last executing test programs: 28.785515569s ago: executing program 1 (id=460): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 17.158772299s ago: executing program 2 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) 16.552596298s ago: executing program 2 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x0) 16.41356603s ago: executing program 2 (id=496): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 16.202277637s ago: executing program 2 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {0x23}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 16.079293827s ago: executing program 2 (id=498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x17ba, &(0x7f00000004c0)={0x0, 0x0, 0x40}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) 15.898175812s ago: executing program 2 (id=500): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) 10.53558226s ago: executing program 0 (id=518): socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file1\x00', 0x280400a, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x3, 0x294, &(0x7f0000000500)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r3, &(0x7f00000008c0)=[{&(0x7f0000000180)="a7", 0x1}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r5, 0x103, 0x2, 0x0, &(0x7f00000000c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000300), 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 9.076269029s ago: executing program 0 (id=521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x0) 8.953530519s ago: executing program 0 (id=522): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xa33, &(0x7f0000000400), &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 8.881586915s ago: executing program 0 (id=523): unshare(0x20040600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x7, 0x209}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x810}, 0x38) 8.769705424s ago: executing program 0 (id=524): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="fa", 0x1}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2) 8.68765678s ago: executing program 0 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x61) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000650018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) socket(0x10, 0x3, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000001380)={0x8, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f00008b6000/0x3000)=nil, 0x3000, 0xa) add_key$keyring(&(0x7f00000016c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 5.950664144s ago: executing program 3 (id=528): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008640)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)="537c3abf6b8fe734cae7c5b904a385d64a5c098fc99aba1192", 0x19}, {&(0x7f0000000500)="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", 0xff}, {&(0x7f0000000600)="4e4a2161aa6417afc37aa34dabf2b314c17448bb7dbd23882198a5433b92866358ec73ad4df374029f9c417606056b5dffb3323d93ac2ffc3390ce399abf5bd539cc0494d4f392be5efe341e1211c3495b35115d659b8c0ce0443fbefc94006ee07f8cfe45a3a7a7fc8f16404e230a8d9bb70de2e05f68251d23b802f8894a3398849180c65ffeb067c9726c7bb93a4dd895986ff0784e10da9df47addf4864855d84bb300ac693f7ebdfb4976249fd2e9c395972bc2dde9e97b", 0xba}, {&(0x7f00000006c0)="4ba9353a8dd2a53fdc055125b747f4673958d0bc3aeb5f196fa685457277d8ab07b24d370e050cb4c16de1ec74a0787b678959107dd890b730a297487c1466c00b8a4a8814e2f317def2316ed05e9b99bba9a0961486cfeb124eaac663af6a7166e574b59d9580b4c94669462360d2e2318855bc3e6c4e13c5b19e9150de737d6d24a676", 0x84}, {&(0x7f0000000140)="fdff3c1731fd7893f29f62e0ab83280d239d8d4dd0f036171e979a34cbce91c1aacb8bacea6ca9c4b7d3288611b7dfbc00bdfcdb4c719196350ac39da2681363f2385a76c15329989b72988e2eb08cc0d52cd5ad77c13314493912badb9a010cf3958e370742e50c4493a63f", 0x6c}, {&(0x7f0000000780)="81859e21c9430694694a83b45bd71902adaaecdb65ce3a0238f5738101956a7d3af19274691df7115e9e582b4e1e2c6f32e962d55a9ca5f629b821303c1dbb3b615962b599a8d33d712e53813ffba23f4e01dad792708ff619ff931842", 0x5d}], 0x6}}], 0x1, 0x0) 5.824381444s ago: executing program 3 (id=530): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0}}, @rdma_dest={0x18}], 0x70}, 0x0) 5.684349576s ago: executing program 3 (id=531): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xa33, &(0x7f0000000400), &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 5.609134742s ago: executing program 3 (id=532): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100), 0x1, 0x769, &(0x7f0000000340)="$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") r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000007090400001202060000052406000005240020000d240f01000000000000000000090582020002000000090503"], 0x0) syz_usb_ep_read(r0, 0x3, 0xff33, 0x0) 3.949191317s ago: executing program 4 (id=534): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_allocate_blocks\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x800000, 0x0, 0x0, 0x0, &(0x7f00000001c0)) 3.632094293s ago: executing program 3 (id=535): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000940)={[{@nls={'nls', 0x3d, 'cp1250'}}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@uid}, {@force}, {@umask={'umask', 0x3d, 0xde2}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3590bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d080000000000000014f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bdd277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabaf18647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15283217e03d02a4054f34af3a65ef6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a62bc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b391b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815501681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add38a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889581c750c34586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7004757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11c39d6fdcf5926d6ad5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a038813f2bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa500a0000000000006a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 3.546204281s ago: executing program 4 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x14, r4, 0xb05}, 0x14}}, 0x0) 3.295336031s ago: executing program 3 (id=537): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) 2.915921912s ago: executing program 4 (id=538): r0 = fsopen(&(0x7f00000002c0)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(>.', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000480)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r2, 0xfff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) unlink(&(0x7f0000000180)='./bus\x00') syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, 0x0}) r7 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080), 0x8) r8 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r8, 0x0) ioctl$BLKRRPART(r8, 0x125f, 0x0) 1.692338542s ago: executing program 4 (id=539): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xa33, &(0x7f0000000400), &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 1.551016233s ago: executing program 1 (id=462): syz_emit_ethernet(0x4e, &(0x7f00000020c0)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'Zj>', 0x18, 0x0, 0x0, @private2, @mcast2, {[@dstopts={0x0, 0x1, '\x00', [@ra, @pad1, @enc_lim]}]}}}}}, 0x0) 1.515854626s ago: executing program 4 (id=540): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x61db, &(0x7f0000003700)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001040)=""/249, 0xf9) 1.414266264s ago: executing program 1 (id=541): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$minix(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYBLOB="019c69c38d480ca2ca2f775afad182a67ab6e00358c62a66b370b125572078e1b597e1a41a1c9bbd554c", @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC], 0xd, 0x1a6, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x6438, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r4], 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 1.086282951s ago: executing program 1 (id=542): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x14, 0x1, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) 942.456283ms ago: executing program 1 (id=543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000020a01020000000000000000010000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c000480280001800e000100696d6d65646961746500000014000280080001400000000008000280040001000900010073797a30"], 0xc8}}, 0x0) 773.309047ms ago: executing program 1 (id=544): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100), 0x1, 0x769, &(0x7f0000000340)="$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") r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000007090400001202060000052406000005240020000d240f01000000000000000000090582020002000000090503"], 0x0) syz_usb_ep_read(r0, 0x3, 0xff33, 0x0) 0s ago: executing program 4 (id=545): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)='\f', 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) kernel console output (not intermixed with test programs): comm syz.4.299: couldn't read orphan inode 11 (err -117) [ 120.932769][ T4584] EXT4-fs (loop3): 1 truncate cleaned up [ 120.955958][ T4584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.985404][ T4582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.091411][ T4582] EXT4-fs error (device loop4): ext4_empty_dir:3099: inode #2: block 5: comm syz.4.299: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 121.153348][ T4582] EXT4-fs (loop4): Remounting filesystem read-only [ 121.175177][ T4582] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #2: comm syz.4.299: directory missing '.' [ 121.182136][ T3548] EXT4-fs (loop3): unmounting filesystem. [ 121.299124][ T3557] EXT4-fs (loop4): unmounting filesystem. [ 121.423324][ T4606] loop4: detected capacity change from 0 to 512 [ 121.424871][ T4603] loop2: detected capacity change from 0 to 512 [ 121.507515][ T4603] EXT4-fs (loop2): failed to initialize system zone (-117) [ 121.537289][ T4606] EXT4-fs (loop4): 1 orphan inode deleted [ 121.547945][ T4606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.560499][ T4603] EXT4-fs (loop2): mount failed [ 121.572930][ T4606] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038 (0x7fffffff) [ 121.729290][ T4611] EXT4-fs error (device loop4): ext4_ext_remove_space:2842: inode #16: comm syz.4.307: path[1].p_hdr == NULL [ 121.802891][ T4611] EXT4-fs (loop4): Remounting filesystem read-only [ 121.809751][ T4611] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 121.829078][ T4611] EXT4-fs error (device loop4): ext4_punch_hole:4140: inode #16: comm syz.4.307: mark_inode_dirty error [ 121.863009][ T4605] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz.4.307: bad extent address lblock: 0, depth: 1 pblock 0 [ 121.921989][ T4605] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz.4.307: bad extent address lblock: 0, depth: 1 pblock 0 [ 121.956741][ T4605] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz.4.307: bad extent address lblock: 0, depth: 1 pblock 0 [ 121.973781][ T4605] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz.4.307: bad extent address lblock: 0, depth: 1 pblock 0 [ 121.995521][ T4605] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz.4.307: bad extent address lblock: 0, depth: 1 pblock 0 [ 122.030681][ T4605] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz.4.307: bad extent address lblock: 0, depth: 1 pblock 0 [ 122.106345][ T4605] EXT4-fs error (device loop4): ext4_ext_map_blocks:4160: inode #16: comm syz.4.307: bad extent address lblock: 0, depth: 1 pblock 0 [ 122.262550][ T4564] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.651423][ T4564] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 123.100979][ T4564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.178097][ T4564] usb 2-1: config 0 descriptor?? [ 123.315994][ T3557] EXT4-fs (loop4): unmounting filesystem. [ 123.818154][ T4628] loop0: detected capacity change from 0 to 4096 [ 124.776893][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 124.811101][ T4564] usb 2-1: Cannot set autoneg [ 124.816799][ T4564] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 124.875134][ T4564] usb 2-1: USB disconnect, device number 2 [ 125.035567][ T4388] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.201952][ T3552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.213588][ T3552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.222090][ T3552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.230244][ T3552] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.238201][ T3552] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.246503][ T3552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.465001][ T4639] loop2: detected capacity change from 0 to 32768 [ 125.466233][ T4388] usb 1-1: Using ep0 maxpacket: 16 [ 125.531294][ T4639] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.318 (4639) [ 126.311091][ T4388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 126.311174][ T4639] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.323980][ T4388] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 126.342690][ T4388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.353692][ T4388] usb 1-1: config 0 descriptor?? [ 126.441704][ T4658] loop3: detected capacity change from 0 to 512 [ 126.449259][ T4639] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 126.490207][ T4639] BTRFS info (device loop2): using free space tree [ 126.540134][ T4658] EXT4-fs (loop3): 1 orphan inode deleted [ 126.609827][ T4645] chnl_net:caif_netlink_parms(): no params data found [ 126.623191][ T4658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.634085][ T4658] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038 (0x7fffffff) [ 126.734375][ T4639] BTRFS info (device loop2): enabling ssd optimizations [ 126.835384][ T4685] loop1: detected capacity change from 0 to 1024 [ 126.852578][ T4687] EXT4-fs error (device loop3): ext4_ext_remove_space:2842: inode #16: comm syz.3.322: path[1].p_hdr == NULL [ 126.879085][ T4689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.892069][ T3553] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.925945][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.937829][ T4689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.941376][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.953912][ T4687] EXT4-fs (loop3): Remounting filesystem read-only [ 126.960480][ T4687] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 127.047519][ T4645] device bridge_slave_0 entered promiscuous mode [ 127.066940][ T4388] hid (null): unknown global tag 0xc [ 127.071021][ T4687] EXT4-fs error (device loop3): ext4_punch_hole:4140: inode #16: comm syz.3.322: mark_inode_dirty error [ 127.077724][ T4388] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 127.104998][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.116141][ T4685] hfsplus: extend alloc file! (16384,256,524288) [ 127.121155][ T4388] hid-generic 0003:0158:0100.0002: unexpected long global item [ 127.132456][ T4388] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 127.147639][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.156466][ T4657] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz.3.322: bad extent address lblock: 0, depth: 1 pblock 0 [ 127.177804][ T4645] device bridge_slave_1 entered promiscuous mode [ 127.216682][ T4657] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz.3.322: bad extent address lblock: 0, depth: 1 pblock 0 [ 127.281021][ T3552] Bluetooth: hci3: command tx timeout [ 127.281291][ T4657] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz.3.322: bad extent address lblock: 0, depth: 1 pblock 0 [ 127.352308][ T4657] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz.3.322: bad extent address lblock: 0, depth: 1 pblock 0 [ 127.450097][ T4645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.488114][ T4657] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz.3.322: bad extent address lblock: 0, depth: 1 pblock 0 [ 127.527369][ T4695] loop2: detected capacity change from 0 to 8 [ 127.534285][ T4566] usb 1-1: USB disconnect, device number 4 [ 127.547151][ T4645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.592058][ T4657] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz.3.322: bad extent address lblock: 0, depth: 1 pblock 0 [ 127.606314][ T4695] SQUASHFS error: Failed to read block 0x62: -5 [ 127.606448][ T4695] squashfs image failed sanity check [ 127.672822][ T4657] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz.3.322: bad extent address lblock: 0, depth: 1 pblock 0 [ 127.877731][ T4645] team0: Port device team_slave_0 added [ 127.960241][ T4645] team0: Port device team_slave_1 added [ 128.060319][ T3548] EXT4-fs (loop3): unmounting filesystem. [ 128.067069][ T3559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.086332][ T3559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.102132][ T3559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.117324][ T3559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.133804][ T3564] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.143599][ T3564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.442239][ T4703] loop0: detected capacity change from 0 to 2048 [ 128.480627][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.510291][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.551881][ T4703] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 128.651031][ T4645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.701073][ T26] audit: type=1800 audit(1721086102.570:11): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.330" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 128.772853][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.779841][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.037460][ T4645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.431029][ T3564] Bluetooth: hci3: command tx timeout [ 129.495069][ T4645] device hsr_slave_0 entered promiscuous mode [ 129.522540][ T4645] device hsr_slave_1 entered promiscuous mode [ 129.571213][ T4645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.578841][ T4645] Cannot create hsr debugfs directory [ 129.655391][ T3547] EXT4-fs (loop0): unmounting filesystem. [ 130.049008][ T3552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.058947][ T3552] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.070400][ T3552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.082664][ T3552] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.161641][ T3552] Bluetooth: hci4: command tx timeout [ 130.288758][ T3552] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.299605][ T3552] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.717052][ T4386] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.856972][ T4645] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.877206][ T4733] netlink: 'syz.0.337': attribute type 9 has an invalid length. [ 130.886061][ T4733] netlink: 'syz.0.337': attribute type 7 has an invalid length. [ 130.894498][ T4733] netlink: 'syz.0.337': attribute type 8 has an invalid length. [ 130.949236][ T4645] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.013554][ T3690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.034901][ T4698] chnl_net:caif_netlink_parms(): no params data found [ 131.068857][ T4645] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.091294][ T4386] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.104537][ T4386] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 131.114488][ T4386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.139445][ T4386] usb 3-1: config 0 descriptor?? [ 131.148562][ T3690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.192996][ T4645] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.260663][ T3690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.370035][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.377592][ T4698] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.388745][ T4698] device bridge_slave_0 entered promiscuous mode [ 131.416948][ T4386] ath6kl: Failed to submit usb control message: -71 [ 131.431219][ T4386] ath6kl: unable to send the bmi data to the device: -71 [ 131.441788][ T3564] Bluetooth: hci3: command tx timeout [ 131.442269][ T4386] ath6kl: Unable to send get target info: -71 [ 131.475929][ T4386] ath6kl: Failed to init ath6kl core: -71 [ 131.478732][ T3690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.509229][ T4386] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 131.522802][ T4386] usb 3-1: USB disconnect, device number 4 [ 131.600566][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.608385][ T4698] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.627262][ T4698] device bridge_slave_1 entered promiscuous mode [ 131.741424][ T4698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.785591][ T4698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.877669][ T4698] team0: Port device team_slave_0 added [ 131.895600][ T4727] chnl_net:caif_netlink_parms(): no params data found [ 131.914346][ T4698] team0: Port device team_slave_1 added [ 131.966697][ T4645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.987000][ T4698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.994517][ T4698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.020772][ T4698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.085884][ T4645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.125779][ T4698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.133916][ T4698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.160792][ T4698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.210328][ T4645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.241121][ T3564] Bluetooth: hci4: command tx timeout [ 132.283265][ T4645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.325256][ T4698] device hsr_slave_0 entered promiscuous mode [ 132.341531][ T4698] device hsr_slave_1 entered promiscuous mode [ 132.401008][ T3564] Bluetooth: hci1: command tx timeout [ 132.441995][ T4698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.451134][ T4698] Cannot create hsr debugfs directory [ 132.563680][ T4761] loop2: detected capacity change from 0 to 512 [ 132.570763][ T4761] EXT4-fs: Ignoring removed i_version option [ 132.681562][ T4761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 132.731535][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.732086][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.746079][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.754405][ T4727] device bridge_slave_0 entered promiscuous mode [ 132.764954][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.777078][ T4761] EXT4-fs error (device loop2): __ext4_iget:5044: inode #11: block 393240: comm syz.2.344: invalid block [ 132.792245][ T4761] EXT4-fs (loop2): Remounting filesystem read-only [ 132.798922][ T4761] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.344: couldn't read orphan inode 11 (err -117) [ 132.869354][ T3690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.927853][ T4761] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 133.382445][ T4761] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #2: block 5: comm syz.2.344: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 133.458808][ T4761] EXT4-fs (loop2): Remounting filesystem read-only [ 133.496411][ T4761] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #2: comm syz.2.344: directory missing '.' [ 133.521905][ T3564] Bluetooth: hci3: command tx timeout [ 133.587755][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.599391][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.608668][ T3553] EXT4-fs (loop2): unmounting filesystem. [ 133.609271][ T4727] device bridge_slave_1 entered promiscuous mode [ 133.712538][ T3690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.739743][ T4779] loop2: detected capacity change from 0 to 8 [ 133.748618][ T4774] netlink: 'syz.0.345': attribute type 9 has an invalid length. [ 133.757843][ T4779] SQUASHFS error: Failed to read block 0x62: -5 [ 133.765025][ T4779] squashfs image failed sanity check [ 133.771443][ T4774] netlink: 'syz.0.345': attribute type 7 has an invalid length. [ 133.779230][ T4774] netlink: 'syz.0.345': attribute type 8 has an invalid length. [ 133.796605][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.824362][ T3625] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.906041][ T4783] loop0: detected capacity change from 0 to 256 [ 133.926457][ T3690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.007928][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.110347][ T4787] loop2: detected capacity change from 0 to 1764 [ 134.110620][ T3690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.169045][ T3625] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.277170][ T4787] loop2: detected capacity change from 0 to 512 [ 134.317815][ T4727] team0: Port device team_slave_0 added [ 134.325186][ T3564] Bluetooth: hci4: command tx timeout [ 134.365797][ T4727] team0: Port device team_slave_1 added [ 134.410395][ T4787] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.349: casefold flag without casefold feature [ 134.481327][ T3564] Bluetooth: hci1: command tx timeout [ 134.509705][ T4787] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 134.520687][ T4787] EXT4-fs (loop2): mount failed [ 134.572850][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.635877][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.653781][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.689772][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.733419][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.740426][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.767904][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.824188][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.854127][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.892553][ T4645] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.964710][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.986853][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.013684][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.020917][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.069194][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.082042][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.100184][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.108092][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.574785][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.587939][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.620560][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.648476][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.687901][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.075983][ T4727] device hsr_slave_0 entered promiscuous mode [ 136.174767][ T4727] device hsr_slave_1 entered promiscuous mode [ 136.186766][ T4727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.211037][ T4727] Cannot create hsr debugfs directory [ 136.285304][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.304146][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.338427][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.355867][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.377021][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.401086][ T3564] Bluetooth: hci4: command tx timeout [ 136.481653][ T4815] xt_CONNSECMARK: invalid mode: 0 [ 136.563211][ T3552] Bluetooth: hci1: command tx timeout [ 136.846503][ T4645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.870057][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.000668][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.022595][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.615052][ T4698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.697468][ T4698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.879126][ T4828] netlink: 'syz.2.355': attribute type 9 has an invalid length. [ 137.891090][ T4828] netlink: 'syz.2.355': attribute type 7 has an invalid length. [ 137.907936][ T4828] netlink: 'syz.2.355': attribute type 8 has an invalid length. [ 137.923405][ T4698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.951592][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.959204][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.059893][ T4698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 138.089504][ T4645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.574806][ T4852] loop2: detected capacity change from 0 to 512 [ 138.703128][ T4852] EXT4-fs (loop2): 1 orphan inode deleted [ 138.709009][ T4852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.720249][ T4852] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038 (0x7fffffff) [ 138.802465][ T3552] Bluetooth: hci1: command tx timeout [ 138.896520][ T4852] EXT4-fs error (device loop2): ext4_ext_remove_space:2842: inode #16: comm syz.2.359: path[1].p_hdr == NULL [ 138.929433][ T4852] EXT4-fs (loop2): Remounting filesystem read-only [ 138.948736][ T4852] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 138.983641][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.999279][ T4852] EXT4-fs error (device loop2): ext4_punch_hole:4140: inode #16: comm syz.2.359: mark_inode_dirty error [ 139.012180][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.061739][ T4851] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz.2.359: bad extent address lblock: 0, depth: 1 pblock 0 [ 139.103839][ T4851] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz.2.359: bad extent address lblock: 0, depth: 1 pblock 0 [ 139.196752][ T4851] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz.2.359: bad extent address lblock: 0, depth: 1 pblock 0 [ 139.222406][ T4851] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz.2.359: bad extent address lblock: 0, depth: 1 pblock 0 [ 139.236617][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.260757][ T4851] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz.2.359: bad extent address lblock: 0, depth: 1 pblock 0 [ 139.260800][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.315135][ T4851] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz.2.359: bad extent address lblock: 0, depth: 1 pblock 0 [ 139.345981][ T4851] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz.2.359: bad extent address lblock: 0, depth: 1 pblock 0 [ 139.360190][ T4645] device veth0_vlan entered promiscuous mode [ 139.392100][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.421326][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.559293][ T3553] EXT4-fs (loop2): unmounting filesystem. [ 139.695008][ T4698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.805887][ T4645] device veth1_vlan entered promiscuous mode [ 139.830989][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.841935][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.022489][ T4698] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.172942][ T4645] device veth0_macvtap entered promiscuous mode [ 140.204924][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.221722][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.241196][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.248514][ T4691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.291451][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.302641][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.321605][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.328760][ T4691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.361585][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.370789][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.432048][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.451829][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.472388][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.503329][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.542650][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.550789][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.582265][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.613902][ T4727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.654401][ T4727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.771553][ T4645] device veth1_macvtap entered promiscuous mode [ 140.791595][ T3564] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.803193][ T3564] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.812245][ T3564] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.820820][ T3564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.828745][ T3564] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.836442][ T3564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.838166][ T4727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.881626][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.889721][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.920210][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.929084][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.937497][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.946238][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.954761][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.987325][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.012198][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.022301][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.033635][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.048159][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.058904][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.069136][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.079741][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.089802][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.100445][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.117236][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.130990][ T4727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.229510][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.238649][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.249338][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.285237][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.306186][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.316213][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.326983][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.337999][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.348535][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.358516][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.369686][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.380157][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.390927][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.402752][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.454277][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.472814][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.483316][ T4645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.492616][ T4645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.502136][ T4645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.511748][ T4645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.582480][ T3690] device hsr_slave_0 left promiscuous mode [ 141.622100][ T3690] device hsr_slave_1 left promiscuous mode [ 141.641432][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.649234][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.684200][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.699892][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.708033][ T3690] device bridge_slave_1 left promiscuous mode [ 141.716526][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.729512][ T3690] device bridge_slave_0 left promiscuous mode [ 141.736237][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.755287][ T3690] device hsr_slave_0 left promiscuous mode [ 141.762594][ T3690] device hsr_slave_1 left promiscuous mode [ 141.769056][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.777505][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.785825][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.793420][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.801344][ T3690] device bridge_slave_1 left promiscuous mode [ 141.807591][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.817666][ T3690] device bridge_slave_0 left promiscuous mode [ 141.824353][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.836853][ T3690] device hsr_slave_0 left promiscuous mode [ 141.844230][ T3690] device hsr_slave_1 left promiscuous mode [ 141.850664][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.858289][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.868740][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.876425][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.886029][ T3690] device bridge_slave_1 left promiscuous mode [ 141.892317][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.901504][ T3690] device bridge_slave_0 left promiscuous mode [ 141.907761][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.970720][ T3690] device veth1_macvtap left promiscuous mode [ 141.978083][ T3690] device veth0_macvtap left promiscuous mode [ 141.985983][ T3690] device veth1_vlan left promiscuous mode [ 141.993272][ T3690] device veth0_vlan left promiscuous mode [ 142.012488][ T3690] device veth1_macvtap left promiscuous mode [ 142.018566][ T3690] device veth0_macvtap left promiscuous mode [ 142.024823][ T3690] device veth1_vlan left promiscuous mode [ 142.032110][ T3690] device veth0_vlan left promiscuous mode [ 142.039145][ T3690] device veth1_macvtap left promiscuous mode [ 142.045859][ T3690] device veth0_macvtap left promiscuous mode [ 142.052153][ T3690] device veth1_vlan left promiscuous mode [ 142.057977][ T3690] device veth0_vlan left promiscuous mode [ 142.686876][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 142.723708][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 142.758184][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.798184][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.882004][ T3552] Bluetooth: hci2: command tx timeout [ 143.380784][ T3690] bond0 (unregistering): Released all slaves [ 143.806283][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 143.840768][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 143.875507][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.910746][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.256171][ T3690] bond0 (unregistering): Released all slaves [ 144.638394][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 144.673615][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 144.709329][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.745769][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.965913][ T3559] Bluetooth: hci2: command tx timeout [ 145.104765][ T3690] bond0 (unregistering): Released all slaves [ 145.512898][ T3682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.547847][ T3682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.622282][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.637131][ T4566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.688613][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.706689][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.725058][ T4698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.755981][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.776858][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.794263][ T4862] chnl_net:caif_netlink_parms(): no params data found [ 145.816429][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.831378][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.850194][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.895163][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.907719][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.923290][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.930482][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.949952][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.959339][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.018379][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.027404][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.036825][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.048329][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.067147][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.074487][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.083156][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.092731][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.110223][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.130172][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.194296][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.216129][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.225784][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.239686][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.248825][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.284285][ T4698] device veth0_vlan entered promiscuous mode [ 146.306405][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.322158][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.339485][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.393123][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.457334][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.471863][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.486944][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.520672][ T4698] device veth1_vlan entered promiscuous mode [ 146.725382][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.758211][ T4862] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.778665][ T4862] device bridge_slave_0 entered promiscuous mode [ 146.842285][ T4862] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.849410][ T4862] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.908090][ T4862] device bridge_slave_1 entered promiscuous mode [ 147.909776][ T4912] loop4: detected capacity change from 0 to 32768 [ 147.921029][ T4912] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.368 (4912) [ 147.921695][ T3559] Bluetooth: hci2: command tx timeout [ 147.943578][ T4912] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.953821][ T4912] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 147.962734][ T4912] BTRFS info (device loop4): using free space tree [ 147.994540][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.009652][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.107135][ T4698] device veth0_macvtap entered promiscuous mode [ 148.170495][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.180397][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.233499][ T4862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.276386][ T4698] device veth1_macvtap entered promiscuous mode [ 148.321838][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.333294][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.403890][ T4862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.460044][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.471324][ T4912] BTRFS info (device loop4): enabling ssd optimizations [ 148.501728][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.508686][ T4904] loop0: detected capacity change from 0 to 32768 [ 148.533781][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.541253][ T4904] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.367 (4904) [ 148.581185][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.603100][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.611675][ T4904] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.630801][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.641677][ T4904] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 148.650362][ T4904] BTRFS info (device loop0): using free space tree [ 148.677727][ T4698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.735365][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.772075][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.797819][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.825916][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.898339][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.927556][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.938805][ T4698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.950034][ T4698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.963168][ T4698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.986665][ T4645] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.018431][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.050049][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.097680][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.105631][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.124253][ T4698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.146512][ T4698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.191805][ T4698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.200602][ T4698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.230531][ T4904] BTRFS info (device loop0): enabling ssd optimizations [ 149.255674][ T4862] team0: Port device team_slave_0 added [ 149.328272][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.396829][ T4862] team0: Port device team_slave_1 added [ 149.403523][ T4904] fs-verity: sha256 using implementation "sha256-avx2" [ 149.445150][ T4904] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 149.471298][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.480171][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.605813][ T4862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.623777][ T4862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.655743][ T4862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.678994][ T3547] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.746094][ T4862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.759262][ T4862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.813357][ T4862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.844815][ T4727] device veth0_vlan entered promiscuous mode [ 149.855725][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.875514][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.935968][ T4727] device veth1_vlan entered promiscuous mode [ 149.999138][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.007549][ T3552] Bluetooth: hci2: command tx timeout [ 150.051882][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.059895][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.204303][ T4862] device hsr_slave_0 entered promiscuous mode [ 150.227111][ T4862] device hsr_slave_1 entered promiscuous mode [ 150.251568][ T4862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.275908][ T4862] Cannot create hsr debugfs directory [ 150.317042][ T3682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.377175][ T3682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.448974][ T4727] device veth0_macvtap entered promiscuous mode [ 150.524364][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.562889][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.583713][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.613160][ T3601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.660763][ T4727] device veth1_macvtap entered promiscuous mode [ 150.730343][ T3682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.753000][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.786963][ T3682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.822011][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.863224][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.906725][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.925270][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.938623][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.956651][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.977644][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.008379][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.055709][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.104369][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.114422][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.135082][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.145547][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.156351][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.167129][ T4727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.217195][ T4727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.439779][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.872303][ T4727] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.927571][ T4727] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.967329][ T4727] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.998664][ T4727] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.013368][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.022322][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.030443][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.040122][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.049420][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.058356][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.449615][ T5001] netlink: 6 bytes leftover after parsing attributes in process `syz.0.375'. [ 153.182919][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.230959][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.286588][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.322694][ T26] audit: type=1326 audit(1721086127.210:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f842e775bd9 code=0x0 [ 153.415138][ T4862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.432635][ T5003] loop1: detected capacity change from 0 to 4096 [ 153.466808][ T4769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.520046][ T4769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.576098][ T4862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.591119][ T4386] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.631313][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.719933][ T4862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.861124][ T4386] usb 5-1: Using ep0 maxpacket: 8 [ 153.877971][ T5018] Bluetooth: MGMT ver 1.22 [ 153.913758][ T4862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.991220][ T4386] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 154.012840][ T4386] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.055855][ T4386] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.267576][ T4386] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.278123][ T4386] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.291560][ T4386] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.310913][ T4386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.751479][ T4386] usb 5-1: usb_control_msg returned -32 [ 154.763373][ T4386] usbtmc 5-1:16.0: can't read capabilities [ 154.829515][ T4862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.205111][ T4862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.484278][ T4862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.494834][ T4862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.731219][ T4381] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.174066][ T5040] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 156.301227][ T4381] usb 1-1: Using ep0 maxpacket: 16 [ 156.357375][ T4386] usb 5-1: USB disconnect, device number 3 [ 156.441151][ T4381] usb 1-1: config 0 has an invalid interface number: 40 but max is 3 [ 156.459795][ T4381] usb 1-1: config 0 has an invalid interface number: 8 but max is 3 [ 156.482779][ T4381] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 156.493531][ T4862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.525152][ T4381] usb 1-1: config 0 has an invalid interface number: 62 but max is 3 [ 156.563169][ T4862] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.600958][ T4381] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 156.609705][ T4381] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 156.639770][ T4381] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 156.660057][ T4381] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 156.689248][ T4862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.709012][ T4381] usb 1-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config [ 156.719999][ T4381] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 156.736707][ T4862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.748766][ T4381] usb 1-1: config 0 has no interface number 0 [ 156.775306][ T4381] usb 1-1: config 0 has no interface number 1 [ 156.831225][ T4381] usb 1-1: config 0 has no interface number 2 [ 156.841205][ T4381] usb 1-1: config 0 interface 40 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 156.863331][ T4381] usb 1-1: config 0 interface 40 altsetting 1 endpoint 0x9 has invalid maxpacket 1600, setting to 64 [ 156.923219][ T4381] usb 1-1: config 0 interface 40 altsetting 1 endpoint 0xC has an invalid bInterval 127, changing to 7 [ 156.955776][ T4381] usb 1-1: config 0 interface 8 altsetting 128 has an invalid endpoint with address 0x80, skipping [ 156.996806][ T4381] usb 1-1: config 0 interface 8 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 157.208368][ T4381] usb 1-1: config 0 interface 8 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 157.220563][ T4381] usb 1-1: config 0 interface 8 altsetting 128 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 157.237981][ T4381] usb 1-1: config 0 interface 62 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 157.258286][ T4381] usb 1-1: config 0 interface 40 has no altsetting 0 [ 157.265790][ T4381] usb 1-1: config 0 interface 8 has no altsetting 0 [ 157.273360][ T4381] usb 1-1: config 0 interface 62 has no altsetting 0 [ 157.759613][ T4381] usb 1-1: New USB device found, idVendor=19d2, idProduct=ffd5, bcdDevice=8f.79 [ 157.932449][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.059762][ T4381] usb 1-1: Product: syz [ 158.080029][ T4381] usb 1-1: Manufacturer: syz [ 158.097802][ T4381] usb 1-1: SerialNumber: syz [ 158.104512][ T5053] loop3: detected capacity change from 0 to 32768 [ 158.143626][ T4381] usb 1-1: config 0 descriptor?? [ 158.173113][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.182055][ T5053] XFS (loop3): Mounting V5 Filesystem [ 158.187124][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.196012][ T5038] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 158.206345][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.219312][ T4381] option 1-1:0.40: GSM modem (1-port) converter detected [ 158.256935][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.285025][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.292261][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.309648][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.329093][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.345464][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.352772][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.441626][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.459709][ T4381] cdc_ether 1-1:0.62: skipping garbage [ 158.469601][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.478108][ T4381] cdc_ether 1-1:0.62: skipping garbage [ 158.484092][ T4381] cdc_ether 1-1:0.62: invalid descriptor buffer length [ 158.502158][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.510905][ T4381] usb 1-1: bad CDC descriptors [ 158.530413][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.539121][ T4381] usb 1-1: USB disconnect, device number 5 [ 158.555949][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.566249][ T4381] option 1-1:0.40: device disconnected [ 158.576811][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.608378][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.619041][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.628378][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.638359][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.657199][ T5053] XFS (loop3): Ending clean mount [ 158.717809][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.747091][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.767794][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.800212][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.811639][ T4690] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.812795][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.969682][ T4862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.061364][ T4690] usb 5-1: Using ep0 maxpacket: 8 [ 159.070745][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.089683][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.176391][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.193503][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.193871][ T4690] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 159.230505][ T4690] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 159.281162][ T4690] usb 5-1: config 0 has no interface number 0 [ 159.287420][ T4690] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12408, setting to 64 [ 159.337494][ T4690] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.371201][ T4690] usb 5-1: config 0 interface 52 has no altsetting 0 [ 159.407985][ T4862] device veth0_vlan entered promiscuous mode [ 159.422880][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.439801][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.518293][ T4862] device veth1_vlan entered promiscuous mode [ 159.584959][ T4690] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 159.607000][ T4690] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 159.621712][ T4690] usb 5-1: Product: syz [ 159.641637][ T4690] usb 5-1: Manufacturer: syz [ 159.646472][ T4690] usb 5-1: SerialNumber: syz [ 159.671088][ T4690] usb 5-1: config 0 descriptor?? [ 159.774698][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.787216][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.807789][ T4862] device veth0_macvtap entered promiscuous mode [ 159.855759][ T5053] syz.3.388 (5053) used greatest stack depth: 19480 bytes left [ 159.856554][ T4862] device veth1_macvtap entered promiscuous mode [ 159.968422][ T4727] XFS (loop3): Unmounting Filesystem [ 160.072635][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.097231][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.114667][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.130001][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.141587][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.164448][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 160.164668][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.173909][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 160.184635][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.249021][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.259521][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.272770][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.287317][ T4862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.302532][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.320289][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.331207][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.348764][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.361259][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.378632][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.389514][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.412100][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.422553][ T4862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.433493][ T4862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.451429][ T4862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.509786][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.542056][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.568851][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.622612][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.636668][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.647788][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.674444][ T4862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.691180][ T4862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.700695][ T4862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.724664][ T4862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.538022][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.671404][ T4690] usb 5-1: USB disconnect, device number 4 [ 161.801553][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.071677][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.168753][ T26] audit: type=1326 audit(1721086136.050:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5147 comm="syz.0.403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f842e775bd9 code=0x0 [ 162.192108][ T5150] loop1: detected capacity change from 0 to 512 [ 162.198475][ T3690] device hsr_slave_0 left promiscuous mode [ 162.213335][ T3690] device hsr_slave_1 left promiscuous mode [ 162.252958][ T5150] EXT4-fs (loop1): 1 truncate cleaned up [ 162.258912][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.266948][ T5150] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 162.291847][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.365021][ T4698] EXT4-fs (loop1): unmounting filesystem. [ 162.368928][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.383827][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.392153][ T3690] device bridge_slave_1 left promiscuous mode [ 162.398962][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.408376][ T3690] device bridge_slave_0 left promiscuous mode [ 162.461490][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.558601][ T3690] device veth1_macvtap left promiscuous mode [ 162.585574][ T3690] device veth0_macvtap left promiscuous mode [ 162.591980][ T3690] device veth1_vlan left promiscuous mode [ 162.608476][ T3690] device veth0_vlan left promiscuous mode [ 162.811086][ T4567] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.191044][ T4567] usb 2-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 163.219084][ T4567] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 163.236669][ T4567] usb 2-1: config 255 has no interfaces? [ 163.242610][ T4567] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 163.266109][ T4567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.453421][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 163.492483][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 163.542498][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.551358][ T4567] usb 2-1: string descriptor 0 read error: -71 [ 163.559547][ T4567] usb 2-1: USB disconnect, device number 3 [ 163.609096][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.133935][ T5190] loop1: detected capacity change from 0 to 1024 [ 164.143167][ T3690] bond0 (unregistering): Released all slaves [ 164.188836][ T5190] hfsplus: bad catalog entry type [ 164.215024][ T51] hfsplus: b-tree write err: -5, ino 4 [ 164.263176][ T3691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.294577][ T3691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.339049][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.447668][ T5192] loop1: detected capacity change from 0 to 2048 [ 164.461165][ T5196] loop3: detected capacity change from 0 to 512 [ 164.506245][ T5192] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 164.528794][ T5196] EXT4-fs (loop3): 1 truncate cleaned up [ 164.580044][ T5196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.616625][ T5192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.812485][ T5196] EXT4-fs error (device loop3): __ext4_new_inode:1071: comm syz.3.420: reserved inode found cleared - inode=1 [ 164.953310][ T4727] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 165.529561][ T4727] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 165.617762][ T5218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.618776][ T4727] EXT4-fs error (device loop3): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 165.728624][ T5205] loop2: detected capacity change from 0 to 32768 [ 165.932841][ T5205] XFS (loop2): Mounting V5 Filesystem [ 166.154375][ T4727] EXT4-fs (loop3): unmounting filesystem. [ 166.174161][ T5205] XFS (loop2): Ending clean mount [ 166.277954][ T5205] XFS (loop2): Quotacheck needed: Please wait. [ 166.441996][ T5205] XFS (loop2): Quotacheck: Done. [ 166.685527][ T5244] loop0: detected capacity change from 0 to 2048 [ 166.725195][ T5244] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 166.762347][ T4862] XFS (loop2): Unmounting Filesystem [ 166.828392][ T5244] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.275542][ T3559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.287021][ T3564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.296291][ T3564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.306913][ T3559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.315697][ T3564] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.323125][ T3564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.358365][ T5262] loop4: detected capacity change from 0 to 512 [ 168.404907][ T5262] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.468327][ T5262] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 168.513468][ T5262] EXT4-fs (loop4): 1 truncate cleaned up [ 168.529474][ T5262] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.641525][ T3593] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.676953][ T5247] loop1: detected capacity change from 0 to 32768 [ 168.794040][ T5255] chnl_net:caif_netlink_parms(): no params data found [ 168.839020][ T5247] XFS (loop1): Mounting V5 Filesystem [ 168.841206][ T4645] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 168.965336][ T5247] XFS (loop1): Starting recovery (logdev: internal) [ 169.006875][ T4645] EXT4-fs (loop4): unmounting filesystem. [ 169.019908][ T3593] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 169.037633][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.047945][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.065731][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.067465][ T3593] usb 1-1: config 0 descriptor?? [ 169.076373][ T5255] device bridge_slave_0 entered promiscuous mode [ 169.094286][ T4645] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 169.096433][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.119717][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.122170][ T5247] XFS (loop1): Ending recovery (logdev: internal) [ 169.128451][ T5255] device bridge_slave_1 entered promiscuous mode [ 169.149404][ T4645] EXT4-fs error (device loop4): ext4_quota_off:7066: inode #3: comm syz-executor: mark_inode_dirty error [ 169.234056][ T5255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.256589][ T4698] XFS (loop1): Unmounting Filesystem [ 169.288731][ T5255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.361019][ T3552] Bluetooth: hci1: command tx timeout [ 169.364445][ T3593] kaweth 1-1:0.0: Firmware present in device. [ 169.448263][ T5255] team0: Port device team_slave_0 added [ 169.457304][ T5255] team0: Port device team_slave_1 added [ 169.564637][ T3593] kaweth 1-1:0.0: Statistics collection: 0 [ 169.570525][ T3593] kaweth 1-1:0.0: Multicast filter limit: 0 [ 169.613785][ T3690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.624825][ T26] audit: type=1326 audit(1855303871.493:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb02f75bd9 code=0x7ffc0000 [ 169.657621][ T3593] kaweth 1-1:0.0: MTU: 0 [ 169.667757][ T3593] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 169.687314][ T26] audit: type=1326 audit(1855303871.533:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fdb02f75bd9 code=0x7ffc0000 [ 169.730032][ T26] audit: type=1326 audit(1855303871.533:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb02f75bd9 code=0x7ffc0000 [ 169.760082][ T26] audit: type=1326 audit(1855303871.533:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb02f75bd9 code=0x7ffc0000 [ 169.804853][ T3593] kaweth: probe of 1-1:0.0 failed with error -5 [ 169.819961][ T3593] usb 1-1: USB disconnect, device number 6 [ 169.854345][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.885780][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.951603][ T5255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.050785][ T3690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.079589][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.090450][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.144907][ T5255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.245465][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.259975][ T3559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.269050][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.277782][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.287893][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.298074][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.301255][ T3690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.322233][ T5306] loop1: detected capacity change from 0 to 512 [ 170.357949][ T5306] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.449415][ T5306] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 170.490138][ T5306] EXT4-fs (loop1): 1 truncate cleaned up [ 170.503060][ T5306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.503136][ T3690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.631778][ T5255] device hsr_slave_0 entered promiscuous mode [ 170.648099][ T5255] device hsr_slave_1 entered promiscuous mode [ 170.693867][ T5310] loop0: detected capacity change from 0 to 8192 [ 170.712278][ T4698] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 170.751451][ T4869] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 170.797509][ T4698] EXT4-fs (loop1): unmounting filesystem. [ 170.822069][ T4698] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Corrupt filesystem [ 170.853599][ T4698] EXT4-fs error (device loop1): ext4_quota_off:7066: inode #3: comm syz-executor: mark_inode_dirty error [ 171.042535][ T5315] loop0: detected capacity change from 0 to 1024 [ 171.063639][ T5315] hfsplus: bad catalog entry type [ 171.154641][ T4769] hfsplus: b-tree write err: -5, ino 4 [ 171.441940][ T3564] Bluetooth: hci1: command tx timeout [ 171.666025][ T26] audit: type=1326 audit(1855303873.543:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e3175bd9 code=0x7ffc0000 [ 171.703240][ T5303] chnl_net:caif_netlink_parms(): no params data found [ 171.729847][ T26] audit: type=1326 audit(1855303873.543:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e3175bd9 code=0x7ffc0000 [ 171.828963][ T26] audit: type=1326 audit(1855303873.573:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f27e3175bd9 code=0x7ffc0000 [ 171.883122][ T26] audit: type=1326 audit(1855303873.573:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e3175bd9 code=0x7ffc0000 [ 171.970974][ T26] audit: type=1326 audit(1855303873.573:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.2.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e3175bd9 code=0x7ffc0000 [ 172.238562][ T5317] loop0: detected capacity change from 0 to 32768 [ 172.246500][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.265452][ T5303] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.275684][ T3552] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.287131][ T3552] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.296027][ T3552] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.306503][ T3552] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.317643][ T5303] device bridge_slave_0 entered promiscuous mode [ 172.324189][ T3552] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 172.336600][ T3552] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.401888][ T3552] Bluetooth: hci3: command tx timeout [ 172.433239][ T5317] XFS (loop0): Mounting V5 Filesystem [ 172.465184][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.481292][ T5303] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.489901][ T5303] device bridge_slave_1 entered promiscuous mode [ 172.508781][ T5356] loop2: detected capacity change from 0 to 512 [ 172.598993][ T5317] XFS (loop0): Ending clean mount [ 172.603041][ T5356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 172.612173][ T5317] XFS (loop0): Quotacheck needed: Please wait. [ 172.624003][ T5356] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 172.665957][ T5317] XFS (loop0): Quotacheck: Done. [ 172.831480][ T3547] XFS (loop0): Unmounting Filesystem [ 172.866579][ T4862] EXT4-fs (loop2): unmounting filesystem. [ 172.952428][ T5303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.083034][ T5303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.237307][ T5303] team0: Port device team_slave_0 added [ 173.313772][ T5303] team0: Port device team_slave_1 added [ 173.403231][ T5368] syz.0.468 uses obsolete (PF_INET,SOCK_PACKET) [ 173.525231][ T3552] Bluetooth: hci1: command tx timeout [ 174.021142][ T5255] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.223529][ T5303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.241266][ T5303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.305892][ T5303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.334085][ T5255] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.347024][ T5363] loop2: detected capacity change from 0 to 32768 [ 174.376718][ T5303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.394492][ T5303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.411105][ T3564] Bluetooth: hci4: command tx timeout [ 174.423696][ T5303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.443508][ T5255] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.455389][ T5363] XFS (loop2): Mounting V5 Filesystem [ 174.481374][ T3552] Bluetooth: hci3: command tx timeout [ 174.561665][ T5255] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.599311][ T5363] XFS (loop2): Starting recovery (logdev: internal) [ 174.641281][ T5363] XFS (loop2): Ending recovery (logdev: internal) [ 174.736010][ T4862] XFS (loop2): Unmounting Filesystem [ 174.826073][ T5303] device hsr_slave_0 entered promiscuous mode [ 174.843043][ T5303] device hsr_slave_1 entered promiscuous mode [ 174.850575][ T5303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.860453][ T5303] Cannot create hsr debugfs directory [ 174.879691][ T3690] device hsr_slave_0 left promiscuous mode [ 174.895110][ T3690] device hsr_slave_1 left promiscuous mode [ 174.949118][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.963323][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.981261][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.996641][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.019368][ T3690] device bridge_slave_1 left promiscuous mode [ 175.028629][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.049579][ T3690] device bridge_slave_0 left promiscuous mode [ 175.064208][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.099507][ T3690] device veth1_macvtap left promiscuous mode [ 175.118208][ T3690] device veth0_macvtap left promiscuous mode [ 175.128054][ T3690] device veth1_vlan left promiscuous mode [ 175.141640][ T3690] device veth0_vlan left promiscuous mode [ 175.145393][ T26] audit: type=1326 audit(1855303877.023:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e3175bd9 code=0x7ffc0000 [ 175.201433][ T26] audit: type=1326 audit(1855303877.063:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f27e3175bd9 code=0x7ffc0000 [ 175.270292][ T26] audit: type=1326 audit(1855303877.063:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e3175bd9 code=0x7ffc0000 [ 175.302999][ T26] audit: type=1326 audit(1855303877.063:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5393 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e3175bd9 code=0x7ffc0000 [ 175.380077][ T5398] loop2: detected capacity change from 0 to 2048 [ 175.419927][ T5398] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 175.432528][ T5398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.686377][ T3552] Bluetooth: hci1: command tx timeout [ 176.531113][ T4387] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 176.538870][ T3552] Bluetooth: hci4: command tx timeout [ 176.572036][ T3552] Bluetooth: hci3: command tx timeout [ 176.831130][ T4387] usb 1-1: Using ep0 maxpacket: 8 [ 176.900804][ T5405] loop2: detected capacity change from 0 to 32768 [ 176.962417][ T4387] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 176.971240][ T4387] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 176.981886][ T4387] usb 1-1: config 0 has no interface number 0 [ 176.988170][ T4387] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12408, setting to 64 [ 177.000191][ T4387] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.014070][ T4387] usb 1-1: config 0 interface 52 has no altsetting 0 [ 177.033218][ T5405] XFS (loop2): Mounting V5 Filesystem [ 177.118458][ T5405] XFS (loop2): Ending clean mount [ 177.127366][ T5405] XFS (loop2): Quotacheck needed: Please wait. [ 177.144741][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 177.192894][ T4387] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 177.202075][ T5405] XFS (loop2): Quotacheck: Done. [ 177.245632][ T4387] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 177.255653][ T4387] usb 1-1: Product: syz [ 177.259871][ T4387] usb 1-1: Manufacturer: syz [ 177.265334][ T4387] usb 1-1: SerialNumber: syz [ 177.280473][ T4862] XFS (loop2): Unmounting Filesystem [ 177.291708][ T4387] usb 1-1: config 0 descriptor?? [ 177.301419][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 177.378165][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.458463][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.792546][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 177.801829][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 178.115985][ T3690] bond0 (unregistering): Released all slaves [ 178.299555][ T5342] chnl_net:caif_netlink_parms(): no params data found [ 178.482551][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.489699][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.504576][ T5342] device bridge_slave_0 entered promiscuous mode [ 178.533462][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.560958][ T3552] Bluetooth: hci4: command tx timeout [ 178.569895][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.584175][ T5342] device bridge_slave_1 entered promiscuous mode [ 178.641430][ T3552] Bluetooth: hci3: command tx timeout [ 178.680670][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.807802][ T5303] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.844928][ T5342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.869105][ T5255] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.890882][ T14] usb 1-1: USB disconnect, device number 7 [ 178.912116][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.955857][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.981785][ T5342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.103740][ T5303] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.165265][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.188258][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.198528][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.205835][ T4691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.226577][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.243203][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.271731][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.279037][ T4691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.413925][ T5303] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.462047][ T5440] loop2: detected capacity change from 0 to 32768 [ 179.469725][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.485385][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.519300][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.585510][ T5342] team0: Port device team_slave_0 added [ 179.606558][ T5440] XFS (loop2): Mounting V5 Filesystem [ 179.640056][ T5303] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.662286][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.683414][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.716558][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.726370][ T5440] XFS (loop2): Starting recovery (logdev: internal) [ 179.756304][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.786886][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.817104][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.838295][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.858453][ T5342] team0: Port device team_slave_1 added [ 179.869496][ T5440] XFS (loop2): Ending recovery (logdev: internal) [ 179.953494][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.981283][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.033538][ T4862] XFS (loop2): Unmounting Filesystem [ 180.050956][ T5342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.088823][ T5255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.125890][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.149570][ T5446] loop0: detected capacity change from 0 to 40427 [ 180.157821][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.171635][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.181210][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.188202][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.231798][ T5342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.364609][ T5446] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.390208][ T5342] device hsr_slave_0 entered promiscuous mode [ 180.432058][ T5342] device hsr_slave_1 entered promiscuous mode [ 180.451711][ T5342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.459315][ T5342] Cannot create hsr debugfs directory [ 180.602220][ T5446] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 180.641124][ T3552] Bluetooth: hci4: command tx timeout [ 180.799598][ T3547] syz-executor: attempt to access beyond end of device [ 180.799598][ T3547] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.847550][ T5303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.979064][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.999253][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.013242][ T5303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.082775][ T5303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.099371][ T5255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.115363][ T5303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.242386][ T5342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.278515][ T5471] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.289230][ T5471] netlink: 1 bytes leftover after parsing attributes in process `syz.2.488'. [ 181.429989][ T5342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.519816][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.543904][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.630690][ T5342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.666620][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.698532][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.725399][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.739145][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.911506][ T5255] device veth0_vlan entered promiscuous mode [ 181.931116][ T5342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.270309][ T5303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.511905][ T5303] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.688245][ T5485] loop2: detected capacity change from 0 to 256 [ 182.700047][ T5303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.794275][ T5303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.850464][ T5255] device veth1_vlan entered promiscuous mode [ 182.883327][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.902731][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.919965][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.920044][ T5487] loop0: detected capacity change from 0 to 8192 [ 182.928984][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.959230][ T5487] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 182.972731][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.973249][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.982242][ T5487] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 182.988149][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.997682][ T5487] REISERFS (device loop0): using ordered data mode [ 183.012607][ T5487] reiserfs: using flush barriers [ 183.025365][ T5487] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.050141][ T5487] REISERFS (device loop0): checking transaction log (loop0) [ 183.061353][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.070211][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.082100][ T5487] REISERFS (device loop0): Using r5 hash to sort names [ 183.091367][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.098591][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.122198][ T5487] reiserfs: enabling write barrier flush mode [ 183.139114][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.153824][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.164823][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.170230][ T5487] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 183.182536][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.191902][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.202644][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.211861][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.222029][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.232079][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.240725][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.252559][ T5487] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 183.269276][ T5487] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 183.281424][ T5487] REISERFS (device loop0): Remounting filesystem read-only [ 183.288704][ T5487] REISERFS error (device loop0): vs-2100 add_save_link: search_by_key ([-1 2 0x1 IND]) returned -2 [ 183.304773][ T5487] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 183.343459][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.360106][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.365942][ T5487] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 183.378631][ T5487] REISERFS error (device loop0): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 2 0xffffffff DIRECT] [ 183.386935][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.393149][ T5487] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS [ 183.434804][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.447757][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.473118][ T5255] device veth0_macvtap entered promiscuous mode [ 183.549518][ T5255] device veth1_macvtap entered promiscuous mode [ 183.589619][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.603171][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.617573][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.641060][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.680877][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.694077][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.704797][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.715532][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.727411][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.817997][ T5496] netlink: 1 bytes leftover after parsing attributes in process `syz.2.496'. [ 183.828611][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.838927][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.848290][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.872002][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.049945][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.077355][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.100708][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.141549][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.159668][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.181627][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.191636][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.203242][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.215928][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.241226][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.250193][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.270366][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.280237][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.337666][ T5508] loop0: detected capacity change from 0 to 256 [ 184.382871][ T5303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.401734][ T5255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.426128][ T5255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.445451][ T5255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.459871][ T5255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.599570][ T5342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.676962][ T5342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.720335][ T5342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.737978][ T5342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.738028][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.758551][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.931859][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.950230][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.959568][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.969584][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.978792][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.986177][ T4690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.995439][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.005312][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.030639][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.037972][ T4690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.047692][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.057129][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.067252][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.079264][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.088828][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.098687][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.108135][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.134565][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.143771][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.153585][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.166155][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.192294][ T3691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.200575][ T3691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.310398][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.326377][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.338174][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.381810][ T3691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.407303][ T3691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.438780][ T5535] loop0: detected capacity change from 0 to 256 [ 186.491893][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.500763][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.523536][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.609897][ T5303] device veth0_vlan entered promiscuous mode [ 186.634759][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.654656][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.678285][ T5303] device veth1_vlan entered promiscuous mode [ 186.719927][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.730065][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.758112][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.802806][ T5542] loop3: detected capacity change from 0 to 512 [ 186.854726][ T5542] EXT4-fs (loop3): 1 truncate cleaned up [ 186.866240][ T5542] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.944388][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.971852][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.979479][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.993875][ T5255] EXT4-fs (loop3): unmounting filesystem. [ 187.060636][ T5342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.117210][ T5303] device veth0_macvtap entered promiscuous mode [ 187.220322][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.233376][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.259947][ T5303] device veth1_macvtap entered promiscuous mode [ 187.301912][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.329383][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.407510][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.508428][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.518453][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.235387][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.240657][ T5539] loop0: detected capacity change from 0 to 32768 [ 188.283047][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.294619][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.304960][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.316454][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.327392][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.338863][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.349257][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.397788][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.400545][ T5539] XFS (loop0): Mounting V5 Filesystem [ 188.438763][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.450006][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.467938][ T5303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.483704][ T5342] device veth0_vlan entered promiscuous mode [ 188.526680][ T5561] loop3: detected capacity change from 0 to 512 [ 188.586198][ T5539] XFS (loop0): Ending clean mount [ 188.592906][ T5561] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 188.608888][ T5561] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 188.636127][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.661651][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.678940][ T5561] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.513: corrupted inode contents [ 188.691537][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.695003][ T5561] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz.3.513: mark_inode_dirty error [ 188.710769][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.722829][ T5561] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.513: corrupted inode contents [ 188.735140][ T5561] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.513: mark_inode_dirty error [ 188.762490][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.794061][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.811211][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.824555][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.839787][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.851445][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.861820][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.872692][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.910374][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.928044][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.952002][ T5255] EXT4-fs (loop3): unmounting filesystem. [ 188.952452][ T5303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.988716][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.028466][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.058207][ T5342] device veth1_vlan entered promiscuous mode [ 189.182928][ T5303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.192141][ T5303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.202647][ T5303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.211813][ T5303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.264839][ T3690] device hsr_slave_0 left promiscuous mode [ 189.296957][ T3690] device hsr_slave_1 left promiscuous mode [ 189.311166][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.318725][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.327746][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.339015][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.348911][ T3690] device bridge_slave_1 left promiscuous mode [ 189.359292][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.409968][ T3690] device bridge_slave_0 left promiscuous mode [ 189.431622][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.454877][ T3690] device hsr_slave_0 left promiscuous mode [ 189.472172][ T3690] device hsr_slave_1 left promiscuous mode [ 189.479286][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.493632][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.518311][ T3690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.531466][ T3690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.534199][ T3547] XFS (loop0): Unmounting Filesystem [ 189.579681][ T3690] device bridge_slave_1 left promiscuous mode [ 189.602489][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.637659][ T3690] device bridge_slave_0 left promiscuous mode [ 189.651045][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.775490][ T3690] device veth1_macvtap left promiscuous mode [ 189.782577][ T3690] device veth0_macvtap left promiscuous mode [ 189.788718][ T3690] device veth1_vlan left promiscuous mode [ 189.795099][ T3690] device veth0_vlan left promiscuous mode [ 189.808547][ T3690] device veth1_macvtap left promiscuous mode [ 189.814782][ T3690] device veth0_macvtap left promiscuous mode [ 189.821047][ T3690] device veth1_vlan left promiscuous mode [ 189.827083][ T3690] device veth0_vlan left promiscuous mode [ 190.021094][ T4693] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.254150][ T5581] loop0: detected capacity change from 0 to 256 [ 191.104651][ T4693] usb 4-1: Using ep0 maxpacket: 8 [ 191.121250][ T3552] Bluetooth: hci0: command 0x0406 tx timeout [ 191.231311][ T4693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 191.452414][ T4693] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 191.461940][ T4693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.470245][ T4693] usb 4-1: Product: syz [ 191.592150][ T4693] usb 4-1: Manufacturer: syz [ 191.596795][ T4693] usb 4-1: SerialNumber: syz [ 191.622186][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 191.638771][ T4693] usb 4-1: config 0 descriptor?? [ 191.708580][ T5592] xt_CONNSECMARK: invalid mode: 0 [ 191.796195][ T4693] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 192.281159][ T4693] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 192.288244][ T4693] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 192.305771][ T4693] usb 4-1: USB disconnect, device number 5 [ 192.345207][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 192.387002][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.425528][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.826653][ T3690] bond0 (unregistering): Released all slaves [ 192.857257][ T5598] loop3: detected capacity change from 0 to 1024 [ 192.918761][ T3691] hfsplus: b-tree write err: -5, ino 4 [ 194.163343][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169699][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.352274][ T3690] team0 (unregistering): Port device team_slave_1 removed [ 194.441626][ T3690] team0 (unregistering): Port device team_slave_0 removed [ 194.535523][ T5613] loop3: detected capacity change from 0 to 2048 [ 194.566093][ T3690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.584967][ T3564] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.595991][ T3564] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.606917][ T3564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.627044][ T3559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.635287][ T3559] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 194.646920][ T3559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.650557][ T5613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 194.671481][ T5613] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff) [ 194.682207][ T3690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.005465][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 195.132871][ T3690] bond0 (unregistering): Released all slaves [ 195.371587][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 172, changing to 7 [ 195.387233][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 16750, setting to 1024 [ 195.398510][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 195.443084][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.452359][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.473899][ T5342] device veth0_macvtap entered promiscuous mode [ 195.484327][ T4769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.491290][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.504792][ T4769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.505080][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 195.526414][ T14] usb 4-1: SerialNumber: syz [ 195.542844][ T5342] device veth1_macvtap entered promiscuous mode [ 195.564773][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.573846][ T14] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 195.582277][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.590628][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.671810][ T3691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.683834][ T3691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.705328][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.721864][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.734909][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.746979][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.759815][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.781248][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.784104][ T14] usb 4-1: USB disconnect, device number 6 [ 195.793907][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.808331][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.821360][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.829389][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 195.838250][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.847758][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.864265][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.885098][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.897728][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.912189][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.923466][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.934501][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.944830][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.955395][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.982988][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.028663][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.042558][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.064078][ T5342] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.075791][ T5342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.095438][ T5342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.108970][ T5342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.174711][ T5614] chnl_net:caif_netlink_parms(): no params data found [ 196.182689][ T5626] loop4: detected capacity change from 0 to 512 [ 196.226217][ T5626] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.256766][ T5626] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 196.315188][ T5626] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.534: corrupted inode contents [ 196.333174][ T5626] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz.4.534: mark_inode_dirty error [ 196.346633][ T5626] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.534: corrupted inode contents [ 196.395522][ T5626] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.534: mark_inode_dirty error [ 196.412829][ T5255] EXT4-fs (loop3): unmounting filesystem. [ 196.487822][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.520227][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.528708][ T5633] loop3: detected capacity change from 0 to 1024 [ 196.531565][ T5614] device bridge_slave_0 entered promiscuous mode [ 196.563987][ T5303] EXT4-fs (loop4): unmounting filesystem. [ 196.642108][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.649261][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.691153][ T5614] device bridge_slave_1 entered promiscuous mode [ 196.746675][ T3552] Bluetooth: hci5: command tx timeout [ 196.822356][ T33] hfsplus: b-tree write err: -5, ino 4 [ 197.113842][ T3691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.132051][ T3691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.148687][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.175908][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.197984][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.420791][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.466475][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.337335][ T5614] team0: Port device team_slave_0 added [ 198.386662][ T5614] team0: Port device team_slave_1 added [ 198.415335][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.592258][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.610958][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.725823][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.760170][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.769977][ T5652] loop1: detected capacity change from 0 to 47 [ 198.785366][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.823982][ T3552] Bluetooth: hci5: command tx timeout [ 198.970957][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.193698][ T5614] device hsr_slave_0 entered promiscuous mode [ 199.231247][ T5614] device hsr_slave_1 entered promiscuous mode [ 199.284008][ T5614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.311320][ T5614] Cannot create hsr debugfs directory [ 199.467959][ T5658] loop1: detected capacity change from 0 to 2048 [ 199.577529][ T5658] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 199.611381][ T5658] ext4 filesystem being mounted at /4/bus supports timestamps until 2038 (0x7fffffff) [ 199.795184][ T5651] loop4: detected capacity change from 0 to 32768 [ 199.899963][ T5651] [ 199.899963][ T5651] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.899963][ T5651] [ 200.046343][ T56] [ 200.046343][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.046343][ T56] [ 200.061907][ T4387] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 200.085552][ T56] [ 200.085552][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.085552][ T56] [ 200.089044][ T5614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.120775][ T5303] [ 200.120775][ T5303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.120775][ T5303] [ 200.149999][ T5303] [ 200.149999][ T5303] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.149999][ T5303] [ 200.171536][ T134] [ 200.171536][ T134] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 200.171536][ T134] [ 200.226524][ T134] ================================================================== [ 200.234627][ T134] BUG: KASAN: use-after-free in txEnd+0x350/0x560 [ 200.241076][ T134] Write of size 8 at addr ffff88805eb0c040 by task jfsCommit/134 [ 200.248803][ T134] [ 200.251219][ T134] CPU: 1 PID: 134 Comm: jfsCommit Not tainted 6.1.99-syzkaller #0 [ 200.259047][ T134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 200.269123][ T134] Call Trace: [ 200.272405][ T134] [ 200.275442][ T134] dump_stack_lvl+0x1e3/0x2cb [ 200.280257][ T134] ? nf_tcp_handle_invalid+0x642/0x642 [ 200.285748][ T134] ? panic+0x764/0x764 [ 200.289833][ T134] ? _printk+0xd1/0x111 [ 200.293998][ T134] ? __virt_addr_valid+0x17f/0x520 [ 200.299128][ T134] ? __virt_addr_valid+0x17f/0x520 [ 200.304342][ T134] print_report+0x15f/0x4f0 [ 200.308871][ T134] ? __virt_addr_valid+0x17f/0x520 [ 200.314007][ T134] ? __virt_addr_valid+0x17f/0x520 [ 200.319130][ T134] ? __virt_addr_valid+0x44a/0x520 [ 200.324253][ T134] ? __phys_addr+0xb6/0x170 [ 200.328780][ T134] ? txEnd+0x350/0x560 [ 200.332852][ T134] kasan_report+0x136/0x160 [ 200.337361][ T134] ? txEnd+0x350/0x560 [ 200.341438][ T134] kasan_check_range+0x27f/0x290 [ 200.346380][ T134] txEnd+0x350/0x560 [ 200.350356][ T134] jfs_lazycommit+0x610/0xb60 [ 200.355073][ T134] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 200.360994][ T134] ? lockdep_hardirqs_on+0x94/0x130 [ 200.366208][ T134] ? txFreelock+0x580/0x580 [ 200.370804][ T134] ? do_task_dead+0xd0/0xd0 [ 200.375329][ T134] ? _raw_spin_unlock+0x40/0x40 [ 200.380277][ T134] ? __kthread_parkme+0x168/0x1c0 [ 200.385316][ T134] kthread+0x28d/0x320 [ 200.389423][ T134] ? txFreelock+0x580/0x580 [ 200.393972][ T134] ? kthread_blkcg+0xd0/0xd0 [ 200.398585][ T134] ret_from_fork+0x1f/0x30 [ 200.403021][ T134] [ 200.406040][ T134] [ 200.408360][ T134] Allocated by task 5651: [ 200.412698][ T134] kasan_set_track+0x4b/0x70 [ 200.417303][ T134] __kasan_kmalloc+0x97/0xb0 [ 200.421896][ T134] lmLogOpen+0x314/0x1030 [ 200.426237][ T134] jfs_mount_rw+0xe3/0x640 [ 200.430660][ T134] jfs_fill_super+0x67d/0xc40 [ 200.435339][ T134] mount_bdev+0x2c9/0x3f0 [ 200.439682][ T134] legacy_get_tree+0xeb/0x180 [ 200.444395][ T134] vfs_get_tree+0x88/0x270 [ 200.448833][ T134] do_new_mount+0x2ba/0xb40 [ 200.453341][ T134] __se_sys_mount+0x2d5/0x3c0 [ 200.458026][ T134] do_syscall_64+0x3b/0xb0 [ 200.462470][ T134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.468394][ T134] [ 200.470721][ T134] Freed by task 5303: [ 200.474715][ T134] kasan_set_track+0x4b/0x70 [ 200.479317][ T134] kasan_save_free_info+0x27/0x40 [ 200.484455][ T134] ____kasan_slab_free+0xd6/0x120 [ 200.489603][ T134] __kmem_cache_free+0x25c/0x3c0 [ 200.494568][ T134] lmLogClose+0x29d/0x530 [ 200.498922][ T134] jfs_umount+0x298/0x370 [ 200.503438][ T134] jfs_put_super+0x86/0x180 [ 200.508033][ T134] generic_shutdown_super+0x130/0x340 [ 200.513411][ T134] kill_block_super+0x7a/0xe0 [ 200.518365][ T134] deactivate_locked_super+0xa0/0x110 [ 200.523740][ T134] cleanup_mnt+0x490/0x520 [ 200.528160][ T134] task_work_run+0x246/0x300 [ 200.532752][ T134] exit_to_user_mode_loop+0xde/0x100 [ 200.538207][ T134] exit_to_user_mode_prepare+0xb1/0x140 [ 200.543940][ T134] syscall_exit_to_user_mode+0x60/0x270 [ 200.549490][ T134] do_syscall_64+0x47/0xb0 [ 200.554006][ T134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.559907][ T134] [ 200.562230][ T134] The buggy address belongs to the object at ffff88805eb0c000 [ 200.562230][ T134] which belongs to the cache kmalloc-1k of size 1024 [ 200.576285][ T134] The buggy address is located 64 bytes inside of [ 200.576285][ T134] 1024-byte region [ffff88805eb0c000, ffff88805eb0c400) [ 200.589991][ T134] [ 200.592316][ T134] The buggy address belongs to the physical page: [ 200.598735][ T134] page:ffffea00017ac200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5eb08 [ 200.608892][ T134] head:ffffea00017ac200 order:3 compound_mapcount:0 compound_pincount:0 [ 200.617215][ T134] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 200.625226][ T134] raw: 00fff00000010200 ffffea0001cbf600 dead000000000002 ffff888012441dc0 [ 200.633829][ T134] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 200.642406][ T134] page dumped because: kasan: bad access detected [ 200.648910][ T134] page_owner tracks the page as allocated [ 200.654620][ T134] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4727, tgid 4727 (syz-executor), ts 145971755577, free_ts 145871902574 [ 200.678256][ T134] post_alloc_hook+0x18d/0x1b0 [ 200.683026][ T134] get_page_from_freelist+0x322e/0x33b0 [ 200.688657][ T134] __alloc_pages+0x28d/0x770 [ 200.693293][ T134] alloc_slab_page+0x6a/0x150 [ 200.697987][ T134] new_slab+0x84/0x2d0 [ 200.702073][ T134] ___slab_alloc+0xc20/0x1270 [ 200.706751][ T134] __kmem_cache_alloc_node+0x19f/0x260 [ 200.712215][ T134] __kmalloc_node_track_caller+0xa0/0x220 [ 200.717950][ T134] __alloc_skb+0x135/0x670 [ 200.722378][ T134] rtmsg_fib+0x140/0x620 [ 200.726656][ T134] fib_table_insert+0xfb6/0x1f20 [ 200.731602][ T134] fib_add_ifaddr+0xf4c/0x1730 [ 200.736381][ T134] fib_netdev_event+0x620/0x730 [ 200.741538][ T134] raw_notifier_call_chain+0xd0/0x170 [ 200.746944][ T134] __dev_notify_flags+0x304/0x610 [ 200.751980][ T134] dev_change_flags+0xe7/0x190 [ 200.756756][ T134] page last free stack trace: [ 200.761539][ T134] free_unref_page_prepare+0xf63/0x1120 [ 200.767190][ T134] free_unref_page+0x33/0x3e0 [ 200.771877][ T134] free_large_kmalloc+0xfb/0x190 [ 200.776909][ T134] wg_destruct+0x299/0x2f0 [ 200.781356][ T134] netdev_run_todo+0xd7f/0xf40 [ 200.786307][ T134] default_device_exit_batch+0x95b/0x9d0 [ 200.791955][ T134] cleanup_net+0x763/0xb60 [ 200.796647][ T134] process_one_work+0x8a9/0x11d0 [ 200.801590][ T134] worker_thread+0xa47/0x1200 [ 200.806321][ T134] kthread+0x28d/0x320 [ 200.810411][ T134] ret_from_fork+0x1f/0x30 [ 200.814853][ T134] [ 200.817182][ T134] Memory state around the buggy address: [ 200.822811][ T134] ffff88805eb0bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.831219][ T134] ffff88805eb0bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.839301][ T134] >ffff88805eb0c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.848139][ T134] ^ [ 200.854562][ T134] ffff88805eb0c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.862649][ T134] ffff88805eb0c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.870743][ T134] ================================================================== [ 200.887666][ T3552] Bluetooth: hci5: command tx timeout [ 201.085195][ T4387] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 172, changing to 7 [ 201.107716][ T4387] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 16750, setting to 1024 [ 201.143330][ T4387] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.282409][ T4387] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.304479][ T4387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.329495][ T4387] usb 2-1: SerialNumber: syz [ 201.412100][ T4387] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 201.634242][ T14] usb 2-1: USB disconnect, device number 4 [ 201.939630][ T5614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.967042][ T134] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 201.974280][ T134] CPU: 0 PID: 134 Comm: jfsCommit Not tainted 6.1.99-syzkaller #0 [ 201.982177][ T134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 201.992413][ T134] Call Trace: [ 201.995700][ T134] [ 201.998717][ T134] dump_stack_lvl+0x1e3/0x2cb [ 202.003669][ T134] ? nf_tcp_handle_invalid+0x642/0x642 [ 202.009137][ T134] ? panic+0x764/0x764 [ 202.013213][ T134] ? vscnprintf+0x59/0x80 [ 202.017551][ T134] panic+0x318/0x764 [ 202.021481][ T134] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 202.027744][ T134] ? check_panic_on_warn+0x1d/0xa0 [ 202.032859][ T134] ? memcpy_page_flushcache+0xfc/0xfc [ 202.038497][ T134] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 202.044596][ T134] ? _raw_spin_unlock+0x40/0x40 [ 202.049483][ T134] check_panic_on_warn+0x7e/0xa0 [ 202.054726][ T134] ? txEnd+0x350/0x560 [ 202.058802][ T134] end_report+0x66/0x110 [ 202.063056][ T134] kasan_report+0x143/0x160 [ 202.067651][ T134] ? txEnd+0x350/0x560 [ 202.071725][ T134] kasan_check_range+0x27f/0x290 [ 202.076669][ T134] txEnd+0x350/0x560 [ 202.080832][ T134] jfs_lazycommit+0x610/0xb60 [ 202.085516][ T134] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 202.091539][ T134] ? lockdep_hardirqs_on+0x94/0x130 [ 202.096764][ T134] ? txFreelock+0x580/0x580 [ 202.101286][ T134] ? do_task_dead+0xd0/0xd0 [ 202.106325][ T134] ? _raw_spin_unlock+0x40/0x40 [ 202.111291][ T134] ? __kthread_parkme+0x168/0x1c0 [ 202.116444][ T134] kthread+0x28d/0x320 [ 202.120549][ T134] ? txFreelock+0x580/0x580 [ 202.125080][ T134] ? kthread_blkcg+0xd0/0xd0 [ 202.129713][ T134] ret_from_fork+0x1f/0x30 [ 202.134177][ T134] [ 202.137732][ T134] Kernel Offset: disabled [ 202.142174][ T134] Rebooting in 86400 seconds..