.683027][ T4682] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 82.691704][ T4682] BTRFS info (device loop0): force clearing of disk cache [ 82.698992][ T4682] BTRFS info (device loop0): enabling auto defrag [ 82.707311][ T4682] BTRFS info (device loop0): enabling ssd optimizations [ 82.714765][ T4682] BTRFS info (device loop0): using spread ssd allocation scheme [ 82.722456][ T4682] BTRFS info (device loop0): using free space tree [ 82.729153][ T4682] BTRFS info (device loop0): has skinny extents [ 82.757799][ T4687] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 82.771398][ T4687] netlink: 'syz.3.100': attribute type 2 has an invalid length. [ 83.013254][ T4689] loop4: detected capacity change from 0 to 40427 [ 83.068420][ T4689] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 83.076798][ T4689] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.240592][ T4689] F2FS-fs (loop4): invalid crc value [ 83.503762][ T4689] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.561764][ T4682] BTRFS info (device loop0): clearing free space tree [ 83.568770][ T4682] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.579262][ T4682] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.605308][ T4682] BTRFS info (device loop0): creating free space tree [ 83.615353][ T4682] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.624983][ T4682] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.634018][ T4689] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.642482][ T4689] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.398441][ T4728] binder: 4727:4728 unknown command 1074553619 [ 85.468178][ T4728] binder: 4727:4728 ioctl c0306201 200000000040 returned -22 [ 85.687991][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 86.014711][ T4751] loop2: detected capacity change from 0 to 4096 [ 88.749023][ T4790] loop2: detected capacity change from 0 to 16 [ 88.800152][ T4766] loop4: detected capacity change from 0 to 32768 [ 88.904480][ T4790] erofs: (device loop2): mounted with root inode @ nid 36. [ 88.967988][ T4761] loop3: detected capacity change from 0 to 32768 [ 89.029895][ T26] audit: type=1800 audit(1779728165.946:6): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.106" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 89.091204][ T4761] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.118 (4761) [ 89.190985][ T4795] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 89.201511][ T4795] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 89.232176][ T4557] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 89.252241][ T26] audit: type=1800 audit(1779728166.136:7): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.127" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 89.705802][ T4761] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 89.724486][ T4761] BTRFS info (device loop3): setting nodatacow, compression disabled [ 89.739312][ T4761] BTRFS info (device loop3): force clearing of disk cache [ 89.749218][ T4761] BTRFS info (device loop3): enabling ssd optimizations [ 89.762136][ T4761] BTRFS info (device loop3): using spread ssd allocation scheme [ 89.769817][ T4761] BTRFS info (device loop3): turning off barriers [ 89.792177][ T4761] BTRFS info (device loop3): disabling free space tree [ 89.799067][ T4761] BTRFS info (device loop3): not using ssd optimizations [ 89.802259][ T4557] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.842541][ T4557] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 89.857406][ T4557] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 89.863269][ T4761] BTRFS info (device loop3): not using spread ssd allocation scheme [ 89.902642][ T4761] BTRFS info (device loop3): has skinny extents [ 89.907681][ T4557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.952604][ T4557] usb 2-1: config 0 descriptor?? [ 89.970556][ T4804] loop0: detected capacity change from 0 to 16 [ 89.974257][ T4800] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 90.067531][ T4761] BTRFS error (device loop3): open_ctree failed: -12 [ 90.070289][ T4804] erofs: (device loop0): mounted with root inode @ nid 36. [ 90.109088][ T4557] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 90.115928][ T4557] dvb-usb: bulk message failed: -22 (3/0) [ 90.181843][ T4557] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 91.094372][ T4826] attempt to access beyond end of device [ 91.094372][ T4826] loop0: rw=524288, want=7864336, limit=16 [ 91.107537][ T4826] attempt to access beyond end of device [ 91.107537][ T4826] loop0: rw=0, want=7864336, limit=16 [ 91.119972][ T26] audit: type=1800 audit(1779728168.036:8): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.130" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 91.412115][ T4826] syz.0.130 (4826) used greatest stack depth: 20592 bytes left [ 91.413161][ T4557] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 91.426818][ T4557] usb 2-1: media controller created [ 91.433061][ T4557] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.452313][ T4557] dvb-usb: bulk message failed: -22 (6/0) [ 91.462276][ T4557] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 91.468187][ T4830] loop3: detected capacity change from 0 to 8 [ 91.513205][ T4557] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 91.542253][ T4557] dvb-usb: schedule remote query interval to 150 msecs. [ 91.549220][ T4557] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 91.711502][ T4556] dvb-usb: bulk message failed: -22 (1/0) [ 91.718291][ T4556] dvb-usb: error while querying for an remote control event. [ 91.934471][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 91.940240][ T1107] dvb-usb: error while querying for an remote control event. [ 93.230102][ T4403] dvb-usb: bulk message failed: -22 (1/0) [ 93.237019][ T4403] dvb-usb: error while querying for an remote control event. [ 93.302083][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.412127][ T4557] dvb-usb: bulk message failed: -22 (1/0) [ 93.417970][ T4557] dvb-usb: error while querying for an remote control event. [ 93.507362][ T4403] usb 2-1: USB disconnect, device number 3 [ 93.533395][ T4850] binder: 4844:4850 ioctl c0285840 200000000000 returned -22 [ 93.555713][ T4403] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 93.684602][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 93.693697][ T1107] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 93.699531][ T4854] loop4: detected capacity change from 0 to 16 [ 93.719315][ T1107] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.806750][ T4854] erofs: (device loop4): mounted with root inode @ nid 36. [ 93.852537][ T4853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.882264][ T1107] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.892686][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.901076][ T1107] usb 1-1: Product: syz [ 93.918093][ T1107] usb 1-1: Manufacturer: syz [ 93.940354][ T1107] usb 1-1: SerialNumber: syz [ 93.963495][ T1107] usb 1-1: config 0 descriptor?? [ 93.982531][ T4837] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.019708][ T1107] usb 1-1: selecting invalid altsetting 0 [ 94.529602][ T4863] No such timeout policy "syz1" [ 94.612300][ T4863] program syz.1.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.206682][ T4863] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 95.263873][ T23] usb 1-1: USB disconnect, device number 3 [ 95.867913][ T4866] loop0: detected capacity change from 0 to 131072 [ 95.963368][ T4866] F2FS-fs (loop0): invalid crc value [ 96.242195][ T4262] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 96.841097][ T4875] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.889028][ T4866] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.919271][ T4866] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 96.943092][ T4866] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 97.752368][ T4262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.772036][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 97.792044][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 97.803076][ T4262] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 98.422563][ T4262] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 98.446822][ T4262] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 98.459279][ T4262] usb 3-1: Manufacturer: syz [ 98.512346][ T4262] usb 3-1: config 0 descriptor?? [ 98.897648][ T4889] loop1: detected capacity change from 0 to 8192 [ 98.912277][ T4262] rc_core: IR keymap rc-hauppauge not found [ 98.918192][ T4262] Registered IR keymap rc-empty [ 98.983523][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 99.052059][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 99.083572][ T4262] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 99.114552][ T4889] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 99.147007][ T4262] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 99.167303][ T4889] FAT-fs (loop1): Filesystem has been set read-only [ 99.212243][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 99.273495][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 99.379176][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 99.902152][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 99.942131][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 99.982173][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 100.116895][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 100.754337][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 100.814821][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.014281][ T4262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 101.448490][ T4924] loop4: detected capacity change from 0 to 256 [ 101.461327][ T4262] mceusb 3-1:0.0: Registered ࠌ with mce emulator interface version 1 [ 101.472552][ T4262] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 101.487534][ T4262] usb 3-1: USB disconnect, device number 3 [ 101.709678][ T4924] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 102.158224][ T4262] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.610641][ T4934] loop0: detected capacity change from 0 to 32768 [ 102.687272][ T4936] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.567038][ T4937] MPTCP: addr_signal error, add_addr=1, echo=0 [ 103.567206][ T4937] MPTCP: addr_signal error, add_addr=1, echo=0 [ 103.582177][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 103.637815][ T4934] XFS (loop0): Mounting V5 Filesystem [ 104.749606][ T4262] usb 3-1: device descriptor read/all, error -71 [ 104.767130][ T4934] XFS (loop0): Ending clean mount [ 104.779417][ T4934] XFS (loop0): Quotacheck needed: Please wait. [ 104.911550][ T4934] XFS (loop0): Quotacheck: Done. [ 106.397238][ T4196] XFS (loop0): Unmounting Filesystem [ 107.907537][ T4731] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.923998][ T4986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.002047][ T4986] bond1: (slave ip6gretap1): making interface the new active one [ 108.046255][ T4986] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 108.055589][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 108.074409][ T4994] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 108.194869][ T4994] device bond1 entered promiscuous mode [ 108.212084][ T4731] usb 2-1: Using ep0 maxpacket: 32 [ 108.275320][ T4994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.351611][ T4999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 108.362331][ T4731] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 108.370710][ T4731] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 108.407111][ T4731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 108.417371][ T4731] usb 2-1: config 1 has no interface number 0 [ 108.423762][ T4731] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.435278][ T4731] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 108.449178][ T4731] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 108.458632][ T4731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.702315][ T5007] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 108.713309][ T5007] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.788430][ T4731] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 108.932791][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 108.960916][ T5014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.190'. [ 108.982892][ T4731] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 109.009335][ T5001] loop4: detected capacity change from 0 to 32768 [ 109.066091][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 109.102745][ T5001] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 109.102745][ T5001] [ 109.137128][ T5001] ERROR: (device loop4): remounting filesystem as read-only [ 109.147498][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 109.153832][ T5001] xtLookup: xtSearch returned -5 [ 109.180494][ T5001] add_index: get/read_metapage failed! [ 109.209567][ T5001] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 109.209567][ T5001] [ 109.227316][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 109.248007][ T5001] xtLookup: xtSearch returned -5 [ 109.269651][ T5001] free_index: error reading directory table [ 109.298023][ T5001] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 109.298023][ T5001] [ 109.336018][ T5001] xtLookup: xtSearch returned -5 [ 109.340998][ T5001] free_index: error reading directory table [ 109.348537][ T5031] bond0: (slave bond_slave_1): Releasing backup interface [ 109.373198][ T5001] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 109.373198][ T5001] [ 109.384017][ T5001] xtLookup: xtSearch returned -5 [ 109.388963][ T5001] free_index: error reading directory table [ 109.395849][ T5001] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 109.395849][ T5001] [ 109.437293][ T5001] xtLookup: xtSearch returned -5 [ 109.457519][ T5001] free_index: error reading directory table [ 109.470460][ T5039] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.477787][ T5001] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 109.477787][ T5001] [ 109.551238][ T5001] xtLookup: xtSearch returned -5 [ 109.579077][ T5001] free_index: error reading directory table [ 109.680275][ T5001] BUG: Bad page state in process syz.4.173 pfn:5d7a2 [ 109.692160][ T5001] page:ffffea000175e880 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2f pfn:0x5d7a2 [ 109.870750][ T5001] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 110.075310][ T4731] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 110.090350][ T5001] raw: 00fff00000002006 ffffea000175e848 ffffc9000459f980 0000000000000000 [ 110.288844][ T5001] raw: 000000000000002f ffff8880538d62e8 00000000ffffffff 0000000000000000 [ 110.451483][ T4731] usb 2-1: USB disconnect, device number 4 [ 110.466628][ T5001] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 110.476471][ T4731] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 110.520603][ T5001] page_owner tracks the page as allocated [ 110.545457][ T5001] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 5001, ts 109102500780, free_ts 108999118315 [ 110.598071][ T5001] get_page_from_freelist+0x1bbd/0x1ca0 [ 110.605125][ T5001] __alloc_pages+0x1ee/0x480 [ 110.609837][ T5001] __page_cache_alloc+0xce/0x440 [ 110.619853][ T5001] pagecache_get_page+0x9b6/0xf10 [ 110.626593][ T5001] __get_metapage+0x282/0x1060 [ 110.631438][ T5001] diNewExt+0x9f1/0x2cc0 [ 110.642554][ T5001] diAllocAG+0xe19/0x1c30 [ 110.646978][ T5001] diAlloc+0x1c9/0x1900 [ 110.651198][ T5001] ialloc+0x89/0x940 [ 110.661371][ T5001] jfs_mkdir+0x1db/0xad0 [ 110.667221][ T5001] vfs_mkdir+0x387/0x570 [ 110.671579][ T5001] do_mkdirat+0x1df/0x5b0 [ 110.681795][ T5001] __x64_sys_mkdirat+0x85/0x90 [ 110.686827][ T5001] do_syscall_64+0x4c/0xa0 [ 110.691312][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.703075][ T5001] page last free stack trace: [ 110.707857][ T5001] free_unref_page_prepare+0x637/0x6c0 [ 110.725458][ T5001] free_unref_page_list+0x119/0x820 [ 110.731568][ T5001] release_pages+0x186c/0x1be0 [ 110.741683][ T5001] tlb_finish_mmu+0x1b4/0x370 [ 110.748939][ T5001] exit_mmap+0x3d0/0x640 [ 110.758511][ T5001] __mmput+0x115/0x3b0 [ 110.764006][ T5001] exit_mm+0x5f7/0x770 [ 110.769483][ T5001] do_exit+0x5a9/0x20c0 [ 110.778245][ T5001] do_group_exit+0x12e/0x300 [ 110.784231][ T5001] get_signal+0x6d6/0x12d0 [ 110.788766][ T5001] arch_do_signal_or_restart+0xe7/0x12c0 [ 110.799098][ T5001] exit_to_user_mode_loop+0x9e/0x130 [ 110.805801][ T5001] exit_to_user_mode_prepare+0xee/0x180 [ 110.811493][ T5001] syscall_exit_to_user_mode+0x16/0x40 [ 110.821701][ T5001] do_syscall_64+0x58/0xa0 [ 110.827537][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.838064][ T5001] Modules linked in: [ 110.843376][ T5001] CPU: 1 PID: 5001 Comm: syz.4.173 Not tainted syzkaller #0 [ 110.850669][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.860733][ T5001] Call Trace: [ 110.864016][ T5001] [ 110.866947][ T5001] dump_stack_lvl+0x188/0x250 [ 110.871637][ T5001] ? show_regs_print_info+0x20/0x20 [ 110.876844][ T5001] ? clockevents_increase_min_delta+0x130/0x130 [ 110.883099][ T5001] bad_page+0x14b/0x170 [ 110.887255][ T5001] free_unref_page_prepare+0x383/0x6c0 [ 110.892723][ T5001] free_unref_page_list+0x119/0x820 [ 110.897927][ T5001] ? uncharge_page+0x490/0x490 [ 110.902690][ T5001] ? free_unref_page_commit+0x4c0/0x4c0 [ 110.908262][ T5001] release_pages+0x186c/0x1be0 [ 110.913044][ T5001] ? lru_cache_disable+0x30/0x30 [ 110.917992][ T5001] __pagevec_release+0x6d/0xe0 [ 110.922755][ T5001] truncate_inode_pages_range+0x362/0xfe0 [ 110.928491][ T5001] ? invalidate_inode_page+0x360/0x360 [ 110.933946][ T5001] ? parse_options+0xd27/0xe90 [ 110.938724][ T5001] ? jfs_fill_super+0xb00/0xb00 [ 110.943595][ T5001] ? shrink_dentry_list+0x66a/0x680 [ 110.948801][ T5001] ? sync_filesystem+0x103/0x220 [ 110.953742][ T5001] jfs_remount+0x33d/0x5b0 [ 110.958170][ T5001] ? jfs_statfs+0x550/0x550 [ 110.962672][ T5001] ? hook_sb_remount+0x19/0xc0 [ 110.967442][ T5001] reconfigure_super+0x219/0x8a0 [ 110.972394][ T5001] path_mount+0xd54/0x1030 [ 110.976822][ T5001] ? user_path_at_empty+0x13e/0x190 [ 110.982024][ T5001] __se_sys_mount+0x2e3/0x3d0 [ 110.986710][ T5001] ? __x64_sys_mount+0xc0/0xc0 [ 110.991485][ T5001] ? lockdep_hardirqs_on+0x94/0x140 [ 110.996692][ T5001] ? __x64_sys_mount+0x1c/0xc0 [ 111.001459][ T5001] do_syscall_64+0x4c/0xa0 [ 111.005879][ T5001] ? clear_bhb_loop+0x30/0x80 [ 111.010554][ T5001] ? clear_bhb_loop+0x30/0x80 [ 111.015233][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.021134][ T5001] RIP: 0033:0x7f28015b20ca [ 111.025547][ T5001] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.045240][ T5001] RSP: 002b:00007f27ff809e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.053656][ T5001] RAX: ffffffffffffffda RBX: 00007f27ff809ee0 RCX: 00007f28015b20ca [ 111.061628][ T5001] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 111.069594][ T5001] RBP: 0000200000000180 R08: 00007f27ff809ee0 R09: 00000000000820f8 [ 111.077562][ T5001] R10: 00000000000820f8 R11: 0000000000000246 R12: 0000200000000100 [ 111.085532][ T5001] R13: 00007f27ff809ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 111.093517][ T5001] [ 111.111696][ T5001] Disabling lock debugging due to kernel taint [ 111.118149][ T5001] BUG: Bad page state in process syz.4.173 pfn:5d7a1 [ 111.127017][ T5001] page:ffffea000175e840 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2e pfn:0x5d7a1 [ 111.137516][ T5001] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 111.148936][ T5001] raw: 00fff00000002006 ffffea000175e808 ffffc9000459f980 0000000000000000 [ 111.157716][ T5001] raw: 000000000000002e ffff8880538d64d8 00000000ffffffff 0000000000000000 [ 111.168419][ T5001] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 111.176937][ T5001] page_owner tracks the page as allocated [ 111.184458][ T5001] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 5001, ts 109102452980, free_ts 108999126728 [ 111.199859][ T5001] get_page_from_freelist+0x1bbd/0x1ca0 [ 111.208611][ T5001] __alloc_pages+0x1ee/0x480 [ 111.213832][ T5001] __page_cache_alloc+0xce/0x440 [ 111.218846][ T5001] pagecache_get_page+0x9b6/0xf10 [ 111.225784][ T5001] __get_metapage+0x282/0x1060 [ 111.230624][ T5001] diNewExt+0x9f1/0x2cc0 [ 111.235138][ T5001] diAllocAG+0xe19/0x1c30 [ 111.239541][ T5001] diAlloc+0x1c9/0x1900 [ 111.245609][ T5001] ialloc+0x89/0x940 [ 111.249591][ T5001] jfs_mkdir+0x1db/0xad0 [ 111.254086][ T5001] vfs_mkdir+0x387/0x570 [ 111.258425][ T5001] do_mkdirat+0x1df/0x5b0 [ 111.267513][ T5001] __x64_sys_mkdirat+0x85/0x90 [ 111.272530][ T5001] do_syscall_64+0x4c/0xa0 [ 111.277011][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.286923][ T5001] page last free stack trace: [ 111.291605][ T5001] free_unref_page_prepare+0x637/0x6c0 [ 111.297126][ T5001] free_unref_page_list+0x119/0x820 [ 111.302343][ T5001] release_pages+0x186c/0x1be0 [ 111.307085][ T5001] tlb_finish_mmu+0x1b4/0x370 [ 111.311738][ T5001] exit_mmap+0x3d0/0x640 [ 111.316011][ T5001] __mmput+0x115/0x3b0 [ 111.320078][ T5001] exit_mm+0x5f7/0x770 [ 111.324183][ T5001] do_exit+0x5a9/0x20c0 [ 111.328343][ T5001] do_group_exit+0x12e/0x300 [ 111.333814][ T5001] get_signal+0x6d6/0x12d0 [ 111.338284][ T5001] arch_do_signal_or_restart+0xe7/0x12c0 [ 111.344135][ T5001] exit_to_user_mode_loop+0x9e/0x130 [ 111.349474][ T5001] exit_to_user_mode_prepare+0xee/0x180 [ 111.355232][ T5001] syscall_exit_to_user_mode+0x16/0x40 [ 111.360748][ T5001] do_syscall_64+0x58/0xa0 [ 111.365390][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.371398][ T5001] Modules linked in: [ 111.375448][ T5001] CPU: 0 PID: 5001 Comm: syz.4.173 Tainted: G B syzkaller #0 [ 111.384149][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.394207][ T5001] Call Trace: [ 111.397466][ T5001] [ 111.400377][ T5001] dump_stack_lvl+0x188/0x250 [ 111.405034][ T5001] ? show_regs_print_info+0x20/0x20 [ 111.410303][ T5001] ? clockevents_increase_min_delta+0x130/0x130 [ 111.416535][ T5001] bad_page+0x14b/0x170 [ 111.420666][ T5001] free_unref_page_prepare+0x383/0x6c0 [ 111.426109][ T5001] free_unref_page_list+0x119/0x820 [ 111.431287][ T5001] ? uncharge_page+0x490/0x490 [ 111.436035][ T5001] ? free_unref_page_commit+0x4c0/0x4c0 [ 111.441588][ T5001] release_pages+0x186c/0x1be0 [ 111.446353][ T5001] ? lru_cache_disable+0x30/0x30 [ 111.451285][ T5001] __pagevec_release+0x6d/0xe0 [ 111.456023][ T5001] truncate_inode_pages_range+0x362/0xfe0 [ 111.461725][ T5001] ? invalidate_inode_page+0x360/0x360 [ 111.467160][ T5001] ? parse_options+0xd27/0xe90 [ 111.471909][ T5001] ? jfs_fill_super+0xb00/0xb00 [ 111.476740][ T5001] ? shrink_dentry_list+0x66a/0x680 [ 111.481917][ T5001] ? sync_filesystem+0x103/0x220 [ 111.486836][ T5001] jfs_remount+0x33d/0x5b0 [ 111.491231][ T5001] ? jfs_statfs+0x550/0x550 [ 111.495715][ T5001] ? hook_sb_remount+0x19/0xc0 [ 111.500457][ T5001] reconfigure_super+0x219/0x8a0 [ 111.505379][ T5001] path_mount+0xd54/0x1030 [ 111.509784][ T5001] ? user_path_at_empty+0x13e/0x190 [ 111.514963][ T5001] __se_sys_mount+0x2e3/0x3d0 [ 111.519620][ T5001] ? __x64_sys_mount+0xc0/0xc0 [ 111.524361][ T5001] ? lockdep_hardirqs_on+0x94/0x140 [ 111.529542][ T5001] ? __x64_sys_mount+0x1c/0xc0 [ 111.534291][ T5001] do_syscall_64+0x4c/0xa0 [ 111.538707][ T5001] ? clear_bhb_loop+0x30/0x80 [ 111.543363][ T5001] ? clear_bhb_loop+0x30/0x80 [ 111.548016][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.553884][ T5001] RIP: 0033:0x7f28015b20ca [ 111.558276][ T5001] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.577856][ T5001] RSP: 002b:00007f27ff809e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.586249][ T5001] RAX: ffffffffffffffda RBX: 00007f27ff809ee0 RCX: 00007f28015b20ca [ 111.594200][ T5001] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 111.602149][ T5001] RBP: 0000200000000180 R08: 00007f27ff809ee0 R09: 00000000000820f8 [ 111.610102][ T5001] R10: 00000000000820f8 R11: 0000000000000246 R12: 0000200000000100 [ 111.618050][ T5001] R13: 00007f27ff809ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 111.626005][ T5001] [ 111.635821][ T5001] BUG: Bad page state in process syz.4.173 pfn:5d7a0 [ 111.642669][ T5001] page:ffffea000175e800 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x5d7a0 [ 111.652976][ T5001] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 111.662768][ T5001] raw: 00fff00000002006 ffffea0000871288 ffffc9000459f980 0000000000000000 [ 111.671361][ T5001] raw: 000000000000002d ffff8880538d65d0 00000000ffffffff 0000000000000000 [ 111.679971][ T5001] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 111.687533][ T5001] page_owner tracks the page as allocated [ 111.693262][ T5001] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 5001, ts 109101894140, free_ts 108999131246 [ 111.708384][ T5001] get_page_from_freelist+0x1bbd/0x1ca0 [ 111.713937][ T5001] __alloc_pages+0x1ee/0x480 [ 111.718524][ T5001] __page_cache_alloc+0xce/0x440 [ 111.723470][ T5001] pagecache_get_page+0x9b6/0xf10 [ 111.728488][ T5001] __get_metapage+0x282/0x1060 [ 111.733259][ T5001] diNewExt+0x9f1/0x2cc0 [ 111.737501][ T5001] diAllocAG+0xe19/0x1c30 [ 111.741822][ T5001] diAlloc+0x1c9/0x1900 [ 111.746163][ T5001] ialloc+0x89/0x940 [ 111.750083][ T5001] jfs_mkdir+0x1db/0xad0 [ 111.754564][ T5001] vfs_mkdir+0x387/0x570 [ 111.758893][ T5001] do_mkdirat+0x1df/0x5b0 [ 111.763259][ T5001] __x64_sys_mkdirat+0x85/0x90 [ 111.768015][ T5001] do_syscall_64+0x4c/0xa0 [ 111.772858][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.778773][ T5001] page last free stack trace: [ 111.783468][ T5001] free_unref_page_prepare+0x637/0x6c0 [ 111.788924][ T5001] free_unref_page_list+0x119/0x820 [ 111.794361][ T5001] release_pages+0x186c/0x1be0 [ 111.799128][ T5001] tlb_finish_mmu+0x1b4/0x370 [ 111.803826][ T5001] exit_mmap+0x3d0/0x640 [ 111.808065][ T5001] __mmput+0x115/0x3b0 [ 111.812146][ T5001] exit_mm+0x5f7/0x770 [ 111.816212][ T5001] do_exit+0x5a9/0x20c0 [ 111.820345][ T5001] do_group_exit+0x12e/0x300 [ 111.825107][ T5001] get_signal+0x6d6/0x12d0 [ 111.829540][ T5001] arch_do_signal_or_restart+0xe7/0x12c0 [ 111.835195][ T5001] exit_to_user_mode_loop+0x9e/0x130 [ 111.840477][ T5001] exit_to_user_mode_prepare+0xee/0x180 [ 111.846033][ T5001] syscall_exit_to_user_mode+0x16/0x40 [ 111.851489][ T5001] do_syscall_64+0x58/0xa0 [ 111.856043][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.862205][ T5001] Modules linked in: [ 111.866115][ T5001] CPU: 0 PID: 5001 Comm: syz.4.173 Tainted: G B syzkaller #0 [ 111.874784][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.884813][ T5001] Call Trace: [ 111.888073][ T5001] [ 111.890982][ T5001] dump_stack_lvl+0x188/0x250 [ 111.895641][ T5001] ? show_regs_print_info+0x20/0x20 [ 111.900817][ T5001] ? clockevents_increase_min_delta+0x130/0x130 [ 111.907035][ T5001] bad_page+0x14b/0x170 [ 111.911170][ T5001] free_unref_page_prepare+0x383/0x6c0 [ 111.916609][ T5001] free_unref_page_list+0x119/0x820 [ 111.921788][ T5001] ? uncharge_page+0x490/0x490 [ 111.926531][ T5001] ? free_unref_page_commit+0x4c0/0x4c0 [ 111.932065][ T5001] release_pages+0x186c/0x1be0 [ 111.936825][ T5001] ? lru_cache_disable+0x30/0x30 [ 111.941744][ T5001] __pagevec_release+0x6d/0xe0 [ 111.946484][ T5001] truncate_inode_pages_range+0x362/0xfe0 [ 111.952181][ T5001] ? invalidate_inode_page+0x360/0x360 [ 111.957622][ T5001] ? parse_options+0xd27/0xe90 [ 111.962367][ T5001] ? jfs_fill_super+0xb00/0xb00 [ 111.967199][ T5001] ? shrink_dentry_list+0x66a/0x680 [ 111.972380][ T5001] ? sync_filesystem+0x103/0x220 [ 111.977301][ T5001] jfs_remount+0x33d/0x5b0 [ 111.981705][ T5001] ? jfs_statfs+0x550/0x550 [ 111.986185][ T5001] ? hook_sb_remount+0x19/0xc0 [ 111.990927][ T5001] reconfigure_super+0x219/0x8a0 [ 111.995846][ T5001] path_mount+0xd54/0x1030 [ 112.000242][ T5001] ? user_path_at_empty+0x13e/0x190 [ 112.005447][ T5001] __se_sys_mount+0x2e3/0x3d0 [ 112.010106][ T5001] ? __x64_sys_mount+0xc0/0xc0 [ 112.014851][ T5001] ? lockdep_hardirqs_on+0x94/0x140 [ 112.020026][ T5001] ? __x64_sys_mount+0x1c/0xc0 [ 112.024771][ T5001] do_syscall_64+0x4c/0xa0 [ 112.029167][ T5001] ? clear_bhb_loop+0x30/0x80 [ 112.033823][ T5001] ? clear_bhb_loop+0x30/0x80 [ 112.038482][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.044351][ T5001] RIP: 0033:0x7f28015b20ca [ 112.048742][ T5001] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.068320][ T5001] RSP: 002b:00007f27ff809e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 112.076706][ T5001] RAX: ffffffffffffffda RBX: 00007f27ff809ee0 RCX: 00007f28015b20ca [ 112.084747][ T5001] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 112.092714][ T5001] RBP: 0000200000000180 R08: 00007f27ff809ee0 R09: 00000000000820f8 [ 112.100665][ T5001] R10: 00000000000820f8 R11: 0000000000000246 R12: 0000200000000100 [ 112.108613][ T5001] R13: 00007f27ff809ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 112.116569][ T5001] [ 112.127315][ T276] BUG: Bad page state in process jfsCommit pfn:4c28f [ 112.134112][ T276] page:ffffea000130a3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2c pfn:0x4c28f [ 112.145098][ T276] flags: 0xfff00000002005(locked|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 112.155113][ T276] raw: 00fff00000002005 dead000000000100 dead000000000122 0000000000000000 [ 112.163890][ T276] raw: 000000000000002c ffff8880538d6000 00000000ffffffff 0000000000000000 [ 112.172498][ T276] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 112.180311][ T276] page_owner tracks the page as allocated [ 112.186192][ T276] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 5001, ts 109101683106, free_ts 108999135607 [ 112.201538][ T276] get_page_from_freelist+0x1bbd/0x1ca0 [ 112.207118][ T276] __alloc_pages+0x1ee/0x480 [ 112.211708][ T276] __page_cache_alloc+0xce/0x440 [ 112.216649][ T276] pagecache_get_page+0x9b6/0xf10 [ 112.221663][ T276] __get_metapage+0x282/0x1060 [ 112.226560][ T276] diNewExt+0x9f1/0x2cc0 [ 112.230821][ T276] diAllocAG+0xe19/0x1c30 [ 112.235663][ T276] diAlloc+0x1c9/0x1900 [ 112.239834][ T276] ialloc+0x89/0x940 [ 112.243750][ T276] jfs_mkdir+0x1db/0xad0 [ 112.247984][ T276] vfs_mkdir+0x387/0x570 [ 112.252233][ T276] do_mkdirat+0x1df/0x5b0 [ 112.256551][ T276] __x64_sys_mkdirat+0x85/0x90 [ 112.261289][ T276] do_syscall_64+0x4c/0xa0 [ 112.265706][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.271595][ T276] page last free stack trace: [ 112.276271][ T276] free_unref_page_prepare+0x637/0x6c0 [ 112.281721][ T276] free_unref_page_list+0x119/0x820 [ 112.287041][ T276] release_pages+0x186c/0x1be0 [ 112.291814][ T276] tlb_finish_mmu+0x1b4/0x370 [ 112.296676][ T276] exit_mmap+0x3d0/0x640 [ 112.300927][ T276] __mmput+0x115/0x3b0 [ 112.305330][ T276] exit_mm+0x5f7/0x770 [ 112.309396][ T276] do_exit+0x5a9/0x20c0 [ 112.313563][ T276] do_group_exit+0x12e/0x300 [ 112.318138][ T276] get_signal+0x6d6/0x12d0 [ 112.322559][ T276] arch_do_signal_or_restart+0xe7/0x12c0 [ 112.328183][ T276] exit_to_user_mode_loop+0x9e/0x130 [ 112.333594][ T276] exit_to_user_mode_prepare+0xee/0x180 [ 112.339159][ T276] syscall_exit_to_user_mode+0x16/0x40 [ 112.344852][ T276] do_syscall_64+0x58/0xa0 [ 112.349284][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.355203][ T276] Modules linked in: [ 112.359085][ T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G B syzkaller #0 [ 112.367651][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.377680][ T276] Call Trace: [ 112.380938][ T276] [ 112.383844][ T276] dump_stack_lvl+0x188/0x250 [ 112.388501][ T276] ? show_regs_print_info+0x20/0x20 [ 112.393691][ T276] ? clockevents_increase_min_delta+0x130/0x130 [ 112.399905][ T276] bad_page+0x14b/0x170 [ 112.404041][ T276] free_unref_page_prepare+0x383/0x6c0 [ 112.409487][ T276] free_unref_page+0x8f/0x2a0 [ 112.414148][ T276] ? mark_free_pages+0x5c0/0x5c0 [ 112.419075][ T276] ? __mem_cgroup_uncharge+0xab/0xe0 [ 112.424342][ T276] txUnlock+0x27e/0xcb0 [ 112.428475][ T276] jfs_lazycommit+0x581/0xb40 [ 112.433126][ T276] ? txFreelock+0x5a0/0x5a0 [ 112.437602][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 112.443470][ T276] ? sched_dynamic_update+0x210/0x210 [ 112.448817][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 112.454685][ T276] ? __kthread_parkme+0x157/0x1b0 [ 112.459682][ T276] kthread+0x436/0x520 [ 112.463730][ T276] ? txFreelock+0x5a0/0x5a0 [ 112.468223][ T276] ? kthread_blkcg+0xd0/0xd0 [ 112.472790][ T276] ret_from_fork+0x1f/0x30 [ 112.477190][ T276] [ 112.481398][ T276] page:ffffea000130a3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2c pfn:0x4c28f [ 112.491653][ T276] flags: 0xfff00000002005(locked|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 112.500862][ T276] raw: 00fff00000002005 dead000000000100 dead000000000122 0000000000000000 [ 112.509602][ T276] raw: 000000000000002c ffff8880538d6000 00000000ffffffff 0000000000000000 [ 112.518203][ T276] page dumped because: VM_BUG_ON_PAGE(((unsigned int) page_ref_count(page) + 127u <= 127u)) [ 112.528266][ T276] page_owner tracks the page as allocated [ 112.534003][ T276] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 5001, ts 109101683106, free_ts 108999135607 [ 112.549156][ T276] get_page_from_freelist+0x1bbd/0x1ca0 [ 112.554733][ T276] __alloc_pages+0x1ee/0x480 [ 112.559316][ T276] __page_cache_alloc+0xce/0x440 [ 112.564255][ T276] pagecache_get_page+0x9b6/0xf10 [ 112.569268][ T276] __get_metapage+0x282/0x1060 [ 112.574038][ T276] diNewExt+0x9f1/0x2cc0 [ 112.578272][ T276] diAllocAG+0xe19/0x1c30 [ 112.583040][ T276] diAlloc+0x1c9/0x1900 [ 112.587213][ T276] ialloc+0x89/0x940 [ 112.591097][ T276] jfs_mkdir+0x1db/0xad0 [ 112.595613][ T276] vfs_mkdir+0x387/0x570 [ 112.599870][ T276] do_mkdirat+0x1df/0x5b0 [ 112.604213][ T276] __x64_sys_mkdirat+0x85/0x90 [ 112.609224][ T276] do_syscall_64+0x4c/0xa0 [ 112.613668][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.619553][ T276] page last free stack trace: [ 112.624227][ T276] free_unref_page_prepare+0x637/0x6c0 [ 112.629675][ T276] free_unref_page_list+0x119/0x820 [ 112.634879][ T276] release_pages+0x186c/0x1be0 [ 112.639632][ T276] tlb_finish_mmu+0x1b4/0x370 [ 112.644311][ T276] exit_mmap+0x3d0/0x640 [ 112.648545][ T276] __mmput+0x115/0x3b0 [ 112.652630][ T276] exit_mm+0x5f7/0x770 [ 112.656688][ T276] do_exit+0x5a9/0x20c0 [ 112.660816][ T276] do_group_exit+0x12e/0x300 [ 112.665408][ T276] get_signal+0x6d6/0x12d0 [ 112.669813][ T276] arch_do_signal_or_restart+0xe7/0x12c0 [ 112.675456][ T276] exit_to_user_mode_loop+0x9e/0x130 [ 112.680731][ T276] exit_to_user_mode_prepare+0xee/0x180 [ 112.686278][ T276] syscall_exit_to_user_mode+0x16/0x40 [ 112.691731][ T276] do_syscall_64+0x58/0xa0 [ 112.696274][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.702920][ T276] ------------[ cut here ]------------ [ 112.708383][ T276] kernel BUG at include/linux/mm.h:1224! [ 112.714286][ T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 112.720347][ T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G B syzkaller #0 [ 112.728904][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.738933][ T276] RIP: 0010:put_metapage+0x278/0x280 [ 112.744198][ T276] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 42 be ec fe e9 f3 fe ff ff e8 78 9f a7 fe 48 8b 3c 24 48 c7 c6 a0 5f 62 8a e8 f8 89 da fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 112.763779][ T276] RSP: 0018:ffffc90002d5fce0 EFLAGS: 00010246 [ 112.769823][ T276] RAX: 10c4d98639a31f00 RBX: ffff8880538d6000 RCX: 0000000000000000 [ 112.777770][ T276] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff520005abf90 [ 112.785720][ T276] RBP: 000000000000007f R08: ffff8880b9033d7f R09: fffff520005abf4c [ 112.793666][ T276] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff8880538d6028 [ 112.801610][ T276] R13: ffffea000130a3f4 R14: 1ffff1100a71ac05 R15: 1ffff1100a71ac12 [ 112.809554][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 112.818457][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.825021][ T276] CR2: 00007f72ce70a2f8 CR3: 0000000025987000 CR4: 00000000003506f0 [ 112.833000][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.840948][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.848897][ T276] Call Trace: [ 112.852158][ T276] [ 112.855159][ T276] txUnlock+0x427/0xcb0 [ 112.859302][ T276] jfs_lazycommit+0x581/0xb40 [ 112.863958][ T276] ? txFreelock+0x5a0/0x5a0 [ 112.868435][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 112.874310][ T276] ? sched_dynamic_update+0x210/0x210 [ 112.879660][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 112.885531][ T276] ? __kthread_parkme+0x157/0x1b0 [ 112.890532][ T276] kthread+0x436/0x520 [ 112.894578][ T276] ? txFreelock+0x5a0/0x5a0 [ 112.899058][ T276] ? kthread_blkcg+0xd0/0xd0 [ 112.903622][ T276] ret_from_fork+0x1f/0x30 [ 112.908015][ T276] [ 112.911009][ T276] Modules linked in: [ 112.917287][ T276] ---[ end trace cd6cd9837e69f9c6 ]--- [ 112.922786][ T276] RIP: 0010:put_metapage+0x278/0x280 [ 112.928071][ T276] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 42 be ec fe e9 f3 fe ff ff e8 78 9f a7 fe 48 8b 3c 24 48 c7 c6 a0 5f 62 8a e8 f8 89 da fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 112.947692][ T276] RSP: 0018:ffffc90002d5fce0 EFLAGS: 00010246 [ 112.953765][ T276] RAX: 10c4d98639a31f00 RBX: ffff8880538d6000 RCX: 0000000000000000 [ 112.961716][ T276] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff520005abf90 [ 112.969694][ T276] RBP: 000000000000007f R08: ffff8880b9033d7f R09: fffff520005abf4c [ 112.977677][ T276] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff8880538d6028 [ 112.985661][ T276] R13: ffffea000130a3f4 R14: 1ffff1100a71ac05 R15: 1ffff1100a71ac12 [ 112.993641][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 113.002574][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.009147][ T276] CR2: 00007f72ce70a2f8 CR3: 0000000025987000 CR4: 00000000003506f0 [ 113.017124][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.025685][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.035264][ T276] Kernel panic - not syncing: Fatal exception [ 113.041593][ T276] Kernel Offset: disabled [ 113.045906][ T276] Rebooting in 86400 seconds..