last executing test programs: 3.833748346s ago: executing program 0 (id=907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, 0x0, 0x0, 0x0, 0x0, "5ec7401471e8ebc953318274df156c31771349fb56853925a2aa823253f5d3da169895cef51dd8ba59709b7dd807ff0505856e9e24865bf8000cf3b818a0f8298edd456330ba688d285c82ec22e76fbd"}, 0xd8) 3.719921448s ago: executing program 0 (id=913): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x80, @local, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3ff, @private0, 0x6}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000540)="fa", 0x1}], 0x1}}], 0x2, 0x4040001) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 3.57736367s ago: executing program 0 (id=915): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1a7) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) 3.498465932s ago: executing program 0 (id=918): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x84, 0x40000}, 0x20) 3.418830933s ago: executing program 0 (id=930): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x200480c0) 2.887463482s ago: executing program 0 (id=929): r0 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) write$binfmt_aout(r0, 0x0, 0x120) 1.727399851s ago: executing program 2 (id=958): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) 1.599788213s ago: executing program 2 (id=960): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1.426224206s ago: executing program 2 (id=966): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@nogrpid}, {@nogrpid}]}, 0x1, 0x3ed, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.19774666s ago: executing program 3 (id=971): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x15e81, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.127508431s ago: executing program 2 (id=972): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x80, @local, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3ff, @private0, 0x6}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000540)="fa", 0x1}], 0x1}}], 0x2, 0x4040001) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x83, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 1.040008932s ago: executing program 1 (id=973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x880) 965.145594ms ago: executing program 2 (id=975): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x14010, &(0x7f0000000000)=ANY=[], 0x1, 0x62ed, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x3200c00, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x3, 0xaa4, &(0x7f00000004c0)="$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") 796.173256ms ago: executing program 3 (id=976): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 795.828706ms ago: executing program 1 (id=977): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x1000414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 793.799496ms ago: executing program 4 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="14005a800c0001800500070000000000040080"], 0x30}}, 0x0) 714.691648ms ago: executing program 3 (id=979): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x50, r0, 0x101, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1, 0x0, 0x1, 0x0, {0x3, 0xc, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x800, 0xf4, 0x5}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}, 0x1, 0x0, 0x0, 0x8884}, 0x14) 684.207558ms ago: executing program 4 (id=980): write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x8, 0x6004}, @val={0x0, 0x3, 0x12, 0x0, 0xfffe}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x12, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf250100000008000100ffffffff24000480050003000100000005000300020000000500030001000000040003000600000008000200"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 602.99201ms ago: executing program 4 (id=981): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 504.179431ms ago: executing program 1 (id=982): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "89585f", 0x10, 0x21, 0x1, @private0, @empty, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x8, 0x0, "6e3896", 0x8, "5708c3"}}}}}}}, 0x0) 498.001211ms ago: executing program 3 (id=983): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=@setlink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x102}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4012}, 0x0) 490.479381ms ago: executing program 4 (id=984): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0x10, 0x0, 0x3}, {0x6, 0x60, 0x0, 0xfffffe70}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 418.294123ms ago: executing program 1 (id=985): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x7, 0x2, "c30000ef00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xff) 276.233225ms ago: executing program 1 (id=986): setuid(0xee01) r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x70000011}) 248.243805ms ago: executing program 1 (id=987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) 200.165656ms ago: executing program 3 (id=988): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xfd}]}, 0x28}}, 0x0) 107.977298ms ago: executing program 4 (id=989): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0), 0x16, 0x60, 0x8001}}], 0x48, 0x8004}, 0x0) 107.193168ms ago: executing program 3 (id=990): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 39.422379ms ago: executing program 4 (id=991): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x2c, r1, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100008}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 43.230024][ T4015] cgroup: Unknown subsys name 'net' [ 43.490981][ T4015] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.828056][ T4015] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 45.778654][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 45.810734][ T4035] chnl_net:caif_netlink_parms(): no params data found [ 45.826965][ T4025] chnl_net:caif_netlink_parms(): no params data found [ 45.875072][ T4037] chnl_net:caif_netlink_parms(): no params data found [ 45.922033][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.924089][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.927032][ T4026] device bridge_slave_0 entered promiscuous mode [ 45.943816][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 45.955825][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.957759][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.960366][ T4026] device bridge_slave_1 entered promiscuous mode [ 45.970879][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.972830][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.975748][ T4035] device bridge_slave_0 entered promiscuous mode [ 46.010823][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.012802][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.015809][ T4035] device bridge_slave_1 entered promiscuous mode [ 46.042243][ T4025] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.044263][ T4025] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.046909][ T4025] device bridge_slave_0 entered promiscuous mode [ 46.056224][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.058760][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.060670][ T4037] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.063411][ T4037] device bridge_slave_0 entered promiscuous mode [ 46.072810][ T4025] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.075352][ T4025] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.078014][ T4025] device bridge_slave_1 entered promiscuous mode [ 46.084426][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.092020][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.093867][ T4037] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.096742][ T4037] device bridge_slave_1 entered promiscuous mode [ 46.101691][ T4035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.134326][ T4035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.155573][ T4026] team0: Port device team_slave_0 added [ 46.169918][ T4025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.172480][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.174808][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.178249][ T4033] device bridge_slave_0 entered promiscuous mode [ 46.181971][ T4026] team0: Port device team_slave_1 added [ 46.183685][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.185940][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.188521][ T4033] device bridge_slave_1 entered promiscuous mode [ 46.192870][ T4037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.202411][ T4025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.224840][ T4035] team0: Port device team_slave_0 added [ 46.228171][ T4037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.248564][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.252028][ T4035] team0: Port device team_slave_1 added [ 46.272893][ T4025] team0: Port device team_slave_0 added [ 46.275650][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.277560][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.290567][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.296255][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.311401][ T4025] team0: Port device team_slave_1 added [ 46.313515][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.315642][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.322390][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.333153][ T4037] team0: Port device team_slave_0 added [ 46.335512][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.337418][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.344851][ T4035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.370814][ T4037] team0: Port device team_slave_1 added [ 46.372990][ T4035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.375118][ T4035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.381949][ T4035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.404799][ T4033] team0: Port device team_slave_0 added [ 46.409623][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.411595][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.419124][ T4025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.446614][ T4026] device hsr_slave_0 entered promiscuous mode [ 46.514378][ T4026] device hsr_slave_1 entered promiscuous mode [ 46.581160][ T4033] team0: Port device team_slave_1 added [ 46.583280][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.585788][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.592656][ T4037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.598091][ T4037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.600000][ T4037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.607146][ T4037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.610831][ T4025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.612713][ T4025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.619775][ T4025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.686426][ T4035] device hsr_slave_0 entered promiscuous mode [ 46.724383][ T4035] device hsr_slave_1 entered promiscuous mode [ 46.784121][ T4035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.786391][ T4035] Cannot create hsr debugfs directory [ 46.788449][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.790211][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.797306][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.825800][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.827724][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.840796][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.936242][ T4037] device hsr_slave_0 entered promiscuous mode [ 46.974312][ T4037] device hsr_slave_1 entered promiscuous mode [ 47.014729][ T4037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.016843][ T4037] Cannot create hsr debugfs directory [ 47.115916][ T4033] device hsr_slave_0 entered promiscuous mode [ 47.154453][ T4033] device hsr_slave_1 entered promiscuous mode [ 47.194208][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.196232][ T4033] Cannot create hsr debugfs directory [ 47.246027][ T4025] device hsr_slave_0 entered promiscuous mode [ 47.284464][ T4025] device hsr_slave_1 entered promiscuous mode [ 47.334122][ T4025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.336180][ T4025] Cannot create hsr debugfs directory [ 47.474427][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 47.544373][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 47.546469][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 47.548150][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 47.550364][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 47.568341][ T4026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.632355][ T4026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.686166][ T4026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.749443][ T4026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.831081][ T4035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.858844][ T4035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.915154][ T4035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.980621][ T4035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.052019][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.073101][ T4025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.117767][ T4025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.156632][ T4025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.198220][ T4025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.236279][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.239804][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.255054][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.259718][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.262545][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.265946][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.268005][ T1855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.279719][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.284279][ T4037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.317323][ T4037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.388438][ T4037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.436371][ T4037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.501364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.504491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.506971][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.508887][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.530470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.548859][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.567439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.570513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.573240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.589239][ T4033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.636480][ T4033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.694420][ T4033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.735679][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.738523][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.741148][ T4033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.783241][ T4035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.796329][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.803838][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.826251][ T4026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.829783][ T4026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.841550][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.844973][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.847663][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.850177][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.863441][ T4035] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.896599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.899411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.901947][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.903845][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.918908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.921507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.926560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.929044][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.930946][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.948949][ T4037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.970083][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.973939][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.979428][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.983391][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.999361][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.002499][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.005933][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.016898][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.019548][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.022144][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.026366][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.047800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.049973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.053098][ T4037] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.059777][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.069828][ T4025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.077224][ T4035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.080687][ T4035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.083892][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.088845][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.102133][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.105939][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.108505][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.110309][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.112699][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.129771][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.136840][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.139933][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.142715][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.144687][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.149942][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.153895][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.186079][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.189148][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.192354][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.202048][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.206058][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.210777][ T4025] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.220336][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.222945][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.235761][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.239082][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.241845][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.245863][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.248321][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.250226][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.256325][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.262692][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.273169][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.276502][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.278988][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.280958][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.296618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.299458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.302141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.324855][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.327777][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.330446][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.333024][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.337379][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.355558][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.358296][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.361091][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.363728][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.365710][ T431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.368980][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.371107][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.373116][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.377057][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.379612][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.381487][ T431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.383750][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.388728][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.391523][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.398167][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.401700][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.405759][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.416957][ T4026] device veth0_vlan entered promiscuous mode [ 49.426578][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.429360][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.431984][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.436427][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.439296][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.441878][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.447089][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.449765][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.452444][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.456190][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.475261][ T4026] device veth1_vlan entered promiscuous mode [ 49.479507][ T4037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.482040][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.485651][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.488860][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.491489][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.498314][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.501461][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.506861][ T4025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.520133][ T4033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.522836][ T4033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.537519][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.540154][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.542890][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.544379][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 49.547826][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.550363][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.563503][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.585908][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.588794][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.611265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.613890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.617786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.622449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.626603][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 49.628274][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 49.630052][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 49.631694][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 49.653254][ T4026] device veth0_macvtap entered promiscuous mode [ 49.664592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.667381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.672375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.676095][ T4035] device veth0_vlan entered promiscuous mode [ 49.687657][ T4035] device veth1_vlan entered promiscuous mode [ 49.715742][ T4026] device veth1_macvtap entered promiscuous mode [ 49.740569][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.743325][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.752631][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.757890][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.760119][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.789356][ T4025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.794571][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.796665][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.803241][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.821226][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.823338][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.829000][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.842845][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.847067][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.858297][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.860288][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.863098][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.877852][ T4035] device veth0_macvtap entered promiscuous mode [ 49.887802][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.890788][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.893404][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.903209][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.906982][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.912661][ T4037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.916376][ T4026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.918871][ T4026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.921099][ T4026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.923302][ T4026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.938739][ T4035] device veth1_macvtap entered promiscuous mode [ 49.943312][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.988434][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.991201][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.993941][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.997234][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.012712][ T4025] device veth0_vlan entered promiscuous mode [ 50.016110][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.018898][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.048107][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.050873][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.068050][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.070979][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.077133][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.088011][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.090651][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.097133][ T4035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.099829][ T4035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.103465][ T4035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.117966][ T4035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.120311][ T4035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.122594][ T4035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.125521][ T4035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.138651][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.141281][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.149946][ T4025] device veth1_vlan entered promiscuous mode [ 50.158648][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.161399][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.164377][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.167146][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.169829][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.175474][ T4037] device veth0_vlan entered promiscuous mode [ 50.194708][ T1855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.197053][ T1855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.202790][ T4033] device veth0_vlan entered promiscuous mode [ 50.205399][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.208029][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.211941][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.216686][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.219110][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.237148][ T4037] device veth1_vlan entered promiscuous mode [ 50.252858][ T4033] device veth1_vlan entered promiscuous mode [ 50.293206][ T1631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.296627][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.296722][ T1631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.299483][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.303008][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.309678][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.312185][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.315005][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.317656][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.331891][ T4025] device veth0_macvtap entered promiscuous mode [ 50.335950][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.338607][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.341158][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.343692][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.369488][ T4037] device veth0_macvtap entered promiscuous mode [ 50.381742][ T4025] device veth1_macvtap entered promiscuous mode [ 50.384471][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.389594][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.393640][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.409227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.411999][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.419684][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.422435][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.429745][ T4033] device veth0_macvtap entered promiscuous mode [ 50.446996][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.449848][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.452366][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.459942][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.467507][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.470383][ T4033] device veth1_macvtap entered promiscuous mode [ 50.490876][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.493649][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.497427][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.500135][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.503852][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.513315][ T4037] device veth1_macvtap entered promiscuous mode [ 50.519489][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.521995][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.525407][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.529883][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.532761][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.536198][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.538815][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.548868][ T4025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.551191][ T4025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.553468][ T4025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.563839][ T4025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.613336][ T1599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.620415][ T1599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.623278][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.630756][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.633546][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.637932][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.640628][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.643257][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.647925][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.651907][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.653900][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.658959][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.680891][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.683805][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.687122][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.689923][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.692503][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.696560][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.700437][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.721486][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.727077][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.730045][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.732854][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.740497][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.752777][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.761280][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.764740][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.767421][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.770173][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.803510][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.818958][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.821803][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.860847][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.863574][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.882540][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.885019][ T4115] loop2: detected capacity change from 0 to 1024 [ 50.889369][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.892126][ T4037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.901766][ T4037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.914382][ T4037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.918912][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.921797][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.924962][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.928717][ T1855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.935652][ T4033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.938057][ T4033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.940318][ T4033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.942545][ T4033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.007008][ T4037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.009386][ T4037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.011763][ T4037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.020151][ T4037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.120561][ T431] hfsplus: b-tree write err: -5, ino 4 [ 51.165219][ T1599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.167478][ T1599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.201936][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.310489][ T1631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.312694][ T1631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.342198][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.342393][ T431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.351839][ T431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.359615][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.459176][ T1599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.461404][ T1599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.489178][ T1631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.508352][ T1631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.510627][ T1631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.543527][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.581012][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.583197][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.595175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.654976][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 51.704865][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 51.706740][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 51.708824][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 51.710665][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 51.722273][ T4146] loop0: detected capacity change from 0 to 512 [ 51.782352][ T4153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 51.942940][ T4146] EXT4-fs (loop0): Test dummy encryption mode enabled [ 51.946648][ T4146] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.950684][ T4146] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.990899][ T26] audit: type=1326 audit(51.960:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4173 comm="syz.4.33" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a6d6d28 code=0x0 [ 52.005475][ T4146] EXT4-fs (loop0): 1 truncate cleaned up [ 52.007001][ T4146] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,max_dir_size_kb=0x000000000000148a,,errors=continue. Quota mode: writeback. [ 52.353789][ T4146] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 52.373939][ T4181] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #12: comm syz.0.22: Siphash requires key [ 52.535168][ T4166] loop2: detected capacity change from 0 to 40427 [ 52.612606][ T4197] capability: warning: `syz.0.39' uses deprecated v2 capabilities in a way that may be insecure [ 52.623304][ T4166] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 52.626481][ T4166] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 52.638096][ T4166] F2FS-fs (loop2): invalid crc value [ 52.648199][ T4166] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.695515][ T4166] F2FS-fs (loop2): recover fsync data on readonly fs [ 52.698212][ T4166] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 52.705370][ T4166] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 52.710954][ T4166] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 52.808342][ T4202] loop0: detected capacity change from 0 to 512 [ 52.859973][ T4178] loop1: detected capacity change from 0 to 40427 [ 52.882882][ T4178] F2FS-fs (loop1): invalid crc value [ 52.903717][ T4178] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.967051][ T4178] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 52.971116][ T4202] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,dax=never,,errors=continue. Quota mode: writeback. [ 53.075043][ T4220] loop3: detected capacity change from 0 to 512 [ 53.100456][ T4025] attempt to access beyond end of device [ 53.100456][ T4025] loop1: rw=2049, want=45104, limit=40427 [ 53.169415][ T4220] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 53.181144][ T4220] EXT4-fs (loop3): 1 truncate cleaned up [ 53.182796][ T4220] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,data_err=abort,,errors=continue. Quota mode: writeback. [ 53.300044][ T4230] loop4: detected capacity change from 0 to 8 [ 53.551140][ T4247] loop2: detected capacity change from 0 to 8 [ 53.582875][ T4243] sp0: Synchronizing with TNC [ 53.704148][ T1962] Bluetooth: hci0: command 0x0419 tx timeout [ 53.785409][ T1962] Bluetooth: hci4: command 0x0419 tx timeout [ 53.793594][ T1962] Bluetooth: hci1: command 0x0419 tx timeout [ 53.795408][ T1962] Bluetooth: hci2: command 0x0419 tx timeout [ 53.797369][ T1962] Bluetooth: hci3: command 0x0419 tx timeout [ 53.925356][ T4252] loop0: detected capacity change from 0 to 32768 [ 54.166680][ T4256] loop4: detected capacity change from 0 to 4096 [ 54.291828][ T4264] loop2: detected capacity change from 0 to 8192 [ 54.312794][ T4263] loop1: detected capacity change from 0 to 8192 [ 54.375095][ T4263] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 54.377787][ T4263] REISERFS (device loop1): using ordered data mode [ 54.379505][ T4263] reiserfs: using flush barriers [ 54.414787][ T4264] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 54.415624][ T4263] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 4718622, max trans age 30 [ 54.417431][ T4264] REISERFS (device loop2): using ordered data mode [ 54.421916][ T4263] REISERFS (device loop1): checking transaction log (loop1) [ 54.424309][ T4264] reiserfs: using flush barriers [ 54.433707][ T4264] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 54.443278][ T4264] REISERFS (device loop2): checking transaction log (loop2) [ 54.546286][ T4264] REISERFS (device loop2): Using tea hash to sort names [ 54.549285][ T4264] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 54.693536][ T4271] loop3: detected capacity change from 0 to 64 [ 54.776466][ T4263] REISERFS (device loop1): Using tea hash to sort names [ 54.778786][ T4263] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 54.849984][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 55.038719][ T4287] syz.0.80 uses obsolete (PF_INET,SOCK_PACKET) [ 55.231961][ T4297] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 55.258274][ T4299] loop1: detected capacity change from 0 to 512 [ 55.299653][ T4292] loop3: detected capacity change from 0 to 8192 [ 55.364409][ T4292] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 55.367414][ T4292] REISERFS (device loop3): using ordered data mode [ 55.373275][ T4292] reiserfs: using flush barriers [ 55.379166][ T4299] EXT2-fs (loop1): (no)user_xattr optionsnot supported [ 55.388186][ T4299] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 55.406030][ T4292] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 55.410454][ T4292] REISERFS (device loop3): checking transaction log (loop3) [ 55.470061][ T4292] REISERFS (device loop3): Using r5 hash to sort names [ 55.472163][ T4292] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 55.493182][ T4277] loop4: detected capacity change from 0 to 40427 [ 55.497425][ T4292] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 55.554905][ T4277] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.661374][ T4277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.831630][ T4033] attempt to access beyond end of device [ 55.831630][ T4033] loop4: rw=2049, want=45104, limit=40427 [ 55.896336][ T4328] loop3: detected capacity change from 0 to 4096 [ 55.928202][ T4331] loop1: detected capacity change from 0 to 1024 [ 55.935220][ T4328] ======================================================= [ 55.935220][ T4328] WARNING: The mand mount option has been deprecated and [ 55.935220][ T4328] and is ignored by this kernel. Remove the mand [ 55.935220][ T4328] option from the mount to silence this warning. [ 55.935220][ T4328] ======================================================= [ 55.963029][ T4331] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 549755813893)! [ 55.966096][ T4331] EXT4-fs (loop1): group descriptors corrupted! [ 55.974495][ T4328] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 56.029808][ T4336] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.050901][ T4336] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.052428][ T26] audit: type=1326 audit(56.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a6d6d28 code=0x7ffc0000 [ 56.114928][ T26] audit: type=1326 audit(56.090:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a6d6d28 code=0x7ffc0000 [ 56.122651][ T26] audit: type=1326 audit(56.090:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff8a6d6d28 code=0x7ffc0000 [ 56.144254][ T26] audit: type=1326 audit(56.090:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a6d6d28 code=0x7ffc0000 [ 56.174884][ T26] audit: type=1326 audit(56.090:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a6d6d28 code=0x7ffc0000 [ 56.194058][ T26] audit: type=1326 audit(56.110:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffff8a6d6d28 code=0x7ffc0000 [ 56.199719][ T26] audit: type=1326 audit(56.110:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a6d6d28 code=0x7ffc0000 [ 56.226623][ T26] audit: type=1326 audit(56.110:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4339 comm="syz.4.98" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a6d6d28 code=0x7ffc0000 [ 56.411745][ T4361] netlink: 'syz.3.113': attribute type 29 has an invalid length. [ 56.414460][ T4361] netlink: 'syz.3.113': attribute type 29 has an invalid length. [ 56.443942][ T4361] netlink: 'syz.3.113': attribute type 29 has an invalid length. [ 56.693345][ T4377] loop2: detected capacity change from 0 to 1024 [ 56.947328][ T4357] loop4: detected capacity change from 0 to 32768 [ 56.952453][ T7] kernel read not supported for file /video3 (pid: 7 comm: kworker/0:0) [ 56.996062][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 57.142064][ T4393] loop2: detected capacity change from 0 to 512 [ 57.153922][ T4352] loop1: detected capacity change from 0 to 40427 [ 57.240783][ T4393] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 57.261790][ T4398] syz.1.132 (4398): /proc/4397/oom_adj is deprecated, please use /proc/4397/oom_score_adj instead. [ 57.268381][ T4393] EXT4-fs (loop2): invalid journal inode [ 57.270017][ T4393] EXT4-fs (loop2): can't get journal size [ 57.293275][ T4393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c119, mo2=0002] [ 57.304739][ T4393] System zones: 1-12, 13-13 [ 57.320473][ T4402] sctp: [Deprecated]: syz.0.133 (pid 4402) Use of int in max_burst socket option. [ 57.320473][ T4402] Use struct sctp_assoc_value instead [ 57.354862][ T4393] EXT4-fs (loop2): 1 truncate cleaned up [ 57.356414][ T4393] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,debug,nombcache,,errors=continue. Quota mode: writeback. [ 57.362270][ T4379] loop3: detected capacity change from 0 to 32768 [ 57.520860][ T4379] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.123 (4379) [ 57.584877][ T4379] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 57.593781][ T4379] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 57.602337][ T4379] BTRFS info (device loop3): use zstd compression, level 3 [ 57.607813][ T4379] BTRFS info (device loop3): using free space tree [ 57.614143][ T4379] BTRFS info (device loop3): has skinny extents [ 57.839223][ T4379] BTRFS info (device loop3): enabling ssd optimizations [ 57.964467][ T4420] loop2: detected capacity change from 0 to 32768 [ 57.967282][ T4406] loop4: detected capacity change from 0 to 32768 [ 57.986269][ T4406] XFS: ikeep mount option is deprecated. [ 57.987980][ T4406] XFS: ikeep mount option is deprecated. [ 58.001696][ T4420] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.138 (4420) [ 58.052090][ T4420] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 58.054621][ T4420] BTRFS info (device loop2): using free space tree [ 58.056300][ T4420] BTRFS info (device loop2): has skinny extents [ 58.059125][ T4406] XFS (loop4): Mounting V5 Filesystem [ 58.160842][ T4406] XFS (loop4): Ending clean mount [ 58.168570][ T4406] XFS (loop4): Quotacheck needed: Please wait. [ 58.232787][ T4406] XFS (loop4): Quotacheck: Done. [ 58.319561][ T4033] XFS (loop4): Unmounting Filesystem [ 58.330817][ T4410] loop1: detected capacity change from 0 to 32768 [ 58.386169][ T4410] XFS (loop1): Mounting V5 Filesystem [ 58.404185][ T4420] BTRFS info (device loop2): enabling ssd optimizations [ 58.413414][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.141'. [ 58.582943][ T4410] XFS (loop1): Ending clean mount [ 58.684185][ T4025] XFS (loop1): Unmounting Filesystem [ 58.878138][ T4488] delete_channel: no stack [ 59.123218][ T4500] ALSA: mixer_oss: invalid OSS volume 'SYN‘H' [ 59.545462][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 59.691446][ T4541] loop0: detected capacity change from 0 to 1024 [ 59.817779][ T4541] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000000a,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 60.200473][ T4567] loop3: detected capacity change from 0 to 256 [ 60.381781][ T4535] loop2: detected capacity change from 0 to 32768 [ 60.429949][ T4535] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.167 (4535) [ 60.510673][ T4535] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 60.513252][ T4535] BTRFS info (device loop2): using free space tree [ 60.536636][ T4535] BTRFS info (device loop2): has skinny extents [ 60.610749][ T4580] use of bytesused == 0 is deprecated and will be removed in the future, [ 60.613163][ T4580] use the actual size instead. [ 60.632846][ T4592] loop0: detected capacity change from 0 to 2048 [ 60.718091][ T4604] sp0: Synchronizing with TNC [ 60.729229][ T4592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.871945][ T4615] netlink: 'syz.1.195': attribute type 8 has an invalid length. [ 60.931272][ T4535] BTRFS info (device loop2): enabling ssd optimizations [ 60.951256][ T4621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 60.986958][ T4617] loop3: detected capacity change from 0 to 1024 [ 60.993491][ T4617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.994957][ T4535] BTRFS error (device loop2): balance: invalid convert data profile single [ 61.105726][ T4627] loop4: detected capacity change from 0 to 4096 [ 61.112229][ T4627] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 61.143271][ T4627] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 61.152275][ T4627] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 61.165138][ T4627] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 61.168671][ T4627] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 61.190088][ T4627] ntfs: volume version 3.1. [ 61.193944][ T4627] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 61.200563][ T4627] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 61.561577][ T4650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.210'. [ 61.807463][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 61.915925][ T4671] siw: device registration error -23 [ 62.250160][ T4651] loop1: detected capacity change from 0 to 32768 [ 62.317961][ T4651] blk_update_request: I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.320992][ T4651] lbmIODone: I/O error in JFS log [ 62.322544][ T4651] *** Log Format Error ! *** [ 62.338632][ T4651] lmLogInit: exit(-22) [ 62.339805][ T4651] lmLogOpen: exit(-22) [ 62.395447][ T4655] loop0: detected capacity change from 0 to 32768 [ 62.545402][ T4655] XFS (loop0): Mounting V5 Filesystem [ 62.618470][ T4655] XFS (loop0): Ending clean mount [ 62.682737][ T4655] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_cntbt block 0x10 [ 62.690142][ T4655] XFS (loop0): Unmount and run xfs_repair [ 62.691873][ T4655] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 62.694570][ T4655] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 62.696952][ T4655] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 62.699357][ T4655] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 62.701961][ T4655] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 62.704392][ T4655] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 62.706698][ T4655] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 62.709076][ T4655] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 62.711412][ T4655] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 62.711866][ T4703] loop3: detected capacity change from 0 to 8192 [ 62.714270][ T4655] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 62.723218][ T4655] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x81c/0x12f4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 62.727451][ T4655] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 62.780710][ T4019] loop3: p1 p3 p4 [ 62.780710][ T4019] p3: [ 62.789671][ T4019] loop3: partition table partially beyond EOD, truncated [ 62.800294][ T4019] loop3: p1 start 51379968 is beyond EOD, truncated [ 62.808420][ T4035] XFS (loop0): Unmounting Filesystem [ 62.826885][ T4019] loop3: p3 size 15991040 extends beyond EOD, truncated [ 62.842121][ T4019] loop3: p4 start 16711680 is beyond EOD, truncated [ 62.847933][ T4019] loop3: p5 start 51379968 is beyond EOD, truncated [ 62.850802][ T4019] loop3: p6 size 15991040 extends beyond EOD, truncated [ 62.879433][ T4703] loop3: p1 p3 p4 [ 62.879433][ T4703] p3: [ 62.883199][ T4703] loop3: partition table partially beyond EOD, truncated [ 62.888123][ T4703] loop3: p1 start 51379968 is beyond EOD, truncated [ 62.891084][ T4703] loop3: p3 size 15991040 extends beyond EOD, truncated [ 62.903344][ T4703] loop3: p4 start 16711680 is beyond EOD, truncated [ 62.908834][ T4703] loop3: p5 start 51379968 is beyond EOD, truncated [ 62.923272][ T4703] loop3: p6 size 15991040 extends beyond EOD, truncated [ 63.272347][ T4733] loop2: detected capacity change from 0 to 1024 [ 63.276111][ T4189] udevd[4189]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 63.298536][ T4733] EXT4-fs (loop2): Ignoring removed orlov option [ 63.311203][ T4733] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.321423][ T4127] udevd[4127]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 63.361439][ T4730] loop3: detected capacity change from 0 to 8192 [ 63.363653][ T4733] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,orlov,min_batch_time=0x0000000000000001,nojournal_checksum,barrier,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,journal_ioprio=0x0000000000000001,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 64.041551][ T4743] loop0: detected capacity change from 0 to 32768 [ 64.056105][ T4017] udevd[4017]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 64.065669][ T4764] tap0: tun_chr_ioctl cmd 2147767507 [ 64.177475][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 64.365110][ T4747] loop1: detected capacity change from 0 to 32768 [ 64.386099][ T4747] XFS: ikeep mount option is deprecated. [ 64.387620][ T4747] XFS: ikeep mount option is deprecated. [ 64.417880][ T4783] netlink: 88 bytes leftover after parsing attributes in process `syz.3.270'. [ 64.425519][ T4783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 64.438945][ T4747] XFS (loop1): Mounting V5 Filesystem [ 64.604641][ T4747] XFS (loop1): Ending clean mount [ 64.618910][ T4747] XFS (loop1): Quotacheck needed: Please wait. [ 64.701903][ T4747] XFS (loop1): Quotacheck: Done. [ 64.782361][ T4747] XFS (loop1): User initiated shutdown received. [ 64.804673][ T4747] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe0/0x15c (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 64.809005][ T4747] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 64.878717][ T4025] XFS (loop1): Unmounting Filesystem [ 64.883481][ T26] audit: type=1326 audit(64.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4810 comm="syz.3.281" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8846d28 code=0x0 [ 65.113327][ T4828] loop0: detected capacity change from 0 to 128 [ 65.586441][ T4851] loop0: detected capacity change from 0 to 512 [ 65.651473][ T4851] EXT4-fs (loop0): Ignoring removed nobh option [ 65.698061][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 65.700470][ T4830] loop4: detected capacity change from 0 to 32768 [ 65.711205][ T4858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 65.713688][ T4858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.299'. [ 65.723732][ T4858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.299'. [ 65.727426][ T4851] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.737556][ T4830] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.289 (4830) [ 65.747134][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 65.749417][ T4858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 65.751853][ T4858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.299'. [ 65.755362][ T4862] capability: warning: `syz.3.301' uses 32-bit capabilities (legacy support in use) [ 65.762919][ T4851] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.297: casefold flag without casefold feature [ 65.775924][ T4851] EXT4-fs (loop0): Remounting filesystem read-only [ 65.777714][ T4851] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.297: couldn't read orphan inode 15 (err -117) [ 65.796154][ T4830] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 65.798517][ T4830] BTRFS info (device loop4): using free space tree [ 65.800285][ T4830] BTRFS info (device loop4): has skinny extents [ 65.807892][ T4858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.299'. [ 65.824098][ T4851] EXT4-fs (loop0): Remounting filesystem read-only [ 65.825944][ T4851] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000004000000,nogrpid,. Quota mode: writeback. [ 65.988839][ T4887] loop1: detected capacity change from 0 to 512 [ 66.032509][ T4887] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.053236][ T4887] EXT4-fs (loop1): 1 truncate cleaned up [ 66.055474][ T4887] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 66.129260][ T4904] loop0: detected capacity change from 0 to 128 [ 66.151731][ T4830] BTRFS info (device loop4): enabling ssd optimizations [ 66.310257][ T4915] loop1: detected capacity change from 0 to 256 [ 66.552928][ T4927] usb usb8: usbfs: process 4927 (syz.0.324) did not claim interface 0 before use [ 66.667153][ T4935] loop3: detected capacity change from 0 to 1024 [ 66.865511][ T1599] hfsplus: b-tree write err: -5, ino 4 [ 66.967063][ T4953] 9p: Unknown uid 18446744073709551615 [ 67.026048][ T4956] loop1: detected capacity change from 0 to 1024 [ 67.103817][ T4956] fuse: Bad value for 'fd' [ 67.275844][ T4924] loop2: detected capacity change from 0 to 32768 [ 67.281091][ T4976] loop1: detected capacity change from 0 to 256 [ 67.298477][ T4924] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.321 (4924) [ 67.312294][ T4924] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 67.327353][ T4976] FAT-fs (loop1): Unrecognized mount option "un " or missing value [ 67.328451][ T4924] BTRFS info (device loop2): using free space tree [ 67.331459][ T4924] BTRFS info (device loop2): has skinny extents [ 67.538204][ T5007] cifs: Unknown parameter 'mode' [ 67.599652][ T4127] udevd[4127]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 67.603152][ T4924] BTRFS info (device loop2): enabling ssd optimizations [ 67.803524][ T4127] udevd[4127]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 68.282364][ T4976] loop1: detected capacity change from 0 to 32768 [ 68.309819][ T4976] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.346 (4976) [ 68.373683][ T4976] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 68.376238][ T4976] BTRFS info (device loop1): using free space tree [ 68.377960][ T4976] BTRFS info (device loop1): has skinny extents [ 68.605808][ T5033] loop3: detected capacity change from 0 to 32768 [ 68.620817][ T4976] BTRFS info (device loop1): enabling ssd optimizations [ 68.735602][ T5019] loop4: detected capacity change from 0 to 32768 [ 68.771008][ T5033] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 68.924944][ T5019] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 68.994912][ T5019] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 69.001836][ T5031] loop2: detected capacity change from 0 to 32768 [ 69.079730][ T5031] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 69.121840][ T5031] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 69.159568][ T5031] (syz.2.360,5031,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 69.209222][ T4037] ocfs2: Unmounting device (7,3) on (node local) [ 69.251793][ T4026] ocfs2: Unmounting device (7,2) on (node local) [ 69.312427][ T5072] loop3: detected capacity change from 0 to 256 [ 69.333485][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 69.422366][ T5072] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 69.627912][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.629871][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.637566][ T1534] cfg80211: failed to load regulatory.db [ 69.642345][ T5092] netlink: 'syz.0.378': attribute type 29 has an invalid length. [ 69.654566][ T5092] netlink: 'syz.0.378': attribute type 29 has an invalid length. [ 69.663091][ T5092] netlink: 'syz.0.378': attribute type 29 has an invalid length. [ 69.827681][ T5110] usb usb8: usbfs: process 5110 (syz.3.383) did not claim interface 0 before use [ 70.205313][ T5141] loop2: detected capacity change from 0 to 256 [ 70.296150][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 70.869048][ T5129] loop1: detected capacity change from 0 to 40427 [ 70.917472][ T5138] loop3: detected capacity change from 0 to 32768 [ 70.949516][ T5129] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 70.951704][ T5129] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 70.965910][ T5129] F2FS-fs (loop1): invalid crc value [ 71.006253][ T5138] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 71.008596][ T5138] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 71.017460][ T5129] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.066551][ T5129] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 71.068440][ T5129] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 71.092740][ T5138] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 71.114987][ T3608] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 71.116880][ T3608] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 71.249390][ T3608] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 132ms [ 71.258493][ T3608] gfs2: fsid=syz:syz.0: jid=0: Done [ 71.260554][ T5138] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 71.274956][ T4025] attempt to access beyond end of device [ 71.274956][ T4025] loop1: rw=2049, want=45104, limit=40427 [ 71.392656][ T5153] loop4: detected capacity change from 0 to 32768 [ 71.401679][ T5182] loop2: detected capacity change from 0 to 4096 [ 71.496920][ T5185] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.535145][ T5153] XFS (loop4): Mounting V5 Filesystem [ 71.609981][ T5153] XFS (loop4): Ending clean mount [ 71.680074][ T5138] gfs2: fsid=syz:syz.0: found 1 quota changes [ 71.692484][ T5153] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_cntbt block 0x10 [ 71.720174][ T5153] XFS (loop4): Unmount and run xfs_repair [ 71.721784][ T5153] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 71.732598][ T5153] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 71.743839][ T5153] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 71.754054][ T5153] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 71.756392][ T5153] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 71.760895][ T5153] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 71.763152][ T5153] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.777917][ T5194] loop1: detected capacity change from 0 to 256 [ 71.787688][ T5153] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.790231][ T5153] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.814183][ T5153] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 71.821984][ T5153] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x81c/0x12f4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 71.850305][ T5153] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 71.878961][ T4037] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 71.882885][ T4037] CPU: 1 PID: 4037 Comm: syz-executor Not tainted 5.15.179-syzkaller #0 [ 71.885097][ T4037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.887916][ T4037] Call trace: [ 71.888803][ T4037] dump_backtrace+0x0/0x530 [ 71.890046][ T4037] show_stack+0x2c/0x3c [ 71.891174][ T4037] dump_stack_lvl+0x108/0x170 [ 71.892482][ T4037] dump_stack+0x1c/0x58 [ 71.893633][ T4037] gfs2_assert_warn_i+0x16c/0x278 [ 71.894997][ T4037] gfs2_quota_cleanup+0x464/0x67c [ 71.896391][ T4037] gfs2_make_fs_ro+0x428/0x554 [ 71.897700][ T4037] gfs2_put_super+0x18c/0x684 [ 71.898941][ T4037] generic_shutdown_super+0x130/0x2f0 [ 71.900458][ T4037] kill_block_super+0x70/0xdc [ 71.901762][ T4037] gfs2_kill_sb+0xc0/0xd4 [ 71.902924][ T4037] deactivate_locked_super+0xb8/0x13c [ 71.904376][ T4037] deactivate_super+0x108/0x128 [ 71.905677][ T4037] cleanup_mnt+0x3c0/0x474 [ 71.906889][ T4037] __cleanup_mnt+0x20/0x30 [ 71.908091][ T4037] task_work_run+0x130/0x1e4 [ 71.909289][ T4037] do_notify_resume+0x262c/0x32b8 [ 71.910656][ T4037] el0_svc+0xfc/0x1f0 [ 71.911746][ T4037] el0t_64_sync_handler+0x84/0xe4 [ 71.913103][ T4037] el0t_64_sync+0x1a0/0x1a4 [ 71.918103][ T4033] XFS (loop4): Unmounting Filesystem [ 72.201735][ T5208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.429'. [ 72.529488][ T5214] loop3: detected capacity change from 0 to 512 [ 72.548644][ T5204] loop1: detected capacity change from 0 to 32768 [ 72.577992][ T5214] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 72.581994][ T5214] EXT4-fs (loop3): invalid journal inode [ 72.583606][ T5214] EXT4-fs (loop3): can't get journal size [ 72.621887][ T5214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c119, mo2=0002] [ 72.648255][ T5214] System zones: 1-12, 13-13 [ 72.651123][ T5204] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 72.669391][ T5214] EXT4-fs (loop3): 1 truncate cleaned up [ 72.670926][ T5214] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,debug,nombcache,,errors=continue. Quota mode: writeback. [ 72.884338][ T4025] ocfs2: Unmounting device (7,1) on (node local) [ 73.114538][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 73.209118][ T5216] loop4: detected capacity change from 0 to 32768 [ 73.277312][ T5216] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.428 (5216) [ 73.309875][ T5250] loop2: detected capacity change from 0 to 1024 [ 73.326237][ T5216] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 73.328641][ T5216] BTRFS info (device loop4): using free space tree [ 73.330399][ T5216] BTRFS info (device loop4): has skinny extents [ 73.363195][ T5250] EXT4-fs (loop2): Ignoring removed orlov option [ 73.381419][ T5250] EXT4-fs (loop2): Ignoring removed bh option [ 73.383094][ T5250] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 73.413885][ T5250] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,bh,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 73.591134][ T5216] BTRFS info (device loop4): enabling ssd optimizations [ 73.805646][ T5238] loop3: detected capacity change from 0 to 32768 [ 73.833328][ T5256] loop1: detected capacity change from 0 to 32768 [ 73.973434][ T5238] XFS (loop3): Mounting V5 Filesystem [ 73.979918][ T5256] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 74.052348][ T5238] XFS (loop3): Ending clean mount [ 74.094102][ T5238] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_cntbt block 0x10 [ 74.106913][ T5238] XFS (loop3): Unmount and run xfs_repair [ 74.118797][ T5238] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 74.131726][ T5256] (syz.1.447,5256,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 74.139836][ T5238] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 74.154156][ T5238] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 74.169437][ T5238] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 74.171831][ T5238] 00000030: 00 00 00 87 00 00 00 11 00 00 04 4e 00 00 00 02 ...........N.... [ 74.176327][ T5238] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 74.189039][ T5238] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 74.191414][ T5238] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 74.199233][ T5238] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 74.205347][ T5238] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x10 len 8 error 74 [ 74.217298][ T5303] loop2: detected capacity change from 0 to 512 [ 74.221944][ T4025] ocfs2: Unmounting device (7,1) on (node local) [ 74.251756][ T5238] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x81c/0x12f4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 74.256689][ T5238] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 74.299270][ T5303] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 74.302966][ T5303] EXT4-fs (loop2): 1 truncate cleaned up [ 74.314651][ T4037] XFS (loop3): Unmounting Filesystem [ 74.330045][ T5303] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000101,data_err=abort,,errors=continue. Quota mode: writeback. [ 74.575180][ T5315] sp0: Synchronizing with TNC [ 74.964105][ T5335] loop3: detected capacity change from 0 to 1024 [ 75.060634][ T5340] tap0: tun_chr_ioctl cmd 35108 [ 75.119625][ T5335] EXT4-fs (loop3): Ignoring removed orlov option [ 75.121418][ T5335] EXT4-fs (loop3): Ignoring removed bh option [ 75.123190][ T5335] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 75.214875][ T5335] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,bh,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 75.299192][ T5347] loop4: detected capacity change from 0 to 512 [ 75.335985][ T5347] EXT4-fs (loop4): Ignoring removed oldalloc option [ 75.347458][ T5349] loop2: detected capacity change from 0 to 512 [ 75.371056][ T5347] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 75.373152][ T5347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=80fc01c, mo2=0002] [ 75.384815][ T5347] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 75.418459][ T5347] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 75.420734][ T5347] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noinit_itable,noauto_da_alloc,noblock_validity,usrquota,oldalloc,jqfmt=vfsv0,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 75.460765][ T5349] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,dax=never,,errors=continue. Quota mode: writeback. [ 75.477605][ T5330] loop1: detected capacity change from 0 to 32768 [ 75.547005][ T5330] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.469 (5330) [ 75.550960][ T5347] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.476: dx entry: limit 65535 != root limit 120 [ 75.572503][ T5351] loop3: detected capacity change from 0 to 8192 [ 75.585061][ T5347] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.476: Corrupt directory, running e2fsck is recommended [ 75.588679][ T5347] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.476: path /91/file0: bad entry in directory: rec_len is smaller than minimal - offset=3, inode=4607, rec_len=0, size=1024 fake=0 [ 75.600206][ T5330] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 75.602619][ T5330] BTRFS info (device loop1): force clearing of disk cache [ 75.605824][ T5330] BTRFS info (device loop1): force zlib compression, level 3 [ 75.607751][ T5330] BTRFS info (device loop1): enabling auto defrag [ 75.609451][ T5330] BTRFS info (device loop1): setting nodatacow [ 75.611159][ T5330] BTRFS info (device loop1): max_inline at 0 [ 75.612803][ T5330] BTRFS info (device loop1): enabling disk space caching [ 75.635830][ T5351] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 75.638382][ T5351] REISERFS (device loop3): using ordered data mode [ 75.640492][ T5351] reiserfs: using flush barriers [ 75.642606][ T5330] BTRFS info (device loop1): disk space caching is enabled [ 75.651371][ T5351] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.660278][ T5330] BTRFS info (device loop1): has skinny extents [ 75.678817][ T5351] REISERFS (device loop3): checking transaction log (loop3) [ 75.720902][ T5360] Zero length message leads to an empty skb [ 76.096746][ T5351] REISERFS (device loop3): Using tea hash to sort names [ 76.098864][ T5351] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 76.128776][ T5330] BTRFS info (device loop1): enabling ssd optimizations [ 76.132220][ T5330] BTRFS info (device loop1): clearing free space tree [ 76.134522][ T5330] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.137162][ T5330] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.364579][ T5396] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 76.656772][ T5407] sctp: [Deprecated]: syz.4.495 (pid 5407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.656772][ T5407] Use struct sctp_sack_info instead [ 76.883014][ T5381] loop2: detected capacity change from 0 to 32768 [ 77.001473][ T5381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.484 (5381) [ 77.048640][ T5381] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 77.051144][ T5381] BTRFS info (device loop2): using free space tree [ 77.052853][ T5381] BTRFS info (device loop2): has skinny extents [ 77.106811][ T5431] loop3: detected capacity change from 0 to 1024 [ 77.213087][ T5431] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 77.243154][ T5419] loop4: detected capacity change from 0 to 32768 [ 77.268125][ T5431] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 77.275679][ T5381] BTRFS info (device loop2): enabling ssd optimizations [ 77.503164][ T5419] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 77.611516][ T5419] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 77.626874][ T5419] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 77.629515][ T5419] OCFS2: File system is now read-only. [ 77.630938][ T5419] (syz.4.499,5419,0):ocfs2_find_leaf:1933 ERROR: status = -30 [ 77.632901][ T5419] (syz.4.499,5419,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 77.722400][ T5419] (syz.4.499,5419,0):ocfs2_fiemap:776 ERROR: status = -30 [ 77.740357][ T5470] sctp: [Deprecated]: syz.1.510 (pid 5470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.740357][ T5470] Use struct sctp_sack_info instead [ 77.842741][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 78.024106][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.040100][ T5480] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 78.214095][ T25] usb 1-1: device descriptor read/64, error -71 [ 78.353925][ T5474] loop3: detected capacity change from 0 to 32768 [ 78.484160][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.674127][ T25] usb 1-1: device descriptor read/64, error -71 [ 78.794287][ T25] usb usb1-port1: attempt power cycle [ 78.923135][ T5499] loop1: detected capacity change from 0 to 32768 [ 78.951445][ T5495] loop4: detected capacity change from 0 to 40427 [ 78.965715][ T5497] loop2: detected capacity change from 0 to 40427 [ 78.992049][ T5499] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.524 (5499) [ 78.992366][ T5495] F2FS-fs (loop4): invalid crc value [ 79.005708][ T5499] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 79.008401][ T5499] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 79.010819][ T5499] BTRFS info (device loop1): use zstd compression, level 3 [ 79.012759][ T5497] F2FS-fs (loop2): invalid crc value [ 79.028109][ T5497] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.028350][ T5499] BTRFS info (device loop1): using free space tree [ 79.031572][ T5499] BTRFS info (device loop1): has skinny extents [ 79.045924][ T5495] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.074305][ T5497] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.078007][ T5495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.161785][ T4033] attempt to access beyond end of device [ 79.161785][ T4033] loop4: rw=2049, want=45104, limit=40427 [ 79.177540][ T4026] attempt to access beyond end of device [ 79.177540][ T4026] loop2: rw=2049, want=45104, limit=40427 [ 79.204218][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.294395][ T25] usb 1-1: device descriptor read/8, error -71 [ 79.345776][ T5499] BTRFS info (device loop1): enabling ssd optimizations [ 79.564252][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.600077][ T5537] loop4: detected capacity change from 0 to 512 [ 79.661674][ T25] usb 1-1: device descriptor read/8, error -71 [ 79.771005][ T5537] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 79.774035][ T5537] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 79.774484][ T25] usb usb1-port1: unable to enumerate USB device [ 79.777721][ T5537] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 79.783169][ T5537] EXT4-fs (loop4): 1 truncate cleaned up [ 79.794227][ T5537] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,data_err=abort,noinit_itable,nouid32,grpjquota=.,errors=continue. Quota mode: writeback. [ 79.875371][ T5537] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 80.312695][ T5583] loop4: detected capacity change from 0 to 1024 [ 80.361428][ T5583] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 80.393810][ T5583] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 80.919522][ T5580] loop3: detected capacity change from 0 to 32768 [ 80.991516][ T5580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.548 (5580) [ 81.044949][ T5580] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 81.054330][ T5580] BTRFS info (device loop3): using free space tree [ 81.056148][ T5580] BTRFS info (device loop3): has skinny extents [ 81.448432][ T5614] loop4: detected capacity change from 0 to 32768 [ 81.472439][ T5580] BTRFS info (device loop3): enabling ssd optimizations [ 81.572601][ T5665] loop2: detected capacity change from 0 to 512 [ 81.596039][ T5614] XFS (loop4): Mounting V5 Filesystem [ 81.660517][ T5665] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=856c01c, mo2=0002] [ 81.663448][ T5665] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.710258][ T5665] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 81.715664][ T5665] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 81.731434][ T5614] XFS (loop4): Ending clean mount [ 81.734801][ T5665] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.576: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 81.830220][ T5665] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.576: couldn't read orphan inode 13 (err -117) [ 81.838822][ T5665] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,debug,grpquota,debug,noinit_itable,grpid,,errors=continue. Quota mode: writeback. [ 81.896226][ T5665] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.576: inode #15: comm syz.2.576: iget: illegal inode # [ 81.916063][ T5665] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 81.929879][ T5685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.583'. [ 81.949005][ T5665] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=856c01c, mo2=0002] [ 81.969055][ T4033] XFS (loop4): Unmounting Filesystem [ 82.000229][ T5665] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 82.097156][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 82.152280][ T5699] netlink: 'syz.3.592': attribute type 11 has an invalid length. [ 82.163319][ T5699] netlink: 60 bytes leftover after parsing attributes in process `syz.3.592'. [ 82.262610][ T5705] input: syz0 as /devices/virtual/input/input2 [ 82.410670][ T5710] sp0: Synchronizing with TNC [ 82.457594][ T5713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.599'. [ 82.578781][ T5721] loop3: detected capacity change from 0 to 2048 [ 82.626088][ T5721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.950892][ T5744] netlink: 32 bytes leftover after parsing attributes in process `syz.3.611'. [ 83.217894][ T5714] loop2: detected capacity change from 0 to 32768 [ 83.294757][ T5714] XFS (loop2): Mounting V5 Filesystem [ 83.475031][ T5714] XFS (loop2): Ending clean mount [ 83.592797][ T4026] XFS (loop2): Unmounting Filesystem [ 83.715512][ T4071] kernel read not supported for file /dsp (pid: 4071 comm: kworker/0:6) [ 83.768979][ T5776] input: syz0 as /devices/virtual/input/input3 [ 84.216868][ T26] audit: type=1326 audit(84.190:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.1.632" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffab2cdd28 code=0x0 [ 84.489625][ T5814] loop4: detected capacity change from 0 to 4096 [ 84.510651][ T5816] tun0: tun_chr_ioctl cmd 1074812118 [ 84.846254][ T5798] loop2: detected capacity change from 0 to 32768 [ 84.891024][ T5834] tipc: Trying to set illegal importance in message [ 84.893927][ T5833] loop4: detected capacity change from 0 to 1024 [ 84.929518][ T5835] serio: Serial port ttynull [ 85.066098][ T136] hfsplus: b-tree write err: -5, ino 8 [ 85.190340][ T5844] loop2: detected capacity change from 0 to 2048 [ 85.262598][ T5844] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 85.521360][ T5848] loop4: detected capacity change from 0 to 40427 [ 85.590911][ T5848] F2FS-fs (loop4): inline encryption not supported [ 85.597232][ T5848] F2FS-fs (loop4): invalid crc value [ 85.598426][ T5870] loop3: detected capacity change from 0 to 1024 [ 85.622262][ T5848] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.677970][ T5848] F2FS-fs (loop4): Start checkpoint disabled! [ 85.703796][ T5871] loop1: detected capacity change from 0 to 4096 [ 85.717483][ T5848] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 85.754754][ T5848] attempt to access beyond end of device [ 85.754754][ T5848] loop4: rw=2049, want=45104, limit=40427 [ 85.757030][ T136] hfsplus: b-tree write err: -5, ino 8 [ 85.827627][ T5881] loop3: detected capacity change from 0 to 512 [ 85.846184][ T431] attempt to access beyond end of device [ 85.846184][ T431] loop4: rw=2049, want=40976, limit=40427 [ 85.865684][ T5881] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 85.893338][ T5881] EXT2-fs (loop3): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 85.916416][ T5881] EXT2-fs (loop3): error: ext2_get_inode: bad inode number: 15 [ 85.923351][ T5881] EXT2-fs (loop3): error: ext2_fsync: detected IO error when writing metadata buffers [ 85.945656][ T5881] EXT2-fs (loop3): error: ext2_new_inode: reserved inode or inode > inodes count - block_group = 0,inode=18 [ 85.953733][ T4025] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 85.959832][ T4025] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 86.285839][ T5895] loop1: detected capacity change from 0 to 512 [ 86.308381][ T5900] loop3: detected capacity change from 0 to 512 [ 86.324339][ T5900] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 86.396476][ T5895] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.676: invalid indirect mapped block 10 (level 1) [ 86.403072][ T5900] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.678: invalid indirect mapped block 10 (level 1) [ 86.415360][ T5895] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.676: invalid indirect mapped block 8 (level 1) [ 86.419388][ T5900] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.678: invalid indirect mapped block 8 (level 1) [ 86.425429][ T5895] EXT4-fs (loop1): 1 truncate cleaned up [ 86.426923][ T5895] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.433264][ T5900] EXT4-fs (loop3): 1 truncate cleaned up [ 86.443129][ T5900] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 86.775885][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 86.795421][ T5926] loop1: detected capacity change from 0 to 4096 [ 87.439862][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.714'. [ 87.442682][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.714'. [ 87.443261][ T5976] loop4: detected capacity change from 0 to 256 [ 87.487442][ T5978] device erspan0 entered promiscuous mode [ 87.499299][ T5976] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 87.538988][ T5978] device erspan0 left promiscuous mode [ 87.734390][ T5990] loop4: detected capacity change from 0 to 512 [ 87.792557][ T5990] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.719: attempt to clear invalid blocks 2 len 1 [ 87.800891][ T5990] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 87.833533][ T5990] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.719: invalid indirect mapped block 1819239214 (level 0) [ 87.837226][ T5997] loop2: detected capacity change from 0 to 4096 [ 87.848436][ T5990] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.719: invalid indirect mapped block 1819239214 (level 1) [ 87.860656][ T5990] EXT4-fs (loop4): 1 truncate cleaned up [ 87.862950][ T5990] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 87.895544][ T5990] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.719: Unrecognised inode hash code 20 [ 87.899754][ T5990] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.719: Corrupt directory, running e2fsck is recommended [ 87.903507][ T5990] EXT4-fs error (device loop4): __ext4_iget:4872: inode #12: block 2: comm syz.4.719: invalid block [ 88.049706][ T4026] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 88.051510][ T4026] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 88.291627][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 88.292261][ T6007] loop4: detected capacity change from 0 to 8192 [ 88.410678][ T6007] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 88.413512][ T6007] REISERFS (device loop4): using ordered data mode [ 88.419408][ T6007] reiserfs: using flush barriers [ 88.454119][ T6007] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.477299][ T6007] REISERFS (device loop4): checking transaction log (loop4) [ 88.480958][ T6007] REISERFS (device loop4): Using r5 hash to sort names [ 88.483023][ T6007] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 88.501097][ T6007] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 88.582298][ T6029] loop2: detected capacity change from 0 to 512 [ 88.639066][ T6029] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 88.970224][ T6041] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 88.972288][ T6041] netdevsim netdevsim1 netdevsim0: Failed to get key data for SA table [ 89.131480][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.752'. [ 89.173105][ T6070] loop3: detected capacity change from 0 to 256 [ 89.201724][ T6072] loop2: detected capacity change from 0 to 1024 [ 89.242955][ T6070] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 89.457707][ T6075] process 'syz.0.757' launched './file1' with NULL argv: empty string added [ 89.567919][ T6085] loop2: detected capacity change from 0 to 256 [ 89.631529][ T6085] exfat: Deprecated parameter 'namecase' [ 89.633369][ T6085] exfat: Deprecated parameter 'namecase' [ 89.670905][ T6083] loop3: detected capacity change from 0 to 8192 [ 89.692942][ T6085] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 89.732998][ T6083] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 89.740684][ T6083] REISERFS (device loop3): using ordered data mode [ 89.746990][ T6083] reiserfs: using flush barriers [ 89.760914][ T6083] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 89.777009][ T6083] REISERFS (device loop3): checking transaction log (loop3) [ 90.096757][ T5405] kernel read not supported for file /dsp (pid: 5405 comm: kworker/1:16) [ 90.141790][ T6083] REISERFS (device loop3): Using tea hash to sort names [ 90.146274][ T6083] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 90.834764][ T6121] tun0: tun_chr_ioctl cmd 1074025681 [ 90.838767][ T6119] [U]  [ 90.839880][ T6119] [U] [ 90.840658][ T6119] [U] [ 90.841353][ T6119] [U] [ 90.842023][ T6119] [U] [ 90.842776][ T6119] [U] [ 90.843480][ T6119] [U] [ 90.844211][ T6119] [U] [ 90.854267][ T6119] [U] [ 90.855028][ T6119] [U] [ 90.855749][ T6119] [U] [ 90.881863][ T6117] [U] [ 91.127340][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 91.181828][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 91.341206][ T6099] loop1: detected capacity change from 0 to 65536 [ 91.432515][ T6099] XFS (loop1): Mounting V5 Filesystem [ 91.504156][ T4131] kernel read not supported for file /dsp (pid: 4131 comm: kworker/0:7) [ 91.519761][ T6099] XFS (loop1): Ending clean mount [ 91.529852][ T6099] XFS (loop1): Quotacheck needed: Please wait. [ 91.567907][ T6099] XFS (loop1): Quotacheck: Done. [ 91.714034][ T4025] XFS (loop1): Unmounting Filesystem [ 91.828713][ T6174] loop4: detected capacity change from 0 to 512 [ 91.883536][ T6179] netlink: 'syz.3.803': attribute type 4 has an invalid length. [ 91.894110][ T6179] netlink: 'syz.3.803': attribute type 2 has an invalid length. [ 91.909690][ T6174] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 91.972171][ T6181] tun0: tun_chr_ioctl cmd 1074025681 [ 92.155594][ T6187] loop2: detected capacity change from 0 to 256 [ 92.224644][ T6187] FAT-fs (loop2): Directory bread(block 1285) failed [ 92.278795][ T6187] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 92.340490][ T6195] loop3: detected capacity change from 0 to 512 [ 92.401770][ T6195] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.485358][ T6195] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 92.489260][ T6195] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.812: attempt to clear invalid blocks 2 len 1 [ 92.504718][ T6195] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 92.509084][ T6195] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.812: invalid indirect mapped block 1819239214 (level 0) [ 92.593476][ T6195] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.812: invalid indirect mapped block 1819239214 (level 1) [ 92.602376][ T6195] EXT4-fs (loop3): 1 truncate cleaned up [ 92.610607][ T6195] EXT4-fs (loop3): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 92.628548][ T6197] loop4: detected capacity change from 0 to 32768 [ 92.664552][ T6195] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.668600][ T6195] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 92.699497][ T6197] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 92.754398][ T6197] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 92.759166][ T6197] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 92.761779][ T6197] OCFS2: File system is now read-only. [ 92.862132][ T6197] (syz.4.814,6197,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 92.892794][ T6214] loop2: detected capacity change from 0 to 1024 [ 92.892855][ T6197] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 92.912201][ T6197] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 92.927930][ T6197] (syz.4.814,6197,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 92.930043][ T6197] (syz.4.814,6197,1):ocfs2_mknod:502 ERROR: status = -30 [ 92.931933][ T6197] (syz.4.814,6197,1):ocfs2_create:676 ERROR: status = -30 [ 92.948507][ T6217] netlink: 'syz.3.820': attribute type 4 has an invalid length. [ 92.979155][ T6220] loop3: detected capacity change from 0 to 512 [ 92.982353][ T6210] OCFS2: ERROR (device loop4): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 92.988617][ T6210] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 92.991440][ T6210] (syz.4.814,6210,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 93.014409][ T6220] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 93.061330][ T4033] ocfs2: Unmounting device (7,4) on (node local) [ 93.114104][ T6213] hfsplus: invalid extended attribute record [ 93.164514][ T293] hfsplus: b-tree write err: -5, ino 4 [ 93.492140][ T6242] loop4: detected capacity change from 0 to 16 [ 93.563529][ T6242] erofs: (device loop4): mounted with root inode @ nid 36. [ 93.697253][ T4033] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 93.708471][ T4033] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 93.717984][ T4033] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 93.960835][ T6280] loop4: detected capacity change from 0 to 256 [ 94.005279][ T6280] exfat: Deprecated parameter 'namecase' [ 94.030307][ T6280] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 94.051980][ T6284] loop1: detected capacity change from 0 to 16 [ 94.091479][ T6284] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.181417][ T4025] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46 [ 94.216452][ T4025] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 94.219184][ T4025] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 94.318872][ T6299] loop1: detected capacity change from 0 to 512 [ 94.360137][ T6299] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.364999][ T6294] loop3: detected capacity change from 0 to 4096 [ 94.404860][ T6299] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 94.420577][ T6299] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.857: attempt to clear invalid blocks 2 len 1 [ 94.435449][ T6294] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 94.463004][ T6299] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 94.473157][ T6299] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.857: invalid indirect mapped block 1819239214 (level 0) [ 94.476269][ T6294] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 94.485353][ T6299] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.857: invalid indirect mapped block 1819239214 (level 1) [ 94.490453][ T6299] EXT4-fs (loop1): 1 truncate cleaned up [ 94.492351][ T6299] EXT4-fs (loop1): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 94.497757][ T6294] ntfs3: loop3: Failed to load $Extend. [ 94.521046][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 94.523288][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 94.588072][ T6299] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.592861][ T6299] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 94.620717][ T6316] loop4: detected capacity change from 0 to 1024 [ 94.657147][ T6316] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 94.660182][ T6316] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 94.692543][ T6316] EXT4-fs (loop4): invalid journal inode [ 94.711953][ T6316] EXT4-fs (loop4): can't get journal size [ 94.723452][ T6316] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 94.733420][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.736811][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.006407][ T6341] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 95.097434][ T6342] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 95.142770][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 95.182268][ T6350] loop3: detected capacity change from 0 to 1024 [ 95.319601][ T6349] hfsplus: invalid extended attribute record [ 95.363805][ T293] hfsplus: b-tree write err: -5, ino 4 [ 95.492453][ T6326] loop1: detected capacity change from 0 to 32768 [ 95.504620][ T6362] loop2: detected capacity change from 0 to 2048 [ 95.578165][ T6326] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.868 (6326) [ 95.616516][ T6326] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 95.619215][ T6326] BTRFS info (device loop1): using free space tree [ 95.620893][ T6326] BTRFS info (device loop1): has skinny extents [ 95.655412][ T6371] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.853193][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.893'. [ 95.925963][ T6326] BTRFS info (device loop1): enabling ssd optimizations [ 96.007138][ T6401] loop2: detected capacity change from 0 to 512 [ 96.055432][ T6404] block nbd0: shutting down sockets [ 96.057577][ T6399] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 96.086504][ T6401] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.150503][ T6401] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 96.153758][ T6401] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.895: attempt to clear invalid blocks 2 len 1 [ 96.248849][ T6401] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 96.282311][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.284700][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.318748][ T6401] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.895: invalid indirect mapped block 1819239214 (level 0) [ 96.330353][ T6401] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.895: invalid indirect mapped block 1819239214 (level 1) [ 96.337695][ T6401] EXT4-fs (loop2): 1 truncate cleaned up [ 96.339293][ T6401] EXT4-fs (loop2): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 96.391761][ T6401] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.406447][ T6401] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 96.624332][ T6437] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 96.810227][ T6450] netlink: 'syz.4.928': attribute type 4 has an invalid length. [ 96.812430][ T6450] netlink: 'syz.4.928': attribute type 5 has an invalid length. [ 96.939405][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.941607][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.212422][ T6462] loop4: detected capacity change from 0 to 2048 [ 97.265203][ T6462] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 97.267338][ T6462] UDF-fs: Scanning with blocksize 512 failed [ 97.272563][ T6432] loop2: detected capacity change from 0 to 40427 [ 97.284230][ T6462] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.404954][ T6432] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 97.407499][ T6432] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 97.459648][ T6432] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.541105][ T6432] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 97.542935][ T6432] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.707872][ T6484] loop4: detected capacity change from 0 to 512 [ 97.814850][ T6484] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.881337][ T6497] loop1: detected capacity change from 0 to 256 [ 98.002085][ T6501] loop3: detected capacity change from 0 to 2048 [ 98.117517][ T6510] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.237727][ T6487] chnl_net:caif_netlink_parms(): no params data found [ 98.294088][ T6524] loop1: detected capacity change from 0 to 16 [ 98.296417][ T6524] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 98.396154][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.401346][ T6526] device batadv_slave_0 entered promiscuous mode [ 98.489459][ T6535] loop1: detected capacity change from 0 to 128 [ 98.562220][ T6535] futex_wake_op: syz.1.956 tries to shift op by 32; fix this program [ 98.675958][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.678042][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.680645][ T6487] device bridge_slave_0 entered promiscuous mode [ 98.709355][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.711544][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.720187][ T6487] device bridge_slave_1 entered promiscuous mode [ 98.758038][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.785903][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.855954][ T6487] team0: Port device team_slave_0 added [ 98.860227][ T6487] team0: Port device team_slave_1 added [ 98.867274][ T6558] loop2: detected capacity change from 0 to 512 [ 98.911406][ T6563] loop4: detected capacity change from 0 to 512 [ 98.911549][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.920810][ T6558] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 98.937449][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.952434][ T6558] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,nogrpid,nogrpid,,errors=continue. Quota mode: none. [ 98.964542][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.973910][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.989281][ T6563] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.010699][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.017726][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.045656][ T6563] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.968: bg 0: block 248: padding at end of block bitmap is not set [ 99.074043][ T6564] loop1: detected capacity change from 0 to 4096 [ 99.082501][ T6563] Quota error (device loop4): write_blk: dquota write failed [ 99.097458][ T6563] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 99.100301][ T6563] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.968: Failed to acquire dquot type 1 [ 99.112172][ T6563] EXT4-fs (loop4): 1 truncate cleaned up [ 99.114687][ T6563] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.128256][ T6487] device hsr_slave_0 entered promiscuous mode [ 99.129878][ T6564] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 99.133445][ T6563] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 99.137749][ T6564] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 99.159388][ T6487] device hsr_slave_1 entered promiscuous mode [ 99.166762][ T6564] ntfs: volume version 3.1. [ 99.168063][ T6564] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 99.170768][ T6564] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 99.172825][ T6564] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 99.175091][ T6563] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 99.184085][ T6487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.186131][ T6487] Cannot create hsr debugfs directory [ 99.187736][ T6570] netlink: 'syz.3.971': attribute type 10 has an invalid length. [ 99.202519][ T6564] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 99.214472][ T6564] ntfs: (device loop1): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported. Sorry. [ 99.215272][ T6563] Quota error (device loop4): find_block_dqentry: Quota for id 131072 referenced but not present [ 99.226440][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.246327][ T6570] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.249528][ T6563] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.968: Failed to acquire dquot type 1 [ 99.256668][ T6571] netlink: 'syz.3.971': attribute type 10 has an invalid length. [ 99.287990][ T6571] bond0: (slave team0): Releasing backup interface [ 99.328958][ T6571] bridge0: port 3(team0) entered blocking state [ 99.333616][ T6571] bridge0: port 3(team0) entered disabled state [ 99.337761][ T6571] device team0 entered promiscuous mode [ 99.339394][ T6571] device team_slave_0 entered promiscuous mode [ 99.341819][ T6571] device team_slave_1 entered promiscuous mode [ 99.490117][ T6582] input: syz1 as /devices/virtual/input/input4 [ 99.508804][ T6585] loop1: detected capacity change from 0 to 128 [ 99.552373][ T6585] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.559813][ T6585] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.699670][ T6487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.721596][ T1855] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.864329][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 99.990578][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.993443][ T6594] device batadv_slave_0 entered promiscuous mode [ 100.037321][ T6576] loop2: detected capacity change from 0 to 32768 [ 100.097177][ T6487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.169239][ T6576] [ 100.169239][ T6576] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.169239][ T6576] [ 100.267912][ T6608] tun0: tun_chr_ioctl cmd 2147767520 [ 100.277247][ T9] [ 100.277247][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.277247][ T9] [ 100.281541][ T9] [ 100.281541][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.281541][ T9] [ 100.281793][ T6487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.290758][ T4026] [ 100.290758][ T4026] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.290758][ T4026] [ 100.299064][ T240] [ 100.299064][ T240] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.299064][ T240] [ 100.303066][ T4026] [ 100.303066][ T4026] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.303066][ T4026] [ 100.314742][ T240] ================================================================== [ 100.317309][ T240] BUG: KASAN: use-after-free in jfs_lazycommit+0x658/0xa40 [ 100.319289][ T240] Read of size 4 at addr ffff0000cefbd694 by task jfsCommit/240 [ 100.321401][ T240] [ 100.322050][ T240] CPU: 0 PID: 240 Comm: jfsCommit Not tainted 5.15.179-syzkaller #0 [ 100.324263][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.327186][ T240] Call trace: [ 100.328112][ T240] dump_backtrace+0x0/0x530 [ 100.329312][ T240] show_stack+0x2c/0x3c [ 100.330435][ T240] dump_stack_lvl+0x108/0x170 [ 100.331690][ T240] print_address_description+0x7c/0x3f0 [ 100.333221][ T240] kasan_report+0x174/0x1e4 [ 100.334482][ T240] __asan_report_load4_noabort+0x44/0x50 [ 100.336026][ T240] jfs_lazycommit+0x658/0xa40 [ 100.337307][ T240] kthread+0x37c/0x45c [ 100.338456][ T240] ret_from_fork+0x10/0x20 [ 100.339691][ T240] [ 100.340289][ T240] Allocated by task 6576: [ 100.341472][ T240] ____kasan_kmalloc+0xbc/0xfc [ 100.342859][ T240] __kasan_kmalloc+0x10/0x1c [ 100.344213][ T240] kmem_cache_alloc_trace+0x27c/0x47c [ 100.345812][ T240] jfs_fill_super+0x108/0xa08 [ 100.347109][ T240] mount_bdev+0x274/0x370 [ 100.348330][ T240] jfs_do_mount+0x44/0x58 [ 100.349452][ T240] legacy_get_tree+0xd4/0x16c [ 100.350749][ T240] vfs_get_tree+0x90/0x274 [ 100.351965][ T240] do_new_mount+0x278/0x8fc [ 100.353221][ T240] path_mount+0x594/0x101c [ 100.354434][ T240] __arm64_sys_mount+0x510/0x5e0 [ 100.355816][ T240] invoke_syscall+0x98/0x2b8 [ 100.357092][ T240] el0_svc_common+0x138/0x258 [ 100.358372][ T240] do_el0_svc+0x58/0x14c [ 100.359616][ T240] el0_svc+0x7c/0x1f0 [ 100.360732][ T240] el0t_64_sync_handler+0x84/0xe4 [ 100.362144][ T240] el0t_64_sync+0x1a0/0x1a4 [ 100.363482][ T240] [ 100.364106][ T240] Freed by task 4026: [ 100.365224][ T240] kasan_set_track+0x4c/0x84 [ 100.366505][ T240] kasan_set_free_info+0x28/0x4c [ 100.367887][ T240] ____kasan_slab_free+0x118/0x164 [ 100.369328][ T240] __kasan_slab_free+0x18/0x28 [ 100.370693][ T240] slab_free_freelist_hook+0x128/0x1ec [ 100.372209][ T240] kfree+0x178/0x410 [ 100.373254][ T240] jfs_put_super+0x144/0x188 [ 100.374490][ T240] generic_shutdown_super+0x130/0x2f0 [ 100.375997][ T240] kill_block_super+0x70/0xdc [ 100.377313][ T240] deactivate_locked_super+0xb8/0x13c [ 100.378881][ T240] deactivate_super+0x108/0x128 [ 100.380268][ T240] cleanup_mnt+0x3c0/0x474 [ 100.381606][ T240] __cleanup_mnt+0x20/0x30 [ 100.382839][ T240] task_work_run+0x130/0x1e4 [ 100.384174][ T240] do_notify_resume+0x262c/0x32b8 [ 100.385532][ T240] el0_svc+0xfc/0x1f0 [ 100.386640][ T240] el0t_64_sync_handler+0x84/0xe4 [ 100.388039][ T240] el0t_64_sync+0x1a0/0x1a4 [ 100.389310][ T240] [ 100.389951][ T240] Last potentially related work creation: [ 100.391702][ T240] kasan_save_stack+0x38/0x68 [ 100.393002][ T240] kasan_record_aux_stack+0xd4/0x11c [ 100.394474][ T240] insert_work+0x64/0x394 [ 100.395631][ T240] __queue_work+0xb84/0x114c [ 100.396881][ T240] queue_work_on+0xc4/0x17c [ 100.398152][ T240] addr_event+0x300/0x3f8 [ 100.399411][ T240] inet6addr_event+0xf8/0x160 [ 100.400730][ T240] atomic_notifier_call_chain+0x174/0x2a0 [ 100.402327][ T240] inet6addr_notifier_call_chain+0x30/0x40 [ 100.403935][ T240] ipv6_add_addr+0x8e4/0xb30 [ 100.405246][ T240] inet6_addr_add+0x378/0x81c [ 100.406505][ T240] inet6_rtm_newaddr+0x6c0/0x1e28 [ 100.407925][ T240] rtnetlink_rcv_msg+0xa7c/0xdb4 [ 100.409302][ T240] netlink_rcv_skb+0x20c/0x3b8 [ 100.410696][ T240] rtnetlink_rcv+0x28/0x38 [ 100.411977][ T240] netlink_unicast+0x664/0x938 [ 100.413349][ T240] netlink_sendmsg+0x844/0xb38 [ 100.414734][ T240] __sys_sendto+0x388/0x4d0 [ 100.416028][ T240] __arm64_sys_sendto+0xd8/0xf8 [ 100.417423][ T240] invoke_syscall+0x98/0x2b8 [ 100.418705][ T240] el0_svc_common+0x138/0x258 [ 100.419971][ T240] do_el0_svc+0x58/0x14c [ 100.421186][ T240] el0_svc+0x7c/0x1f0 [ 100.422361][ T240] el0t_64_sync_handler+0x84/0xe4 [ 100.423791][ T240] el0t_64_sync+0x1a0/0x1a4 [ 100.425042][ T240] [ 100.425672][ T240] The buggy address belongs to the object at ffff0000cefbd600 [ 100.425672][ T240] which belongs to the cache kmalloc-256 of size 256 [ 100.429600][ T240] The buggy address is located 148 bytes inside of [ 100.429600][ T240] 256-byte region [ffff0000cefbd600, ffff0000cefbd700) [ 100.433435][ T240] The buggy address belongs to the page: [ 100.435077][ T240] page:000000000f20f3fd refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10efbc [ 100.437887][ T240] head:000000000f20f3fd order:1 compound_mapcount:0 [ 100.439750][ T240] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 100.441938][ T240] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002480 [ 100.444301][ T240] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 100.446773][ T240] page dumped because: kasan: bad access detected [ 100.448545][ T240] [ 100.449195][ T240] Memory state around the buggy address: [ 100.450770][ T240] ffff0000cefbd580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.452974][ T240] ffff0000cefbd600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.455182][ T240] >ffff0000cefbd680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.457312][ T240] ^ [ 100.458615][ T240] ffff0000cefbd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.460887][ T240] ffff0000cefbd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.463150][ T240] ================================================================== [ 100.465367][ T240] Disabling lock debugging due to kernel taint [ 100.467108][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.525778][ T6487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.749738][ T6487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.792988][ T6487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.840701][ T6487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.881436][ T6487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.982187][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.988922][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.992220][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.000119][ T6487] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.030386][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.032996][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.037470][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.039504][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.041899][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.052240][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.055545][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.057439][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.059660][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.062348][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.064107][ T1599] wlan0: Trigger new scan to find an IBSS to join [ 101.065203][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.068678][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.084287][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.086784][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.089487][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.092189][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.099725][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.102332][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.108271][ T6487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.111488][ T6487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.118107][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.120788][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.182758][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.185762][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.194434][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.206225][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.210038][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.270027][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.272711][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.276682][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.279154][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.283368][ T6487] device veth0_vlan entered promiscuous mode [ 101.290061][ T6487] device veth1_vlan entered promiscuous mode [ 101.303863][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.308200][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.310767][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.313431][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.347634][ T6487] device veth0_macvtap entered promiscuous mode [ 101.351521][ T6487] device veth1_macvtap entered promiscuous mode [ 101.361239][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.364093][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.366681][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.369429][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.372084][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.374954][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.378468][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.381864][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.390943][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.394801][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.397570][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.401193][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.403879][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.406702][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.409533][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.412046][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.414784][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.417357][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.420159][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.422884][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.425695][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.429190][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.481324][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.483951][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.488604][ T6487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.491000][ T6487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.493172][ T6487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.496115][ T6487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.558246][ T136] device hsr_slave_0 left promiscuous mode [ 101.594301][ T136] device hsr_slave_1 left promiscuous mode [ 101.684342][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.686592][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.689033][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.691053][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.693394][ T136] device bridge_slave_1 left promiscuous mode [ 101.695188][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.735299][ T136] device bridge_slave_0 left promiscuous mode [ 101.737106][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.854454][ T136] device veth1_macvtap left promiscuous mode [ 101.856137][ T136] device veth0_macvtap left promiscuous mode [ 101.857816][ T136] device veth1_vlan left promiscuous mode [ 101.859392][ T136] device veth0_vlan left promiscuous mode [ 101.944313][ T4071] Bluetooth: hci3: command 0x041b tx timeout [ 102.032772][ T136] team0 (unregistering): Port device team_slave_1 removed [ 102.042218][ T136] team0 (unregistering): Port device team_slave_0 removed [ 102.049504][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.099589][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.220188][ T136] bond0 (unregistering): Released all slaves [ 102.332381][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.338090][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.348846][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.360245][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.362432][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.365955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.024064][ T1962] Bluetooth: hci3: command 0x040f tx timeout [ 104.114164][ T1599] wlan0: Trigger new scan to find an IBSS to join [ 106.104301][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 107.064604][ T1855] wlan0: Creating new IBSS network, BSSID 7a:2f:44:b6:9c:ff