last executing test programs: 2m10.63875912s ago: executing program 0 (id=2103): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2}}, @common=@inet=@socket2={{0x28}, 0xe}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 2m10.513640901s ago: executing program 0 (id=2106): syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x0, 0x5, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "e395a7908654260b51bc65bae74680718d7c277d5eb94163220fc6934f52bb98", "e21c819d094ad2605cb8d17e43c56dc0630d11803cd88e6d2a647363697b0b8193966bf8e5d1853f82b5d0b34a718773", "c11a5ab9e0caff5c9d4a413be75c57041850bc671f4d9cd61afbdc71", {"a06ca6aa31b68e81f21970335e08c04f", "d7bbf6930e7615243cfd08ebd9c3e59b"}}}}}}}, 0x0) 2m10.440713341s ago: executing program 0 (id=2108): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x20400, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000200)=@l={0x92, 0xf, 0xd0, 0x1e, 0x7, 0x5, 0x7c3}) 2m10.362036072s ago: executing program 0 (id=2111): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@nombcache}, {@nodelalloc}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x2, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@volatile}, {@uuid_on}], [], 0x2c}) 2m9.722877344s ago: executing program 0 (id=2127): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x6}, {0x2, 0x8000}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001f40)=""/4098, 0x38, 0x1002, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2m8.760041739s ago: executing program 0 (id=2153): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1411, 0x201, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x0) 2m8.663963159s ago: executing program 32 (id=2153): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1411, 0x201, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x0) 1m4.780819923s ago: executing program 3 (id=3978): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m4.682184333s ago: executing program 3 (id=3983): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}]}}}]}, 0x44}}, 0x0) 1m4.574221693s ago: executing program 3 (id=3986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000304200000000000000000000400", @ANYBLOB="0100000000000000280012800a000100767863616e00000018000280140001000000f6ff", @ANYRES32, @ANYBLOB='\x00\b\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) 1m4.460181824s ago: executing program 3 (id=3989): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000080)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550d0f4f5c89b1a33dd47ded539aef131d50bbd556a368015804dde00b"], 0x1, 0x610a, &(0x7f000000c640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 1m3.419261989s ago: executing program 3 (id=4019): r0 = socket(0x2a, 0x2, 0x0) bind$can_raw(r0, &(0x7f00000007c0), 0x10) 1m2.684647822s ago: executing program 3 (id=4031): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834742313288b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"}) 1m2.426458103s ago: executing program 33 (id=4031): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834742313288b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"}) 17.124815202s ago: executing program 1 (id=5234): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x28, 0x5e, 0x601, 0x0, 0x0, "", [@typed={0x18, 0x3b, 0x0, 0x0, @str='memory_recursiveprot'}]}, 0x28}], 0x1}, 0x0) 17.022524822s ago: executing program 1 (id=5237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc0046209, 0xfffffffffffffffe) 16.940504762s ago: executing program 1 (id=5242): capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) setresgid(0xee00, 0x0, 0xee00) 16.839286533s ago: executing program 1 (id=5246): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000001c0)={[{@barrier}, {@type={'type', 0x3d, "e2c0d942"}}, {@force}, {}, {@nodecompose}, {@force}, {@nls={'nls', 0x3d, 'cp949'}}]}, 0x1, 0x6e4, &(0x7f0000000200)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREQQj5UKBKXXk3iNFbWbmRvkRMhsgUKRzihHHooQubQE+oBqYgDIpyRkLii3CNxjziwaGZn1rtre72b+CcJzyON55uZ7+ed1zOfd2cTbQD/txbficlWJLF47u3NdPvBVr3xYKu+WpQjYioiShHlziqStYjkfsTl6CzxuXRn3l2y1zhvPfzso7P3Pql3tsr5ktUvDWu3rT1khFa+xGxETOTrMZX36u/qLv3dHavrpBt3mrAzReLguLV3aI3TfIT7Fnja3Y2YmNxlfy3iRERM568DIp8dSkcc3oEba5YDAACAp9PEfhVefBSPYjNmjiYcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeD4kne8MTPKlVJRnIym+/7+S70tVKscc73Bf2ef4h9ePKBAAAAAAAAAAOBSf5h/cn34Uj2IzZor97ST7zP+NbONk9vOFeD82YjnW43xsxlI0oxnrMR8xOdPTYWVzqdlcn9/Z8jeRtmy323fzlgsRUdvRcuEIThoAAAAAAAAAnl8/jcWYOe4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgVxIx0Vlly8miXItSOSKmI6KS1mtF/LkoP8v+ctwBAAAAwOGr5uuZ5L+dQjvJ3vO/mr3vn473Yy2asRLNaMRyXMueBXTe9Zf+0ao3HmzVV9NlZ8ff/vdYcWQ9RsREfLDHyHNZjVPdFovxvfhBnIvZuBLrsRI/iqVoxnLMRjU9iViKJGrVztOLWhHn7vFe7tu6Mhjb6YHt17NIqnE9VrLYzsfVSnQem2TnkI75es9of6xEDIz4QZqd5Fu5EXN0ref39ev8uUyu/eKIfRyOWnbmk92MzKW5z7Px0vDcj3mdDI40H6XuM6iT26Okm4MjFTn/4Tg5P5Gv01z/oj/nB23MR2mDmViIUn71Rbzan/NbX7z3cn/jL//zr1dulNZu3ri+ce4QT+lQTRaFwUzUezLx2vCrL89EI81Ea/RMTA7umH6C8zhAlTwb2VQ04mz53ay0FG/0XILvxbVYjosxF/NxKebiG7EQ9b4r7FRfXsv11f6cZPdaaef8Vh0S/Jkv9VT65T6Vj1aal5d68to709WyY/mey7+KuZ4svTz86hv7r0A6/ufzcjrGz7p/cZ4GfZnI5+YiuleGZ+K37fTnRmPt5vqNpVsjjnc2X6e37Yf9c/PvDuJ8Hl96vaQzbjnbynJSLa6X9Ngr3Wj781XJP3HptCvtOHaqe6wWM7ES39/zTq3kr+F29tQ59lrvsX9tz5yV/PVNcazvVU68F43sVciA2aPJKgAjO/HmiUr1YfXv1Y+rP6/eqL49/Z2pS1NfqMTk38p/mvhD6felbyZvxsfxk5g57kgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5sHH7zs2lRmN5vVuI6cE9T1qo7DnW8EKU9q2z9cJoHUYtYvhYSV6oHOy5P4uFahxSz59GxJA6lSceIhn7Ghu7kF7IB9Jh8cVp2Z72xBjNy0Wr3euUY2N6r9/g1PZdELWbS43/tPvqVKPnlgGecxeaq7cubNy+89WV1aV3l99dXlu4dPHSxfrX57924fpKY3mu8/O4owQOw8btOxPHHQMAAAAAAAAAAAAwnvxf/zcf+z8zlPepU1nf2H3k00d9qgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAzavGdmGxFEvNz5+fS7Qdb9Ua6FOXtmuWIKEVE8uOI5H7E5egsUevpLtlrnLcefvbR2Xuf1Lf7Khf1S8PajaaVLzEbERP5en9Tu3Szs7+rPf21Hiu8pHuGacLOFImD4/a/AAAA//+vgfmP") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) 16.632011913s ago: executing program 1 (id=5255): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100030072bf050005001201", 0x2e}], 0x1}, 0x0) 16.020287487s ago: executing program 1 (id=5270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400060005000900ffff00000500030009"], 0x88}, 0x1, 0x0, 0x0, 0x20010820}, 0x0) 15.890717347s ago: executing program 34 (id=5270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400060005000900ffff00000500030009"], 0x88}, 0x1, 0x0, 0x0, 0x20010820}, 0x0) 8.272832132s ago: executing program 5 (id=5452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 8.104300523s ago: executing program 5 (id=5459): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000bc0)=0x52) 7.984492373s ago: executing program 5 (id=5461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x76) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000100), 0x0}, 0x20) 7.942455503s ago: executing program 5 (id=5465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f00000005c0)={[{@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@errors_remount}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x7fffffff}}, {@auto_da_alloc}]}, 0x2, 0x44f, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) 7.595308655s ago: executing program 5 (id=5473): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x1, 0xfffffff7}, 0xc) 6.951281968s ago: executing program 5 (id=5487): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000140)={'macvtap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) 6.196505332s ago: executing program 35 (id=5487): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000140)={'macvtap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}) 2.11752318s ago: executing program 4 (id=5565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000bc0)={0x0, 0x1}, 0x8) 2.07286949s ago: executing program 4 (id=5566): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x23, &(0x7f0000000240)=0x2, 0x8) 2.003011701s ago: executing program 4 (id=5567): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x782, &(0x7f0000000f40)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.631795482s ago: executing program 4 (id=5570): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x6, &(0x7f0000000000)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 1.179451884s ago: executing program 4 (id=5571): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f00000000c0)) 1.024638715s ago: executing program 4 (id=5574): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000140)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x3, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0xaa1}) 712.606977ms ago: executing program 2 (id=5576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400000015000100000000000000000002180000", @ANYBLOB="080001"], 0x34}, 0x1, 0x0, 0x0, 0x4004045}, 0xc0) 645.865407ms ago: executing program 6 (id=5577): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="2800000014000100cd76f4285cb0b81401"], 0x28}}, 0x0) 592.450047ms ago: executing program 6 (id=5578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 482.812278ms ago: executing program 2 (id=5579): r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000200)=['\x00'], 0x1}) 472.594618ms ago: executing program 6 (id=5580): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xd, 0x1, 0x3, "a05b0b2041d8e20077fc61afde9a16211fe49fe68dca612cb796163c8b88f44d", 0x4c314356}) 391.390368ms ago: executing program 6 (id=5581): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 387.226528ms ago: executing program 2 (id=5582): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x3ed}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) 300.917418ms ago: executing program 2 (id=5583): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_ENCAP={0x10, 0x1e, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc}}]}, 0x2c}}, 0x0) 300.713088ms ago: executing program 6 (id=5584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) 175.165589ms ago: executing program 7 (id=5271): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@discard}]}, 0x1, 0x504, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 145.634459ms ago: executing program 2 (id=5585): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x8b, 0x2c4, &(0x7f00000003c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 103.354289ms ago: executing program 6 (id=5586): r0 = openat$binder_debug(0xffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fchmod(r0, 0x1a4) 0s ago: executing program 2 (id=5587): r0 = syz_open_dev$vim2m(&(0x7f0000000a00), 0x7737573d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000a40)={0x7, 0x0, 0x0, @stepwise}) kernel console output (not intermixed with test programs): ][T12639] FAT-fs (loop1): Directory bread(block 165) failed [ 170.137384][T12625] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 170.144126][T12639] FAT-fs (loop1): Directory bread(block 166) failed [ 170.145501][T12639] FAT-fs (loop1): Directory bread(block 167) failed [ 170.153747][T12625] ntfs3: loop3: mft corrupted [ 170.154817][T12625] ntfs3: loop3: Failed to load $Extend. [ 170.192088][T12639] FAT-fs (loop1): Directory bread(block 160) failed [ 170.193387][T12639] FAT-fs (loop1): Directory bread(block 161) failed [ 170.260701][T12650] xt_l2tp: missing protocol rule (udp|l2tpip) [ 170.332215][T12655] binder: 12653:12655 ioctl 400c620e 200000c0 returned -22 [ 170.508266][T12670] netlink: 'syz.5.3648': attribute type 21 has an invalid length. [ 170.510042][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3648'. [ 170.681236][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3654'. [ 170.781789][T12688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3658'. [ 170.861172][T12693] loop5: detected capacity change from 0 to 16 [ 170.938381][T12693] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 171.143952][T12708] loop4: detected capacity change from 0 to 1024 [ 171.150647][T12663] loop3: detected capacity change from 0 to 32768 [ 171.191781][T12663] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.3642 (12663) [ 171.208734][T12663] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 171.211093][T12663] BTRFS info (device loop3): force zlib compression, level 3 [ 171.232330][T12663] BTRFS info (device loop3): force clearing of disk cache [ 171.233916][T12663] BTRFS info (device loop3): setting nodatasum [ 171.234444][T12708] hfsplus: keylen 65060 too large [ 171.235212][T12663] BTRFS info (device loop3): use zlib compression, level 3 [ 171.235236][T12663] BTRFS info (device loop3): allowing degraded mounts [ 171.254164][T12663] BTRFS info (device loop3): enabling disk space caching [ 171.255739][T12663] BTRFS info (device loop3): disk space caching is enabled [ 171.264328][T12663] BTRFS info (device loop3): has skinny extents [ 171.367427][T12667] loop1: detected capacity change from 0 to 40427 [ 171.444725][T12667] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.450534][T12733] loop5: detected capacity change from 0 to 256 [ 171.468411][T12667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 171.543220][T12663] BTRFS info (device loop3): enabling ssd optimizations [ 171.573751][T12663] BTRFS info (device loop3): clearing free space tree [ 171.575235][T12663] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.581548][T12663] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.586211][T12733] FAT-fs (loop5): Directory bread(block 64) failed [ 171.599183][T12733] FAT-fs (loop5): Directory bread(block 65) failed [ 171.600622][T12733] FAT-fs (loop5): Directory bread(block 66) failed [ 171.601894][T12733] FAT-fs (loop5): Directory bread(block 67) failed [ 171.603175][T12733] FAT-fs (loop5): Directory bread(block 68) failed [ 171.642812][T12733] FAT-fs (loop5): Directory bread(block 69) failed [ 171.644329][T12733] FAT-fs (loop5): Directory bread(block 70) failed [ 171.645622][T12733] FAT-fs (loop5): Directory bread(block 71) failed [ 171.647153][T12733] FAT-fs (loop5): Directory bread(block 72) failed [ 171.648770][T12733] FAT-fs (loop5): Directory bread(block 73) failed [ 171.672325][T12663] BTRFS info (device loop3): balance: start -sdevid=0,drange=2048..127,vrange=18446744073709551615..1,limit=30064771073,limit=1..7 [ 171.676141][T12663] BTRFS info (device loop3): balance: ended with status: 0 [ 172.887106][T12839] loop3: detected capacity change from 0 to 1024 [ 172.937664][T12839] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 172.937664][T12839] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 172.937664][T12839] [ 172.941461][T12839] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 173.022040][T12839] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000080,nouser_xattr,delalloc,lazytime,jqfmt=vfsold,dioread_lock,init_itable=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 173.104529][T12801] loop5: detected capacity change from 0 to 40427 [ 173.145845][T12801] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 173.148033][T12801] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 173.184162][T12801] F2FS-fs (loop5): Found nat_bits in checkpoint [ 173.211085][T12801] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 173.212616][T12801] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 173.245830][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3731'. [ 173.413761][T12881] xt_connbytes: Forcing CT accounting to be enabled [ 173.505689][T12887] x_tables: duplicate underflow at hook 3 [ 173.895522][T12931] loop2: detected capacity change from 0 to 256 [ 173.961752][T12940] Cannot find del_set index 286 as target [ 173.970530][T12931] FAT-fs (loop2): Directory bread(block 64) failed [ 173.975351][T12931] FAT-fs (loop2): Directory bread(block 65) failed [ 173.985463][T12931] FAT-fs (loop2): Directory bread(block 66) failed [ 173.991960][T12931] FAT-fs (loop2): Directory bread(block 67) failed [ 173.993533][T12931] FAT-fs (loop2): Directory bread(block 68) failed [ 174.007094][T12931] FAT-fs (loop2): Directory bread(block 69) failed [ 174.008539][T12931] FAT-fs (loop2): Directory bread(block 70) failed [ 174.009954][T12931] FAT-fs (loop2): Directory bread(block 71) failed [ 174.011454][T12931] FAT-fs (loop2): Directory bread(block 72) failed [ 174.012721][T12931] FAT-fs (loop2): Directory bread(block 73) failed [ 174.503841][T12988] loop5: detected capacity change from 0 to 1024 [ 174.557119][T12988] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 174.564285][T12988] EXT4-fs (loop5): invalid journal inode [ 174.565542][T12988] EXT4-fs (loop5): can't get journal size [ 174.604389][T12988] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback. [ 174.924699][T13029] kcapi: manufacturer command 52776558133248 unknown. [ 175.082842][T13042] loop5: detected capacity change from 0 to 8 [ 175.109036][T13041] loop4: detected capacity change from 0 to 1024 [ 175.175553][T13042] SQUASHFS error: zlib decompression failed, data probably corrupt [ 175.179286][T13042] SQUASHFS error: Failed to read block 0x1b9: -5 [ 175.180629][T13042] SQUASHFS error: Unable to read metadata cache entry [1b7] [ 175.182324][T13041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.568860][T13024] loop1: detected capacity change from 0 to 32768 [ 175.590639][T13068] PKCS8: Unsupported PKCS#8 version [ 175.631140][T13024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3805 (13024) [ 175.684179][T13032] loop3: detected capacity change from 0 to 32768 [ 175.697300][T13024] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 175.699051][T13024] BTRFS info (device loop1): using free space tree [ 175.700457][T13024] BTRFS info (device loop1): has skinny extents [ 175.720626][T13032] (syz.3.3809,13032,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.723596][T13032] (syz.3.3809,13032,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.820330][T13032] JBD2: Ignoring recovery information on journal [ 175.955552][T13032] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 176.068481][T13109] loop5: detected capacity change from 0 to 512 [ 176.107230][T13109] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 176.109564][T13109] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 176.111780][T13109] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3839: Corrupt directory, running e2fsck is recommended [ 176.120292][T13024] BTRFS info (device loop1): enabling ssd optimizations [ 176.213792][T13109] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 176.215682][T13109] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.3839: corrupted in-inode xattr [ 176.276098][ T4032] ocfs2: Unmounting device (7,3) on (node local) [ 176.341091][T13109] EXT4-fs (loop5): Remounting filesystem read-only [ 176.342545][T13109] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3839: couldn't read orphan inode 15 (err -117) [ 176.371318][T13109] EXT4-fs (loop5): Remounting filesystem read-only [ 176.372007][T13122] loop4: detected capacity change from 0 to 4096 [ 176.372807][T13109] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,noblock_validity,data_err=abort,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 176.572195][T13122] ntfs: volume version 3.1. [ 176.784234][T13135] loop3: detected capacity change from 0 to 4096 [ 176.815217][T13135] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 176.843305][T13149] tmpfs: Bad value for 'mpol' [ 176.859551][T13135] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 177.028605][T13163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3863'. [ 177.220934][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3869'. [ 177.222806][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'. [ 177.242210][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'. [ 177.413945][T13196] loop5: detected capacity change from 0 to 64 [ 177.465770][T13201] loop2: detected capacity change from 0 to 8 [ 177.727787][T13219] loop1: detected capacity change from 0 to 512 [ 177.736071][T13223] loop3: detected capacity change from 0 to 64 [ 177.905316][T13219] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,noauto_da_alloc,grpjquota=,norecovery,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 178.122325][T13225] loop4: detected capacity change from 0 to 32768 [ 178.178568][T13225] find_entry called with index = 0 [ 178.186250][T13225] find_entry called with index = 0 [ 178.384401][T13209] loop5: detected capacity change from 0 to 32768 [ 178.430961][T13209] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.3887 (13209) [ 178.486990][T13209] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 178.488823][T13209] BTRFS info (device loop5): force zlib compression, level 3 [ 178.490410][T13209] BTRFS info (device loop5): force clearing of disk cache [ 178.491841][T13209] BTRFS info (device loop5): setting nodatasum [ 178.492954][T13209] BTRFS info (device loop5): use zlib compression, level 3 [ 178.494359][T13209] BTRFS info (device loop5): allowing degraded mounts [ 178.495712][T13209] BTRFS info (device loop5): enabling disk space caching [ 178.526370][T13209] BTRFS info (device loop5): disk space caching is enabled [ 178.528266][T13209] BTRFS info (device loop5): has skinny extents [ 178.546221][T13258] IPv6: sit3: Disabled Multicast RS [ 178.829954][T13209] BTRFS info (device loop5): enabling ssd optimizations [ 178.832878][T13209] BTRFS info (device loop5): clearing free space tree [ 178.834215][T13209] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.836200][T13209] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 178.991736][T13209] BTRFS info (device loop5): balance: start -sdevid=0,drange=2048..127,vrange=18446744073709551615..1,limit=30064771073,limit=1..7 [ 178.994815][T13209] BTRFS info (device loop5): balance: ended with status: 0 [ 179.039594][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'. [ 179.041551][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3924'. [ 179.043638][T13308] mmap: syz.1.3925 (13308): VmData 37498880 exceed data ulimit 1023. Update limits or use boot option ignore_rlimit_data. [ 179.145624][T13312] loop1: detected capacity change from 0 to 512 [ 179.268621][T13312] EXT4-fs (loop1): Ignoring removed nobh option [ 179.301813][T13312] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noauto_da_alloc,delalloc,nobh,dioread_lock,. Quota mode: writeback. [ 179.310406][T13317] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3930'. [ 179.337175][T13312] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.1.3927: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 179.345039][T13312] EXT4-fs (loop1): Remounting filesystem read-only [ 179.346404][T13312] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 179.385882][T13312] EXT4-fs (loop1): Remounting filesystem read-only [ 179.603107][T13304] loop3: detected capacity change from 0 to 32768 [ 179.742745][T13304] XFS (loop3): Mounting V5 Filesystem [ 179.771014][T13344] loop2: detected capacity change from 0 to 1024 [ 179.814151][T13344] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 179.816259][T13344] EXT4-fs (loop2): orphan cleanup on readonly fs [ 179.827227][T13344] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.3938: Freeing blocks not in datazone - block = 0, count = 4096 [ 179.847162][T13344] EXT4-fs (loop2): 1 orphan inode deleted [ 179.848373][T13344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.861872][T13302] loop4: detected capacity change from 0 to 32768 [ 179.878967][T13302] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3922 (13302) [ 179.924158][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3941'. [ 179.930970][T13354] loop1: detected capacity change from 0 to 1024 [ 179.933476][T13302] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 179.935884][T13302] BTRFS info (device loop4): using free space tree [ 179.947179][T13302] BTRFS info (device loop4): has skinny extents [ 180.058056][T13304] XFS (loop3): Ending clean mount [ 180.126709][T13366] loop2: detected capacity change from 0 to 8 [ 180.134784][ T4103] hfsplus: b-tree write err: -5, ino 4 [ 180.206002][ T4032] XFS (loop3): Unmounting Filesystem [ 180.237353][T13371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3944'. [ 180.249104][T13366] SQUASHFS error: Failed to read block 0x63a: -5 [ 180.250811][T13366] SQUASHFS error: Unable to read metadata cache entry [638] [ 180.252275][T13366] SQUASHFS error: Unable to read directory block [26067d:0] [ 180.328695][T13302] BTRFS info (device loop4): enabling ssd optimizations [ 181.032858][T13414] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3962'. [ 181.042912][T13414] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3962'. [ 181.551973][T13453] netlink: 'syz.5.3980': attribute type 8 has an invalid length. [ 181.597222][T13386] loop2: detected capacity change from 0 to 32768 [ 181.629962][T13460] loop1: detected capacity change from 0 to 512 [ 181.651380][T13386] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 181.653375][T13386] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 181.654949][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3986'. [ 181.666023][T13386] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 18 extents in 0ms [ 181.669565][T13464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.670559][T13460] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 181.687690][T13462] netlink: 'syz.5.3985': attribute type 1 has an invalid length. [ 181.853048][T13476] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3990'. [ 181.861111][T13472] loop4: detected capacity change from 0 to 2048 [ 181.876051][T13386] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 181.916003][T13472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.077274][T13480] loop1: detected capacity change from 0 to 8192 [ 182.143432][T13480] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 182.145425][T13480] REISERFS (device loop1): using ordered data mode [ 182.146719][T13480] reiserfs: using flush barriers [ 182.177455][T13480] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.181031][T13480] REISERFS (device loop1): checking transaction log (loop1) [ 182.291599][T13480] REISERFS (device loop1): Using tea hash to sort names [ 182.293267][T13480] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 182.634439][T13515] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4011'. [ 182.636335][T13515] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 182.640954][T13470] loop3: detected capacity change from 0 to 32768 [ 182.657989][T13515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.798741][ T4032] read_mapping_page failed! [ 182.800030][ T4032] ERROR: (device loop3): txAbort: [ 182.800030][ T4032] [ 182.834866][ T4032] read_mapping_page failed! [ 182.836224][ T4032] ERROR: (device loop3): txAbort: [ 182.836224][ T4032] [ 182.861828][T13532] misc userio: No port type given on /dev/userio [ 182.900387][T13535] IPVS: length: 118 != 24 [ 182.932502][T13537] loop1: detected capacity change from 0 to 8 [ 183.018345][T13537] SQUASHFS error: Failed to read block 0x1ec: -5 [ 183.019799][T13537] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 183.046258][T13543] loop2: detected capacity change from 0 to 256 [ 183.186440][T13543] FAT-fs (loop2): Directory bread(block 64) failed [ 183.188182][T13543] FAT-fs (loop2): Directory bread(block 65) failed [ 183.189702][T13543] FAT-fs (loop2): Directory bread(block 66) failed [ 183.191260][T13543] FAT-fs (loop2): Directory bread(block 67) failed [ 183.192735][T13543] FAT-fs (loop2): Directory bread(block 68) failed [ 183.194159][T13543] FAT-fs (loop2): Directory bread(block 69) failed [ 183.195561][T13543] FAT-fs (loop2): Directory bread(block 70) failed [ 183.197365][T13543] FAT-fs (loop2): Directory bread(block 71) failed [ 183.198807][T13543] FAT-fs (loop2): Directory bread(block 72) failed [ 183.200242][T13543] FAT-fs (loop2): Directory bread(block 73) failed [ 183.238245][T13543] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006c61) [ 183.240135][T13543] FAT-fs (loop2): Filesystem has been set read-only [ 183.256814][T13519] loop4: detected capacity change from 0 to 32768 [ 183.266740][T13519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4013 (13519) [ 183.300836][T13519] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 183.302688][T13519] BTRFS info (device loop4): using free space tree [ 183.304104][T13519] BTRFS info (device loop4): has skinny extents [ 183.483182][T13519] BTRFS info (device loop4): enabling ssd optimizations [ 183.584133][ T696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.766220][ T696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.854186][ T696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.023167][ T696] bond0: (slave netdevsim0): Releasing backup interface [ 184.052735][ T696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.304703][T13602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4044'. [ 184.306517][T13602] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 184.923733][T13653] tmpfs: Bad value for 'mpol' [ 185.316105][T13603] loop4: detected capacity change from 0 to 32768 [ 185.447720][T13603] XFS (loop4): Mounting V5 Filesystem [ 185.650281][T13603] XFS (loop4): Ending clean mount [ 185.700544][T13617] chnl_net:caif_netlink_parms(): no params data found [ 185.747933][ T4031] XFS (loop4): Unmounting Filesystem [ 185.835652][T13708] netlink: 'syz.1.4079': attribute type 9 has an invalid length. [ 185.845234][T13708] netlink: 'syz.1.4079': attribute type 7 has an invalid length. [ 185.846795][T13708] netlink: 'syz.1.4079': attribute type 8 has an invalid length. [ 186.030314][T13617] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.032420][T13617] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.034557][T13617] device bridge_slave_0 entered promiscuous mode [ 186.048308][T13617] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.049989][T13617] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.052050][T13617] device bridge_slave_1 entered promiscuous mode [ 186.085732][T13735] loop1: detected capacity change from 0 to 256 [ 186.185999][T13735] FAT-fs (loop1): Directory bread(block 64) failed [ 186.190147][T13735] FAT-fs (loop1): Directory bread(block 65) failed [ 186.191523][T13735] FAT-fs (loop1): Directory bread(block 66) failed [ 186.192747][T13735] FAT-fs (loop1): Directory bread(block 67) failed [ 186.196587][T13735] FAT-fs (loop1): Directory bread(block 68) failed [ 186.202201][T13735] FAT-fs (loop1): Directory bread(block 69) failed [ 186.203624][T13735] FAT-fs (loop1): Directory bread(block 70) failed [ 186.204985][T13735] FAT-fs (loop1): Directory bread(block 71) failed [ 186.206321][T13735] FAT-fs (loop1): Directory bread(block 72) failed [ 186.226980][T13735] FAT-fs (loop1): Directory bread(block 73) failed [ 186.316374][T13617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.377696][T13617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.622614][T13617] team0: Port device team_slave_0 added [ 186.633422][T13617] team0: Port device team_slave_1 added [ 186.738729][ T3605] Bluetooth: hci3: command 0x0409 tx timeout [ 186.867940][T13617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.869367][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.874394][T13617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.970395][T13617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.971924][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.019207][T13789] tmpfs: Unexpected value for 'inode32' [ 187.083569][T13617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.086670][ T696] IPVS: stopping backup sync thread 10328 ... [ 187.141801][T13756] loop1: detected capacity change from 0 to 32768 [ 187.263552][T13756] (syz.1.4097,13756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.266647][T13756] (syz.1.4097,13756,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.331580][T13756] JBD2: Ignoring recovery information on journal [ 187.455644][T13756] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 187.464199][T13822] loop4: detected capacity change from 0 to 1764 [ 187.549960][T13617] device hsr_slave_0 entered promiscuous mode [ 187.627332][T13617] device hsr_slave_1 entered promiscuous mode [ 187.635870][ T4023] ocfs2: Unmounting device (7,1) on (node local) [ 187.722608][T13838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4131'. [ 187.800370][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4128'. [ 187.802370][T13833] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 188.042857][ T696] device hsr_slave_0 left promiscuous mode [ 188.078219][ T696] device hsr_slave_1 left promiscuous mode [ 188.158967][ T696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.160805][ T696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.165204][ T696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.168435][ T696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.172921][ T696] device bridge_slave_0 left promiscuous mode [ 188.175223][ T696] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.287528][ T696] device veth1_macvtap left promiscuous mode [ 188.288967][ T696] device veth0_macvtap left promiscuous mode [ 188.290543][ T696] device veth1_vlan left promiscuous mode [ 188.293393][ T696] device veth0_vlan left promiscuous mode [ 188.591056][ T696] bond1 (unregistering): Released all slaves [ 188.817068][ T3605] Bluetooth: hci3: command 0x041b tx timeout [ 188.956264][ T696] team0 (unregistering): Port device team_slave_1 removed [ 188.967951][ T696] team0 (unregistering): Port device team_slave_0 removed [ 188.975977][ T696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.038942][ T696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.188969][ T696] bond0 (unregistering): Released all slaves [ 189.274739][T13851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4127'. [ 189.276781][T13856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4137'. [ 189.278801][T13856] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 189.927596][T13927] cifs: Unknown parameter '_¡LI¥‘» !BEJ‚FÓAæi_^ÕwˆkªtÉc»ÊÙåE|˜,Þ2­' [ 190.153177][T13942] loop2: detected capacity change from 0 to 512 [ 190.220923][T13942] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 190.246962][T13942] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 190.261179][T13617] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 190.279152][T13942] EXT2-fs (loop2): error: ext2_free_blocks: bit already cleared for block 35 [ 190.285303][T13942] EXT2-fs (loop2): error: ext2_free_branches: Read failure, inode=16, block=1564416 [ 190.326389][T13617] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.399074][T13617] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 190.422468][T13896] loop4: detected capacity change from 0 to 32768 [ 190.495768][T13617] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 190.502711][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 190.533133][T13896] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 190.534946][T13896] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 190.582057][T13896] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 18 extents in 0ms [ 190.703743][T13974] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4182'. [ 190.710120][T13974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.809574][T13896] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 190.830711][T13988] loop5: detected capacity change from 0 to 1024 [ 190.896982][ T3605] Bluetooth: hci3: command 0x040f tx timeout [ 190.929815][T13992] loop1: detected capacity change from 0 to 256 [ 190.963011][ T4103] hfsplus: b-tree write err: -5, ino 4 [ 191.046711][T13992] FAT-fs (loop1): Directory bread(block 64) failed [ 191.068889][T13992] FAT-fs (loop1): Directory bread(block 65) failed [ 191.070616][T13992] FAT-fs (loop1): Directory bread(block 66) failed [ 191.071898][T13992] FAT-fs (loop1): Directory bread(block 67) failed [ 191.073204][T13992] FAT-fs (loop1): Directory bread(block 68) failed [ 191.074456][T13992] FAT-fs (loop1): Directory bread(block 69) failed [ 191.075691][T13992] FAT-fs (loop1): Directory bread(block 70) failed [ 191.122715][T13992] FAT-fs (loop1): Directory bread(block 71) failed [ 191.124259][T13992] FAT-fs (loop1): Directory bread(block 72) failed [ 191.125533][T13992] FAT-fs (loop1): Directory bread(block 73) failed [ 191.226455][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4192'. [ 191.403906][T13617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.553860][T13617] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.555514][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 191.558165][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.593530][ T226] block nbd4: Attempted send on invalid socket [ 191.594883][ T226] blk_update_request: I/O error, dev nbd4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.606961][T14012] VFS: could not find a valid V7 on nbd4. [ 191.647219][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.649685][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.651522][ T4103] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.652925][ T4103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.701731][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.703849][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.706056][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.717406][ T4103] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.718757][ T4103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.784392][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.824888][T13990] loop2: detected capacity change from 0 to 32768 [ 191.875336][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.910087][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.912974][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.918381][T13990] JBD2: Ignoring recovery information on journal [ 191.946522][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.094502][T13990] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 192.100567][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 192.103104][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.105258][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 192.123513][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.142697][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.149720][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.212723][T13617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.252816][T14048] loop5: detected capacity change from 0 to 256 [ 192.295815][ T4030] ocfs2: Unmounting device (7,2) on (node local) [ 192.460092][T14048] FAT-fs (loop5): Directory bread(block 64) failed [ 192.461562][T14048] FAT-fs (loop5): Directory bread(block 65) failed [ 192.462921][T14048] FAT-fs (loop5): Directory bread(block 66) failed [ 192.464224][T14048] FAT-fs (loop5): Directory bread(block 67) failed [ 192.465576][T14048] FAT-fs (loop5): Directory bread(block 68) failed [ 192.498370][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.499716][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.516957][T14048] FAT-fs (loop5): Directory bread(block 69) failed [ 192.518336][T14048] FAT-fs (loop5): Directory bread(block 70) failed [ 192.519600][T14048] FAT-fs (loop5): Directory bread(block 71) failed [ 192.520919][T14048] FAT-fs (loop5): Directory bread(block 72) failed [ 192.522196][T14048] FAT-fs (loop5): Directory bread(block 73) failed [ 192.579860][T14060] loop1: detected capacity change from 0 to 1024 [ 192.758705][T14032] loop4: detected capacity change from 0 to 32768 [ 192.776045][T14067] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4213'. [ 192.794773][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.796655][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.817042][T14032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4203 (14032) [ 192.865513][T13617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.904612][T14069] sp0: Synchronizing with TNC [ 192.923079][T14032] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 192.924778][T14032] BTRFS info (device loop4): using free space tree [ 192.926131][T14032] BTRFS info (device loop4): has skinny extents [ 192.980489][ T4065] Bluetooth: hci3: command 0x0419 tx timeout [ 193.232238][T14032] BTRFS info (device loop4): enabling ssd optimizations [ 193.489513][T14132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4225'. [ 193.645120][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.647532][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.971676][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.974041][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.980649][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.993112][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.004488][T14163] loop2: detected capacity change from 0 to 256 [ 194.025602][T13617] device veth0_vlan entered promiscuous mode [ 194.090862][T14163] FAT-fs (loop2): Directory bread(block 64) failed [ 194.092282][T14163] FAT-fs (loop2): Directory bread(block 65) failed [ 194.093743][T14163] FAT-fs (loop2): Directory bread(block 66) failed [ 194.095007][T14163] FAT-fs (loop2): Directory bread(block 67) failed [ 194.095658][T14165] netlink: 'syz.5.4239': attribute type 32 has an invalid length. [ 194.096298][T14163] FAT-fs (loop2): Directory bread(block 68) failed [ 194.117032][T14163] FAT-fs (loop2): Directory bread(block 69) failed [ 194.119436][T14163] FAT-fs (loop2): Directory bread(block 70) failed [ 194.120742][T14163] FAT-fs (loop2): Directory bread(block 71) failed [ 194.122139][T14163] FAT-fs (loop2): Directory bread(block 72) failed [ 194.123421][T14163] FAT-fs (loop2): Directory bread(block 73) failed [ 194.318277][T13617] device veth1_vlan entered promiscuous mode [ 194.506185][T13617] device veth0_macvtap entered promiscuous mode [ 194.575584][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.578646][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.581655][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.592337][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.602914][T14191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4252'. [ 194.622234][T14195] virtio-fs: tag not found [ 194.635735][T13617] device veth1_macvtap entered promiscuous mode [ 194.713064][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.715405][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.811735][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.813901][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.815842][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.852813][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.855054][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.875643][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.881279][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.883401][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.900417][T14206] loop2: detected capacity change from 0 to 4096 [ 194.934545][T13617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.969097][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.971713][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.035912][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.084065][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.086186][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.136991][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.139038][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.141062][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.143121][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.145278][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.170330][T13617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.175047][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.177772][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.220418][T13617] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.222196][T13617] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.268640][T13617] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.280827][T13617] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.305863][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4272'. [ 195.651121][T14263] loop2: detected capacity change from 0 to 256 [ 195.677539][T14263] exfat: Deprecated parameter 'utf8' [ 195.689542][T14263] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 195.728839][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.730798][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.748554][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.932688][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.934752][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.946198][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.021355][T14269] loop1: detected capacity change from 0 to 4096 [ 196.112768][T14269] __ntfs_error: 11 callbacks suppressed [ 196.112783][T14269] ntfs: (device loop1): parse_options(): NLS character set cp86 not found. Using previous one cp1255. [ 196.150933][T14269] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 196.153169][T14269] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 196.213743][T14269] ntfs: volume version 3.1. [ 196.226145][T14269] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 196.234689][T14269] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 196.243160][T14269] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 196.266131][T14243] loop5: detected capacity change from 0 to 32768 [ 196.402578][T14243] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 196.440629][T14269] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 196.442917][T14269] ntfs: (device loop1): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 196.669439][ T9061] ocfs2: Unmounting device (7,5) on (node local) [ 196.696759][T14254] loop4: detected capacity change from 0 to 40427 [ 196.782790][T14254] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 196.784261][T14254] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 196.793336][T14254] F2FS-fs (loop4): invalid crc value [ 196.818571][T14254] F2FS-fs (loop4): Found nat_bits in checkpoint [ 196.877351][T14254] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 196.879147][T14254] F2FS-fs (loop4): Start checkpoint disabled! [ 196.906515][T14333] netlink: 'syz.6.4304': attribute type 1 has an invalid length. [ 196.913820][T14254] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 196.915273][T14254] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 196.943442][T14333] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4304'. [ 197.053534][T14345] loop5: detected capacity change from 0 to 64 [ 197.373307][T14356] loop2: detected capacity change from 0 to 4096 [ 197.429255][T14356] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 197.718259][T14391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4328'. [ 197.780384][T14398] loop2: detected capacity change from 0 to 1024 [ 197.836795][T14398] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 197.861241][T14398] hfsplus: filesystem is marked journaled, leaving read-only. [ 197.910964][T14410] netlink: 1348 bytes leftover after parsing attributes in process `syz.4.4335'. [ 198.198469][T14414] loop5: detected capacity change from 0 to 4096 [ 198.301655][T14427] loop6: detected capacity change from 0 to 4096 [ 198.303234][T14441] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.363309][T14414] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 198.385820][T14445] loop1: detected capacity change from 0 to 256 [ 198.476616][T14445] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 198.482769][T14451] loop4: detected capacity change from 0 to 128 [ 198.490970][T14427] ntfs: (device loop6): parse_options(): NLS character set cp86 not found. Using previous one cp1255. [ 198.513110][T14427] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 198.553674][T14427] ntfs: volume version 3.1. [ 198.756177][T14463] bpf_jit: unknown atomic op code a0 [ 198.891371][T14466] loop1: detected capacity change from 0 to 512 [ 199.053559][T14466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.087183][T14466] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #12: comm syz.1.4358: corrupted xattr block 8 [ 199.092220][T14448] loop2: detected capacity change from 0 to 32768 [ 199.153039][T14448] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.4351 (14448) [ 199.240453][T14448] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 199.242525][T14448] BTRFS info (device loop2): force zlib compression, level 3 [ 199.243883][T14448] BTRFS info (device loop2): force clearing of disk cache [ 199.245413][T14448] BTRFS info (device loop2): setting nodatasum [ 199.246737][T14448] BTRFS info (device loop2): use zlib compression, level 3 [ 199.250730][T14448] BTRFS info (device loop2): allowing degraded mounts [ 199.252089][T14448] BTRFS info (device loop2): enabling disk space caching [ 199.253361][T14448] BTRFS info (device loop2): disk space caching is enabled [ 199.254847][T14448] BTRFS info (device loop2): has skinny extents [ 199.470894][T14494] loop4: detected capacity change from 0 to 4096 [ 199.547929][T14448] BTRFS info (device loop2): enabling ssd optimizations [ 199.551593][T14448] BTRFS info (device loop2): clearing free space tree [ 199.553038][T14448] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 199.554966][T14448] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 199.637962][T14448] BTRFS info (device loop2): balance: start -f -svrange=0..18446744073709551613 [ 199.639830][T14448] BTRFS info (device loop2): balance: ended with status: 0 [ 199.702087][T14494] ntfs: volume version 3.1. [ 199.740017][T14535] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4381'. [ 199.741830][T14535] netlink: 133 bytes leftover after parsing attributes in process `syz.1.4381'. [ 199.756603][T14535] netlink: 133 bytes leftover after parsing attributes in process `syz.1.4381'. [ 199.971255][ T6334] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 12 /dev/loop2 scanned by udevd (6334) [ 200.257868][T14549] loop4: detected capacity change from 0 to 256 [ 200.573015][T14530] loop5: detected capacity change from 0 to 32768 [ 200.620687][T14533] loop6: detected capacity change from 0 to 32768 [ 200.671778][T14530] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4378 (14530) [ 200.761131][T14566] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4394'. [ 200.791715][T14530] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 200.793519][T14530] BTRFS info (device loop5): using free space tree [ 200.794805][T14530] BTRFS info (device loop5): has skinny extents [ 200.839349][T14533] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 200.918415][T14547] loop2: detected capacity change from 0 to 32768 [ 200.960726][T13617] ocfs2: Unmounting device (7,6) on (node local) [ 201.069517][T14547] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 201.071377][T14547] BTRFS info (device loop2): force clearing of disk cache [ 201.072963][T14547] BTRFS info (device loop2): setting nodatasum [ 201.074159][T14547] BTRFS info (device loop2): use zlib compression, level 3 [ 201.084016][T14547] BTRFS info (device loop2): allowing degraded mounts [ 201.085277][T14547] BTRFS info (device loop2): enabling disk space caching [ 201.101037][T14547] BTRFS info (device loop2): disk space caching is enabled [ 201.102537][T14547] BTRFS info (device loop2): has skinny extents [ 201.142849][T14530] BTRFS info (device loop5): enabling ssd optimizations [ 201.166285][T14557] loop4: detected capacity change from 0 to 40427 [ 201.242483][T14557] F2FS-fs (loop4): invalid crc value [ 201.243835][T14557] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 201.286041][T14557] F2FS-fs (loop4): Found nat_bits in checkpoint [ 201.356416][T14557] F2FS-fs (loop4): recover fsync data on readonly fs [ 201.380204][T14557] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 201.381797][T14557] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 201.387782][T14557] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 201.490124][T14547] BTRFS info (device loop2): enabling ssd optimizations [ 201.492712][T14547] BTRFS info (device loop2): clearing free space tree [ 201.494418][T14547] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 201.496239][T14547] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.585556][T14547] BTRFS info (device loop2): balance: start -f -susage=0..1 [ 201.587329][T14547] BTRFS info (device loop2): balance: ended with status: 0 [ 201.746524][T14625] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4404'. [ 202.106026][ T6334] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 12 /dev/loop2 scanned by udevd (6334) [ 202.149473][T14655] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 202.193946][T14649] loop1: detected capacity change from 0 to 4096 [ 202.232181][T14649] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 202.246137][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4422'. [ 202.305139][T14664] loop6: detected capacity change from 0 to 4096 [ 202.399106][T14673] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.440734][T14677] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 202.443979][T14664] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 202.616296][T14691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4435'. [ 202.761136][T14703] loop6: detected capacity change from 0 to 1764 [ 202.789164][T14707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4445'. [ 202.791032][T14707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4445'. [ 202.792882][T14707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4445'. [ 202.905848][T14718] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 203.067458][T14734] netlink: 'syz.6.4451': attribute type 32 has an invalid length. [ 203.095377][T14736] loop5: detected capacity change from 0 to 512 [ 203.205898][T14736] EXT4-fs (loop5): 1 truncate cleaned up [ 203.207662][T14736] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 203.357556][T14753] loop4: detected capacity change from 0 to 128 [ 203.393707][T14751] loop6: detected capacity change from 0 to 2048 [ 203.434706][T14751] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 203.451184][T14751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.870684][T14768] device veth0_vlan left promiscuous mode [ 204.224740][T14788] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4479'. [ 204.233365][T14771] loop4: detected capacity change from 0 to 32768 [ 204.363311][ T4015] loop4: p1 p3 < > [ 204.407054][T14771] loop4: p1 p3 < > [ 204.431203][T14796] netlink: 'syz.1.4482': attribute type 1 has an invalid length. [ 204.508965][T14800] loop5: detected capacity change from 0 to 1024 [ 204.530997][T14802] loop2: detected capacity change from 0 to 1024 [ 204.582994][T14802] EXT4-fs (loop2): Test dummy encryption mode enabled [ 204.584628][T14802] EXT4-fs (loop2): Ignoring removed orlov option [ 204.594214][T14800] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.596441][T14800] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 204.611218][T14802] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 204.620871][T14800] EXT4-fs (loop5): invalid journal inode [ 204.622055][T14800] EXT4-fs (loop5): can't get journal size [ 204.694315][T14800] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 204.843581][T14820] [U] ^R [ 204.852832][T14778] loop6: detected capacity change from 0 to 32768 [ 204.968497][T14778] XFS (loop6): Mounting V5 Filesystem [ 205.123519][T14778] XFS (loop6): Ending clean mount [ 205.127235][T14778] XFS (loop6): Quotacheck needed: Please wait. [ 205.200063][T14778] XFS (loop6): Quotacheck: Done. [ 205.245880][T14853] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 205.250121][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4500'. [ 205.371612][T13617] XFS (loop6): Unmounting Filesystem [ 205.472466][T14875] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 205.546615][T14877] loop5: detected capacity change from 0 to 512 [ 205.609417][T14877] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.727061][T14877] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4509: bg 0: block 64: padding at end of block bitmap is not set [ 205.745034][T14877] __quota_error: 14 callbacks suppressed [ 205.745049][T14877] Quota error (device loop5): write_blk: dquota write failed [ 205.748111][T14877] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 205.750053][T14877] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.4509: Failed to acquire dquot type 0 [ 205.752838][T14877] EXT4-fs (loop5): 1 truncate cleaned up [ 205.753904][T14877] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.813736][T14877] Quota error (device loop5): write_blk: dquota write failed [ 205.815658][T14877] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 205.843742][T14877] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.4509: Failed to acquire dquot type 0 [ 205.859704][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4518'. [ 205.861509][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4518'. [ 205.955002][T14909] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 206.075122][T14914] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4522'. [ 206.181582][T14921] loop5: detected capacity change from 0 to 256 [ 206.289941][T14921] FAT-fs (loop5): Directory bread(block 64) failed [ 206.291308][T14921] FAT-fs (loop5): Directory bread(block 65) failed [ 206.292669][T14921] FAT-fs (loop5): Directory bread(block 66) failed [ 206.293962][T14921] FAT-fs (loop5): Directory bread(block 67) failed [ 206.295324][T14921] FAT-fs (loop5): Directory bread(block 68) failed [ 206.296637][T14921] FAT-fs (loop5): Directory bread(block 69) failed [ 206.323548][T14934] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 206.332706][T14921] FAT-fs (loop5): Directory bread(block 70) failed [ 206.334070][T14921] FAT-fs (loop5): Directory bread(block 71) failed [ 206.335345][T14921] FAT-fs (loop5): Directory bread(block 72) failed [ 206.336702][T14921] FAT-fs (loop5): Directory bread(block 73) failed [ 206.459296][T14902] loop2: detected capacity change from 0 to 32768 [ 206.501503][T14902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4519 (14902) [ 206.535520][T14902] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 206.537489][T14902] BTRFS info (device loop2): using free space tree [ 206.538890][T14902] BTRFS info (device loop2): has skinny extents [ 206.618980][T14962] netlink: 'syz.5.4537': attribute type 2 has an invalid length. [ 206.620638][T14962] netlink: 'syz.5.4537': attribute type 1 has an invalid length. [ 206.729629][T14977] loop6: detected capacity change from 0 to 64 [ 206.837525][T14902] BTRFS info (device loop2): enabling ssd optimizations [ 207.300617][T15006] loop6: detected capacity change from 0 to 4096 [ 207.392216][T15006] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 207.431628][T15006] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 207.433448][T15006] ntfs3: loop6: Failed to load $Extend. [ 207.534054][T15033] loop1: detected capacity change from 0 to 512 [ 207.564593][T15033] EXT4-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 207.691394][T15045] loop6: detected capacity change from 0 to 8 [ 207.767729][T15045] SQUASHFS error: lzo decompression failed, data probably corrupt [ 207.769648][T15045] SQUASHFS error: Failed to read block 0x4ec: -5 [ 207.770849][T15045] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 207.772300][T15045] SQUASHFS error: Unable to read inode 0x20087 [ 207.828915][ T4149] udevd[4149]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 207.891923][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 207.893958][T15056] loop4: detected capacity change from 0 to 128 [ 207.962099][T15056] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 207.973060][T15056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.120573][T15011] loop5: detected capacity change from 0 to 32768 [ 208.215807][T15011] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 208.215807][T15011] [ 208.242275][T15074] netlink: 'syz.6.4577': attribute type 21 has an invalid length. [ 208.247016][T15074] __nla_validate_parse: 1 callbacks suppressed [ 208.247028][T15074] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4577'. [ 208.285324][ T696] read_mapping_page failed! [ 208.286498][ T696] ERROR: (device loop5): txAbort: [ 208.286498][ T696] [ 208.290534][ T696] jfs_write_inode: jfs_commit_inode failed! [ 208.445378][T15047] loop1: detected capacity change from 0 to 32768 [ 208.465087][ T4149] udevd[4149]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 208.476715][ T4015] udevd[4015]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 208.490273][T15047] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.4564 (15047) [ 208.536427][T15047] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 208.538467][T15047] BTRFS info (device loop1): force zlib compression, level 3 [ 208.539882][T15047] BTRFS info (device loop1): force clearing of disk cache [ 208.541302][T15047] BTRFS info (device loop1): setting nodatasum [ 208.542554][T15047] BTRFS info (device loop1): use zlib compression, level 3 [ 208.551053][T15047] BTRFS info (device loop1): allowing degraded mounts [ 208.552382][T15047] BTRFS info (device loop1): enabling disk space caching [ 208.553656][T15047] BTRFS info (device loop1): disk space caching is enabled [ 208.583460][T15047] BTRFS info (device loop1): has skinny extents [ 208.705195][T15103] loop2: detected capacity change from 0 to 512 [ 208.786514][T15103] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.827941][T15114] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.4592'. [ 208.829877][T15114] netlink: zone id is out of range [ 208.830911][T15114] netlink: zone id is out of range [ 208.833473][T15103] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4589: bg 0: block 64: padding at end of block bitmap is not set [ 208.843280][T15103] Quota error (device loop2): write_blk: dquota write failed [ 208.844805][T15103] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 208.848953][T15103] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.4589: Failed to acquire dquot type 0 [ 208.851728][T15103] EXT4-fs (loop2): 1 truncate cleaned up [ 208.852832][T15103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.908855][T15114] netlink: del zone limit has 4 unknown bytes [ 208.978687][T15103] Quota error (device loop2): write_blk: dquota write failed [ 208.980362][T15103] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 208.982348][T15103] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.4589: Failed to acquire dquot type 0 [ 209.006061][T15047] BTRFS info (device loop1): enabling ssd optimizations [ 209.019098][T15047] BTRFS info (device loop1): clearing free space tree [ 209.020493][T15047] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.022248][T15047] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.158416][T15137] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4597'. [ 209.166708][T15047] BTRFS info (device loop1): balance: start -f -svrange=0..18446744073709551613 [ 209.176476][T15047] BTRFS info (device loop1): balance: ended with status: 0 [ 209.528167][T15143] loop2: detected capacity change from 0 to 4096 [ 209.530614][T15156] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 209.588045][T15079] loop4: detected capacity change from 0 to 40427 [ 209.593067][T15143] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 209.649058][T15079] F2FS-fs (loop4): invalid crc value [ 209.651918][T15143] ntfs3: loop2: failed to convert "c46c" to cp437 [ 209.658015][T15079] F2FS-fs (loop4): Found nat_bits in checkpoint [ 209.716402][T15079] F2FS-fs (loop4): Start checkpoint disabled! [ 209.742307][T15079] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 209.969301][T15191] Cannot find add_set index 0 as target [ 210.352137][T15229] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring [ 210.398239][T15235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.434819][T15238] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4639'. [ 210.447723][T15237] netlink: 'syz.2.4640': attribute type 1 has an invalid length. [ 210.467180][T15240] device vlan0 entered promiscuous mode [ 210.491383][T15240] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 210.807657][T15275] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4656'. [ 210.994139][T15298] loop5: detected capacity change from 0 to 128 [ 211.013037][T15296] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4665'. [ 211.015041][T15296] netlink: zone id is out of range [ 211.016153][T15296] netlink: zone id is out of range [ 211.031993][T15298] FAT-fs (loop5): Directory bread(block 3236) failed [ 211.033601][T15298] FAT-fs (loop5): Directory bread(block 3237) failed [ 211.034958][T15298] FAT-fs (loop5): Directory bread(block 3238) failed [ 211.036271][T15298] FAT-fs (loop5): Directory bread(block 3239) failed [ 211.047345][T15301] loop2: detected capacity change from 0 to 512 [ 211.053753][T15296] netlink: del zone limit has 4 unknown bytes [ 211.055726][T15298] FAT-fs (loop5): Directory bread(block 3240) failed [ 211.065425][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4669'. [ 211.080881][T15298] FAT-fs (loop5): Directory bread(block 3241) failed [ 211.082667][T15298] FAT-fs (loop5): Directory bread(block 3242) failed [ 211.095012][T15298] FAT-fs (loop5): Directory bread(block 3243) failed [ 211.112277][T15301] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 211.112728][T15298] FAT-fs (loop5): Directory bread(block 3236) failed [ 211.126027][T15298] FAT-fs (loop5): Directory bread(block 3237) failed [ 211.177031][T15301] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,delalloc,,errors=continue. Quota mode: writeback. [ 211.200175][T15314] loop4: detected capacity change from 0 to 2048 [ 211.232336][T15314] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 211.281143][T15314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.489335][T15337] loop6: detected capacity change from 0 to 256 [ 211.631283][T15353] delete_channel: no stack [ 211.655828][T15354] loop4: detected capacity change from 0 to 1024 [ 211.798467][T15354] hfsplus: bad catalog entry type [ 211.826124][T15368] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 211.833265][T15368] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 211.835027][T15368] overlayfs: missing 'lowerdir' [ 211.932292][T15375] loop4: detected capacity change from 0 to 64 [ 211.974221][T15383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.081137][T15380] loop2: detected capacity change from 0 to 4096 [ 212.134397][T15380] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 212.160623][T15397] device vlan0 entered promiscuous mode [ 212.216390][T15397] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 212.299247][T15402] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4706'. [ 212.499649][T15421] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4714'. [ 212.535002][T15425] loop4: detected capacity change from 0 to 256 [ 212.589724][T15425] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 212.704184][T15435] device vlan0 entered promiscuous mode [ 212.722300][T15435] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 212.867773][T15438] loop6: detected capacity change from 0 to 4096 [ 212.928455][T15450] ubi0: attaching mtd0 [ 212.932961][T15438] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 212.960055][T15450] ubi0: scanning is finished [ 212.961217][T15450] ubi0: empty MTD device detected [ 212.995891][T15438] ntfs3: loop6: failed to convert "c46c" to macinuit [ 213.022485][T15395] loop5: detected capacity change from 0 to 32768 [ 213.052734][T15395] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.4704 (15395) [ 213.124615][T15395] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 213.126601][T15395] BTRFS info (device loop5): force zlib compression, level 3 [ 213.129017][T15395] BTRFS info (device loop5): force clearing of disk cache [ 213.130438][T15395] BTRFS info (device loop5): setting nodatasum [ 213.131652][T15395] BTRFS info (device loop5): use zlib compression, level 3 [ 213.133056][T15395] BTRFS info (device loop5): allowing degraded mounts [ 213.134527][T15395] BTRFS info (device loop5): enabling disk space caching [ 213.134823][T15450] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 213.135952][T15395] BTRFS info (device loop5): disk space caching is enabled [ 213.135974][T15395] BTRFS info (device loop5): has skinny extents [ 213.145279][T15450] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 213.146702][T15450] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 213.150884][T15450] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 213.152413][T15450] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 213.162349][T15450] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 213.162748][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4730'. [ 213.164124][T15450] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2484092653 [ 213.176099][T15450] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 213.185070][T15467] ubi0: background thread "ubi_bgt0d" started, PID 15467 [ 213.301178][T15479] device vlan0 entered promiscuous mode [ 213.311715][T15479] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 213.428311][T15491] loop6: detected capacity change from 0 to 2048 [ 213.492578][T15491] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.605779][T15395] BTRFS info (device loop5): enabling ssd optimizations [ 213.612299][T15395] BTRFS info (device loop5): clearing free space tree [ 213.613974][T15395] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.625082][T15395] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 213.728900][T15527] loop4: detected capacity change from 0 to 1024 [ 213.792965][T15532] loop6: detected capacity change from 0 to 8 [ 213.864533][T15532] SQUASHFS error: Unable to read inode 0xa7 [ 213.998276][ T4335] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop5 scanned by udevd (4335) [ 214.093828][T15547] sctp: [Deprecated]: syz.6.4758 (pid 15547) Use of int in maxseg socket option. [ 214.093828][T15547] Use struct sctp_assoc_value instead [ 214.110333][T15552] overlayfs: conflicting options: nfs_export=on,index=off [ 214.133240][T15555] netlink: 'syz.5.4762': attribute type 1 has an invalid length. [ 214.312456][T15570] xt_CONNSECMARK: invalid mode: 0 [ 214.403832][T15577] netlink: 'syz.4.4774': attribute type 1 has an invalid length. [ 214.503303][T15586] device veth0_vlan left promiscuous mode [ 214.694488][T15599] loop1: detected capacity change from 0 to 128 [ 214.829558][T15604] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4788'. [ 214.907703][T15610] loop1: detected capacity change from 0 to 256 [ 214.959328][T15610] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 215.122551][T15558] loop2: detected capacity change from 0 to 40427 [ 215.213844][T15558] F2FS-fs (loop2): invalid crc value [ 215.249463][T15558] F2FS-fs (loop2): Found nat_bits in checkpoint [ 215.293150][T15558] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 215.348931][T15642] SET target dimension over the limit! [ 215.422184][T15644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4806'. [ 215.465194][T15646] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 215.619263][T15651] loop4: detected capacity change from 0 to 2048 [ 215.666881][T15651] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 215.668595][T15651] UDF-fs: Scanning with blocksize 512 failed [ 215.688692][T15651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.811379][T15664] loop6: detected capacity change from 0 to 64 [ 215.866301][T15622] loop1: detected capacity change from 0 to 32768 [ 215.896586][T15670] netlink: 'syz.2.4819': attribute type 5 has an invalid length. [ 215.935311][T15622] JBD2: Ignoring recovery information on journal [ 216.063271][T15622] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 216.145218][T15688] netlink: 'syz.4.4825': attribute type 3 has an invalid length. [ 216.159936][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4826'. [ 216.161676][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4826'. [ 216.170254][ T4023] ocfs2: Unmounting device (7,1) on (node local) [ 216.339096][T15702] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.510981][T15710] nvme_fabrics: missing parameter 'transport=%s' [ 216.512734][T15710] nvme_fabrics: missing parameter 'nqn=%s' [ 216.537817][T15723] loop5: detected capacity change from 0 to 256 [ 216.982761][T15765] tmpfs: Bad value for 'mpol' [ 217.051628][T15772] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 217.069726][T15775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4867'. [ 217.342061][T15799] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 217.426473][T15805] netlink: 'syz.2.4883': attribute type 10 has an invalid length. [ 217.621196][T15819] netlink: 'syz.2.4888': attribute type 2 has an invalid length. [ 217.622889][T15819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4888'. [ 217.737734][T15828] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4892'. [ 217.806070][T15826] loop6: detected capacity change from 0 to 4096 [ 217.817321][T15826] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 217.838245][T15826] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 217.853606][T15830] netlink: 'syz.2.4893': attribute type 5 has an invalid length. [ 217.911566][T15777] loop4: detected capacity change from 0 to 32768 [ 217.916163][T15777] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4868 (15777) [ 217.930216][T15777] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 217.931962][T15777] BTRFS info (device loop4): using free space tree [ 217.933133][T15777] BTRFS info (device loop4): has skinny extents [ 217.941083][T15833] tmpfs: Bad value for 'mpol' [ 217.959663][T13817] ntfs3: loop6: ntfs3_write_inode r=5 failed, -22. [ 217.967233][T13617] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 218.052089][T15847] loop6: detected capacity change from 0 to 256 [ 218.150152][T15847] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 218.186147][T15777] BTRFS info (device loop4): enabling ssd optimizations [ 218.712721][T15823] loop1: detected capacity change from 0 to 40427 [ 218.748290][T15823] F2FS-fs (loop1): invalid crc value [ 218.762931][T15823] F2FS-fs (loop1): Found nat_bits in checkpoint [ 218.823043][T15823] F2FS-fs (loop1): Start checkpoint disabled! [ 218.854844][T15823] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 218.881238][T15907] netlink: 'syz.6.4919': attribute type 13 has an invalid length. [ 218.892372][T15907] device veth0_macvtap left promiscuous mode [ 218.931692][T15907] macvtap0: refused to change device tx_queue_len [ 219.023079][T15917] loop5: detected capacity change from 0 to 16 [ 219.045280][T15919] loop6: detected capacity change from 0 to 1024 [ 219.133094][T15917] erofs: (device loop5): mounted with root inode @ nid 36. [ 219.708878][T15957] loop2: detected capacity change from 0 to 4096 [ 219.790412][T15972] xt_policy: output policy not valid in PREROUTING and INPUT [ 219.813126][T15957] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 219.932140][T15979] udc-core: couldn't find an available UDC or it's busy [ 219.933778][T15979] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 219.934419][T15981] loop4: detected capacity change from 0 to 16 [ 219.997173][ T696] ntfs3: loop2: ino=1e, Internal error [ 219.998459][ T696] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 220.009902][T15981] erofs: (device loop4): mounted with root inode @ nid 36. [ 220.034413][T15929] loop6: detected capacity change from 0 to 32768 [ 220.070963][T15929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.4930 (15929) [ 220.075977][T15983] loop5: detected capacity change from 0 to 4096 [ 220.107661][T15929] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 220.109412][T15929] BTRFS info (device loop6): using free space tree [ 220.110778][T15929] BTRFS info (device loop6): has skinny extents [ 220.145917][T15983] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 220.188604][T15983] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 220.307805][T16001] netlink: 'syz.4.4961': attribute type 1 has an invalid length. [ 220.309506][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4961'. [ 220.319522][ T4103] ntfs3: loop5: ntfs3_write_inode r=5 failed, -22. [ 220.331891][ T9061] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 220.543387][T16022] loop5: detected capacity change from 0 to 512 [ 220.547592][T15929] BTRFS info (device loop6): enabling ssd optimizations [ 220.633047][T16022] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 220.669816][T16028] netlink: 'syz.1.4969': attribute type 12 has an invalid length. [ 220.717139][T16033] loop2: detected capacity change from 0 to 16 [ 220.800104][T16022] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #16: comm syz.5.4965: casefold flag without casefold feature [ 220.803087][T16022] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.4965: couldn't read orphan inode 16 (err -117) [ 220.809890][T16022] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,grpjquota=./file2,grpquota,nombcache,nouid32,,errors=continue. Quota mode: writeback. [ 220.838985][T16033] erofs: (device loop2): mounted with root inode @ nid 36. [ 220.850252][T16022] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 220.852414][T16022] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 220.854333][T16022] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.4965: Failed to acquire dquot type 0 [ 220.863502][T16034] loop4: detected capacity change from 0 to 4096 [ 220.891508][T16034] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 220.929746][T16034] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 221.056759][T16048] Cannot find add_set index 0 as target [ 221.084085][ T304] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22. [ 221.090215][ T4031] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 221.340161][T16071] Zero length message leads to an empty skb [ 221.428020][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.437668][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.439155][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.443188][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.447531][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.453508][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.457222][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.463318][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.468508][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.473443][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.478413][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.483389][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.495054][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.496727][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.516894][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.518453][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.519929][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.521593][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.523018][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.531026][T16076] loop2: detected capacity change from 0 to 4096 [ 221.540759][T16077] loop5: detected capacity change from 0 to 4096 [ 221.542131][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.543717][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.545046][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.553173][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.554817][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.556324][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.564834][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.566375][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.571293][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.572966][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.573723][T16076] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 221.574583][T16077] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 221.587271][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.591241][T16088] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4996'. [ 221.597656][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.599145][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.600495][ T5922] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 221.630132][T16077] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 221.658526][ T5922] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 221.659887][T16076] ntfs3: loop2: ino=5, "/" directory corrupted [ 221.661847][T16076] ntfs3: loop2: ino=5, "/" directory corrupted [ 221.675823][T16090] loop4: detected capacity change from 0 to 64 [ 221.777969][ T9238] ntfs3: loop5: ntfs3_write_inode r=5 failed, -22. [ 221.782202][ T9061] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 221.880732][T16102] loop5: detected capacity change from 0 to 512 [ 222.310102][T16135] printk: syz.2.5019 (16135): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 222.336381][T16086] loop6: detected capacity change from 0 to 32768 [ 222.399648][T16086] read_mapping_page failed! [ 222.400809][T16086] ialloc: diAlloc returned -5! [ 222.545973][T16148] loop1: detected capacity change from 0 to 1764 [ 222.604782][T16150] loop2: detected capacity change from 0 to 4096 [ 222.861648][T16180] ieee802154 phy0 wpan0: encryption failed: -90 [ 223.111436][T16207] loop6: detected capacity change from 0 to 512 [ 223.128100][T16205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5052'. [ 223.290280][T16207] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 223.348516][T16228] loop4: detected capacity change from 0 to 4096 [ 223.393206][T16235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5061'. [ 223.415256][T16228] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 223.544711][T16242] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 223.580491][T16246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5065'. [ 223.601521][ T4103] ntfs3: loop4: ino=1e, Internal error [ 223.602833][ T4103] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 223.681913][T16252] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.683563][T16252] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5069'. [ 223.695786][T16250] dlm: no local IP address has been set [ 223.699855][T16250] dlm: cannot start dlm midcomms -107 [ 223.816755][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5075'. [ 223.843290][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5075'. [ 223.926296][T16277] loop5: detected capacity change from 0 to 64 [ 223.990591][T16280] netlink: 'syz.1.5080': attribute type 7 has an invalid length. [ 223.993863][T16280] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5080'. [ 224.075962][T16288] netlink: 'syz.2.5083': attribute type 1 has an invalid length. [ 224.240522][T16304] loop1: detected capacity change from 0 to 512 [ 224.265674][T16306] netlink: 'syz.5.5100': attribute type 11 has an invalid length. [ 224.272055][T16304] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 224.325575][T16313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5091'. [ 224.343163][T16304] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #16: comm syz.1.5090: casefold flag without casefold feature [ 224.346156][T16304] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.5090: couldn't read orphan inode 16 (err -117) [ 224.388044][T16304] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,grpjquota=./file2,grpquota,nombcache,nouid32,,errors=continue. Quota mode: writeback. [ 224.484081][T16304] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 224.485977][T16304] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 224.513512][T16304] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.5090: Failed to acquire dquot type 0 [ 224.552491][T16259] loop6: detected capacity change from 0 to 32768 [ 224.575305][T16326] ieee802154 phy0 wpan0: encryption failed: -90 [ 224.611478][T16259] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.5072 (16259) [ 224.672639][T16259] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 224.674443][T16259] BTRFS info (device loop6): using free space tree [ 224.675708][T16259] BTRFS info (device loop6): has skinny extents [ 224.695696][T16338] loop1: detected capacity change from 0 to 64 [ 224.730203][T16330] loop5: detected capacity change from 0 to 4096 [ 224.809559][T16353] Timeout policy `syz0' can only be used by L3 protocol number 5 [ 224.844063][T16330] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 224.909583][T16330] ntfs3: loop5: Failed to load $Extend. [ 224.990670][T16259] BTRFS info (device loop6): enabling ssd optimizations [ 225.232843][T16380] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 225.469880][T16324] loop2: detected capacity change from 0 to 32768 [ 225.471467][T16388] wlan1 speed is unknown, defaulting to 1000 [ 225.473081][T16388] wlan1 speed is unknown, defaulting to 1000 [ 225.476692][T16388] wlan1 speed is unknown, defaulting to 1000 [ 225.493375][T16388] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 225.503165][T16392] ieee802154 phy0 wpan0: encryption failed: -90 [ 225.514410][T16324] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5094 (16324) [ 225.523473][T16388] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 225.576455][T16388] wlan1 speed is unknown, defaulting to 1000 [ 225.580721][T16397] __nla_validate_parse: 1 callbacks suppressed [ 225.580733][T16397] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5118'. [ 225.588408][T16388] wlan1 speed is unknown, defaulting to 1000 [ 225.590417][T16388] wlan1 speed is unknown, defaulting to 1000 [ 225.632922][T16324] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 225.634661][T16324] BTRFS info (device loop2): using free space tree [ 225.636008][T16324] BTRFS info (device loop2): has skinny extents [ 225.649093][T16388] wlan1 speed is unknown, defaulting to 1000 [ 225.650853][T16388] wlan1 speed is unknown, defaulting to 1000 [ 225.843919][T16428] loop6: detected capacity change from 0 to 256 [ 225.847110][T16324] BTRFS info (device loop2): enabling ssd optimizations [ 225.973447][T16432] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 226.108861][T16395] loop1: detected capacity change from 0 to 32768 [ 226.318280][T16395] XFS (loop1): Mounting V5 Filesystem [ 226.454555][T16451] cgroup: name respecified [ 226.479129][T16395] XFS (loop1): Ending clean mount [ 226.505248][T16463] MTD: Couldn't look up '/dev/md0': -2 [ 226.584345][ T4023] XFS (loop1): Unmounting Filesystem [ 226.847807][T16487] loop2: detected capacity change from 0 to 256 [ 226.942696][T16487] FAT-fs (loop2): Directory bread(block 64) failed [ 226.974365][T16487] FAT-fs (loop2): Directory bread(block 65) failed [ 226.975736][T16487] FAT-fs (loop2): Directory bread(block 66) failed [ 226.977230][T16487] FAT-fs (loop2): Directory bread(block 67) failed [ 226.978649][T16487] FAT-fs (loop2): Directory bread(block 68) failed [ 226.979955][T16487] FAT-fs (loop2): Directory bread(block 69) failed [ 226.981256][T16487] FAT-fs (loop2): Directory bread(block 70) failed [ 226.982638][T16487] FAT-fs (loop2): Directory bread(block 71) failed [ 226.983903][T16487] FAT-fs (loop2): Directory bread(block 72) failed [ 227.005737][T16487] FAT-fs (loop2): Directory bread(block 73) failed [ 227.331680][T16521] IPv6: NLM_F_REPLACE set, but no existing node found! [ 227.353575][T16511] loop1: detected capacity change from 0 to 2048 [ 227.395883][T16511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.538490][T16534] loop2: detected capacity change from 0 to 1024 [ 227.605454][T16541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5174'. [ 227.650654][T16543] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5175'. [ 227.700515][T16546] xt_hashlimit: max too large, truncated to 1048576 [ 227.702252][T16546] Cannot find del_set index 4 as target [ 227.852279][T16560] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 227.969877][T16575] loop1: detected capacity change from 0 to 64 [ 228.001993][T16577] binder: 16576:16577 ioctl c018620b 9999999999999999 returned -14 [ 228.130525][T16586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5197'. [ 228.259950][T16597] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 228.287306][T16597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.413039][T16600] loop6: detected capacity change from 0 to 4096 [ 228.440488][T16612] loop1: detected capacity change from 0 to 8 [ 228.497345][T16600] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 228.786700][T16634] loop5: detected capacity change from 0 to 256 [ 228.819501][T16626] loop2: detected capacity change from 0 to 4096 [ 228.860649][T16626] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 228.871447][T16643] siw: device registration error -23 [ 228.880702][T16634] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84977, utbl_chksum : 0xe619d30d) [ 228.891800][T16626] ntfs: (device loop2): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 228.893655][T16626] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 228.937768][T16626] ntfs: volume version 3.1. [ 228.965892][T16626] ntfs: (device loop2): ntfs_nlstoucs(): Name using character set cp864 contains characters that cannot be converted to Unicode. [ 228.984748][T16626] ntfs: (device loop2): ntfs_lookup(): Failed to convert name to Unicode. [ 229.030284][T16651] loop4: detected capacity change from 0 to 1024 [ 229.224899][T16668] binder: 16667:16668 ioctl c0046209 9999999999999999 returned -22 [ 229.305094][T16676] loop6: detected capacity change from 0 to 1024 [ 229.382011][T16682] overlayfs: overlapping lowerdir path [ 229.389226][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5244'. [ 229.438961][T16686] loop1: detected capacity change from 0 to 1024 [ 229.578666][ T4023] hfsplus: bad catalog entry type [ 229.611186][T16700] loop2: detected capacity change from 0 to 4096 [ 229.639818][T16700] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 229.683075][T16707] loop4: detected capacity change from 0 to 256 [ 229.708986][T16700] ntfs: volume version 3.1. [ 229.778892][T16707] FAT-fs (loop4): Directory bread(block 64) failed [ 229.780449][T16707] FAT-fs (loop4): Directory bread(block 65) failed [ 229.781799][T16707] FAT-fs (loop4): Directory bread(block 66) failed [ 229.783001][T16707] FAT-fs (loop4): Directory bread(block 67) failed [ 229.784429][T16707] FAT-fs (loop4): Directory bread(block 68) failed [ 229.785667][T16707] FAT-fs (loop4): Directory bread(block 69) failed [ 229.818215][T16707] FAT-fs (loop4): Directory bread(block 70) failed [ 229.819665][T16707] FAT-fs (loop4): Directory bread(block 71) failed [ 229.825448][T16707] FAT-fs (loop4): Directory bread(block 72) failed [ 229.826706][T16707] FAT-fs (loop4): Directory bread(block 73) failed [ 230.023847][T16725] loop5: detected capacity change from 0 to 64 [ 230.028851][T16726] loop2: detected capacity change from 0 to 256 [ 230.054214][T16728] netlink: 'syz.6.5266': attribute type 10 has an invalid length. [ 230.092905][T16726] FAT-fs (loop2): Directory bread(block 64) failed [ 230.094287][T16726] FAT-fs (loop2): Directory bread(block 65) failed [ 230.095784][T16726] FAT-fs (loop2): Directory bread(block 66) failed [ 230.107390][T16726] FAT-fs (loop2): Directory bread(block 67) failed [ 230.109097][ T4103] hfsplus: b-tree write err: -5, ino 4 [ 230.115042][T16726] FAT-fs (loop2): Directory bread(block 68) failed [ 230.133392][T16726] FAT-fs (loop2): Directory bread(block 69) failed [ 230.134789][T16726] FAT-fs (loop2): Directory bread(block 70) failed [ 230.136137][T16726] FAT-fs (loop2): Directory bread(block 71) failed [ 230.145122][T16726] FAT-fs (loop2): Directory bread(block 72) failed [ 230.146457][T16726] FAT-fs (loop2): Directory bread(block 73) failed [ 230.174892][T16730] binder: 16729 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 230.174919][T16730] binder: 16729:16730 ioctl c018620c 20001180 returned -22 [ 230.419260][ T148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.425836][T16732] netlink: 'syz.4.5268': attribute type 21 has an invalid length. [ 230.449761][T16741] loop2: detected capacity change from 0 to 2048 [ 230.497531][T16741] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.501214][ T148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.670392][ T148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.779749][T16763] netlink: 'syz.5.5285': attribute type 1 has an invalid length. [ 230.795002][ T148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.361908][T16806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.383467][T16809] loop5: detected capacity change from 0 to 64 [ 231.475519][T16774] wlan1 speed is unknown, defaulting to 1000 [ 231.603741][T16819] netlink: 'syz.2.5310': attribute type 7 has an invalid length. [ 231.616523][T16821] netlink: 'syz.5.5311': attribute type 2 has an invalid length. [ 231.627631][T16821] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5311'. [ 231.801319][T16827] loop5: detected capacity change from 0 to 4096 [ 231.829013][T16827] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 231.911334][T16789] loop4: detected capacity change from 0 to 32768 [ 232.060248][T16841] netlink: 'syz.2.5322': attribute type 30 has an invalid length. [ 232.062814][T16839] loop6: detected capacity change from 0 to 4096 [ 232.090847][T16843] loop5: detected capacity change from 0 to 2048 [ 232.124289][T16839] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 232.126560][T16839] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 232.165122][T16839] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 232.199345][T16839] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 232.206394][T16843] cgroup: Invalid name [ 232.231285][T16839] ntfs: volume version 3.1. [ 232.328886][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5328'. [ 232.428142][T16774] chnl_net:caif_netlink_parms(): no params data found [ 232.965533][T16902] netlink: 'syz.2.5347': attribute type 29 has an invalid length. [ 232.973087][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5347'. [ 232.977543][ T4245] Bluetooth: hci0: command 0x0409 tx timeout [ 233.066717][T16902] netlink: 'syz.2.5347': attribute type 29 has an invalid length. [ 233.069448][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5347'. [ 233.077638][T16774] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.096250][T16904] loop5: detected capacity change from 0 to 4096 [ 233.100006][T16774] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.102427][T16774] device bridge_slave_0 entered promiscuous mode [ 233.184935][T16904] ntfs: volume version 3.1. [ 233.198279][T16774] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.199683][T16774] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.201806][T16774] device bridge_slave_1 entered promiscuous mode [ 233.537997][T16774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.570622][T16938] netlink: 'syz.6.5360': attribute type 3 has an invalid length. [ 233.572308][T16938] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5360'. [ 233.629144][T16774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.744874][T16945] loop6: detected capacity change from 0 to 2048 [ 233.789047][T16774] team0: Port device team_slave_0 added [ 233.813233][T16948] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.824563][T16774] team0: Port device team_slave_1 added [ 233.922174][T16951] netlink: 'syz.5.5365': attribute type 2 has an invalid length. [ 233.940863][T16774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.942320][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.948867][T16774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.952353][ T148] IPVS: stopping backup sync thread 9467 ... [ 233.955410][T16774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.968524][T16774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.975308][T16774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.038893][T16914] loop2: detected capacity change from 0 to 32768 [ 234.185100][T16964] loop6: detected capacity change from 0 to 512 [ 234.196190][T16964] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 234.211129][T16914] XFS (loop2): Mounting V5 Filesystem [ 234.330083][T16914] XFS (loop2): Ending clean mount [ 234.388201][T16964] __quota_error: 13 callbacks suppressed [ 234.388216][T16964] Quota error (device loop6): find_tree_dqentry: Getting block too big (4 >= 1) [ 234.397255][T16774] device hsr_slave_0 entered promiscuous mode [ 234.404333][T16964] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 234.433035][T16964] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.5369: Failed to acquire dquot type 0 [ 234.437326][ T4030] XFS (loop2): Unmounting Filesystem [ 234.449064][T16774] device hsr_slave_1 entered promiscuous mode [ 234.449996][T16964] EXT4-fs (loop6): Remounting filesystem read-only [ 234.469795][T16989] loop5: detected capacity change from 0 to 256 [ 234.477826][T16964] Quota error (device loop6): find_tree_dqentry: Getting block too big (4 >= 1) [ 234.480445][T16774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.481607][T16964] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 234.483351][T16774] Cannot create hsr debugfs directory [ 234.485240][T16964] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.5369: Failed to acquire dquot type 0 [ 234.494842][T16964] EXT4-fs (loop6): Remounting filesystem read-only [ 234.496774][T16964] Quota error (device loop6): find_tree_dqentry: Getting block too big (4 >= 1) [ 234.507608][T16964] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 234.509482][T16964] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.5369: Failed to acquire dquot type 0 [ 234.517446][T16964] EXT4-fs (loop6): Remounting filesystem read-only [ 234.518927][T16964] EXT4-fs (loop6): 1 orphan inode deleted [ 234.520168][T16964] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noblock_validity,lazytime,barrier=0x0000000000000006,init_itable,init_itable,nodelalloc,usrquota,resgid=0x000000000000ee002. Quota mode: writeback. [ 234.568626][T16979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5371'. [ 234.687081][T16998] ceph: No source [ 234.999907][ T148] device hsr_slave_0 left promiscuous mode [ 235.042811][T17013] loop5: detected capacity change from 0 to 4096 [ 235.044493][ T148] device hsr_slave_1 left promiscuous mode [ 235.057089][ T4248] Bluetooth: hci0: command 0x041b tx timeout [ 235.088147][T17013] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 235.090658][T17013] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 235.108077][T17013] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 235.110429][T17013] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 235.136668][T17013] ntfs: volume version 3.1. [ 235.138149][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.139573][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.142057][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.143695][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.161059][ T148] device bridge_slave_1 left promiscuous mode [ 235.162493][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.188774][ T148] device bridge_slave_0 left promiscuous mode [ 235.190191][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.194316][T17029] loop2: detected capacity change from 0 to 2048 [ 235.210144][T17022] loop6: detected capacity change from 0 to 4096 [ 235.245579][T17029] loop2: p3 p4 < > [ 235.246542][T17029] loop2: p3 start 4284289 is beyond EOD, truncated [ 235.267449][T17022] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 235.313416][T17029] affs: No valid root block on device loop2p4 [ 235.337609][T17034] loop4: detected capacity change from 0 to 1024 [ 235.343721][T17022] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 235.365675][ T9238] ntfs3: loop6: ino=1b, Internal error [ 235.367392][ T9238] ntfs3: loop6: ntfs3_write_inode r=1b failed, -22. [ 235.375218][ T148] device veth1_macvtap left promiscuous mode [ 235.376619][ T148] device veth0_macvtap left promiscuous mode [ 235.382204][ T3642] loop2: p3 p4 < > [ 235.383121][ T148] device veth1_vlan left promiscuous mode [ 235.383250][ T3642] loop2: p3 start 4284289 is beyond EOD, truncated [ 235.384400][ T148] device veth0_vlan left promiscuous mode [ 235.454464][T17040] ipt_CLUSTERIP: Please specify destination IP [ 235.588263][T17048] SET target dimension over the limit! [ 235.754275][T17054] loop4: detected capacity change from 0 to 4096 [ 235.783318][T17054] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 235.849510][T17054] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 235.943772][T17054] ntfs3: loop4: ino=21, "file5" The size of extended attributes must not exceed 64KiB [ 235.976340][T17060] loop2: detected capacity change from 0 to 8192 [ 236.022183][T17060] loop2: AHDI p1 p2 p4 [ 236.024526][T17060] loop2: p4 start 40969 is beyond EOD, truncated [ 236.040432][ T148] bond1 (unregistering): Released all slaves [ 236.092794][ T6334] udevd[6334]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 236.113644][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5408'. [ 236.115795][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5408'. [ 236.122046][ T3642] loop2: AHDI p1 p2 p4 [ 236.123733][ T3642] loop2: p4 start 40969 is beyond EOD, truncated [ 236.273451][ T6334] udevd[6334]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 236.388087][ T6334] udevd[6334]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 236.407413][ T6334] udevd[6334]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 236.551716][ T148] team0 (unregistering): Port device team_slave_1 removed [ 236.563497][ T148] team0 (unregistering): Port device team_slave_0 removed [ 236.574728][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.627222][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.794413][ T148] bond0 (unregistering): Released all slaves [ 236.891853][T17078] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 236.995709][T17082] loop6: detected capacity change from 0 to 256 [ 237.066568][T17082] FAT-fs (loop6): Directory bread(block 64) failed [ 237.087084][T17082] FAT-fs (loop6): Directory bread(block 65) failed [ 237.088502][T17082] FAT-fs (loop6): Directory bread(block 66) failed [ 237.089884][T17082] FAT-fs (loop6): Directory bread(block 67) failed [ 237.105003][T17082] FAT-fs (loop6): Directory bread(block 68) failed [ 237.106348][T17082] FAT-fs (loop6): Directory bread(block 69) failed [ 237.128432][T17082] FAT-fs (loop6): Directory bread(block 70) failed [ 237.129814][T17082] FAT-fs (loop6): Directory bread(block 71) failed [ 237.131128][T17082] FAT-fs (loop6): Directory bread(block 72) failed [ 237.132438][T17082] FAT-fs (loop6): Directory bread(block 73) failed [ 237.137344][ T4248] Bluetooth: hci0: command 0x040f tx timeout [ 237.358141][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5429'. [ 237.360041][T17112] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 237.398750][T17112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.554530][T17123] tc_dump_action: action bad kind [ 237.693805][T16774] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 237.892968][T17159] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5448'. [ 237.894851][T17159] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5448'. [ 237.895989][T16774] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 237.943795][T17164] loop6: detected capacity change from 0 to 512 [ 237.995753][T17164] EXT2-fs (loop6): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 238.038028][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5452'. [ 238.064958][T16774] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 238.106774][T16774] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 238.305588][T17194] loop5: detected capacity change from 0 to 512 [ 238.353936][T17194] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.449160][T17194] EXT4-fs (loop5): 1 orphan inode deleted [ 238.450482][T17194] EXT4-fs (loop5): 1 truncate cleaned up [ 238.451730][T17194] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,max_dir_size_kb=0x0000000000000008,errors=remount-ro,grpid,journal_dev=0x000000007fffffff,auto_da_alloc,. Quota mode: none. [ 238.494081][T17207] loop4: detected capacity change from 0 to 2048 [ 238.593184][T17207] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 238.606025][T17207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 238.612090][ T9061] EXT4-fs error (device loop5): __ext4_iget:4872: inode #11: block 524051: comm syz-executor: invalid block [ 238.633096][ T9061] EXT4-fs (loop5): Remounting filesystem read-only [ 238.643065][ T9061] EXT4-fs error (device loop5): __ext4_iget:4872: inode #11: block 524051: comm syz-executor: invalid block [ 238.653186][ T9061] EXT4-fs (loop5): Remounting filesystem read-only [ 238.859809][T17230] loop6: detected capacity change from 0 to 256 [ 238.984553][T17239] netlink: 'syz.2.5482': attribute type 3 has an invalid length. [ 239.054718][T17242] loop4: detected capacity change from 0 to 256 [ 239.093348][T16774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.136211][T17242] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 239.165098][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.167793][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.212127][T16774] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.219960][ T4245] Bluetooth: hci0: command 0x0419 tx timeout [ 239.220907][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.224449][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.237076][ T4103] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.238717][ T4103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.241036][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.287934][T17249] loop2: detected capacity change from 0 to 256 [ 239.431409][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.433583][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.435595][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.437111][ T696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.443712][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.450590][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.456386][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.462279][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.464586][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.578756][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.581309][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.594474][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.596620][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.711139][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.713507][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.745600][T16774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.045430][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.048444][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.101014][T17277] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 240.118322][T17277] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 240.327316][T16774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.466534][T17304] ufs: You didn't specify the type of your ufs filesystem [ 240.466534][T17304] [ 240.466534][T17304] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 240.466534][T17304] [ 240.466534][T17304] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 240.495911][T17304] ufs: ufstype=old is supported read-only [ 240.510144][ T226] block nbd6: Attempted send on invalid socket [ 240.511402][ T226] blk_update_request: I/O error, dev nbd6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.672312][T17317] loop6: detected capacity change from 0 to 512 [ 240.682617][T17315] loop4: detected capacity change from 0 to 256 [ 240.731959][T17317] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.766469][T17317] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8003e119, mo2=0000] [ 240.793950][T17317] EXT4-fs error (device loop6): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 240.800709][T17317] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #12: comm syz.6.5506: corrupted inode contents [ 240.807155][T17317] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #12: comm syz.6.5506: mark_inode_dirty error [ 240.809906][T17317] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #12: comm syz.6.5506: corrupted inode contents [ 240.812636][T17317] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #12: comm syz.6.5506: mark_inode_dirty error [ 240.852270][T17317] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #12: comm syz.6.5506: corrupted inode contents [ 240.873556][T17317] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 240.875868][T17317] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #12: comm syz.6.5506: corrupted inode contents [ 240.878715][T17317] EXT4-fs error (device loop6): ext4_truncate:4272: inode #12: comm syz.6.5506: mark_inode_dirty error [ 240.881256][T17317] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 240.884340][T17317] EXT4-fs (loop6): 1 truncate cleaned up [ 240.885678][T17317] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,nombcache,norecovery,barrier=0x000000000000000c,noblock_validity,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 240.916176][ T136] __quota_error: 12 callbacks suppressed [ 240.916191][ T136] Quota error (device loop6): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 240.919996][ T136] EXT4-fs error (device loop6): ext4_release_dquot:6220: comm kworker/u4:1: Failed to release dquot type 1 [ 241.043518][ T696] Quota error (device loop6): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 241.045894][ T696] EXT4-fs error (device loop6): ext4_release_dquot:6220: comm kworker/u4:5: Failed to release dquot type 1 [ 241.196808][T17347] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5512'. [ 241.355100][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.357670][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.414035][T17364] loop4: detected capacity change from 0 to 16 [ 241.462229][T17364] erofs: (device loop4): mounted with root inode @ nid 36. [ 241.865661][ T148] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.870918][T17325] wlan1 speed is unknown, defaulting to 1000 [ 241.871146][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5525'. [ 241.876719][T17386] netlink: 45 bytes leftover after parsing attributes in process `syz.4.5528'. [ 241.879807][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.887402][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.898758][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.918311][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.008258][ T148] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.064518][ T148] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.086029][T16774] device veth0_vlan entered promiscuous mode [ 242.136462][ T148] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.170675][T17412] xt_cgroup: path and classid specified [ 242.243475][T17414] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 242.341446][T16774] device veth1_vlan entered promiscuous mode [ 242.401218][T17422] netlink: 'syz.4.5543': attribute type 3 has an invalid length. [ 242.403122][T17422] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5543'. [ 242.420676][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.427547][T17420] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5542'. [ 242.429767][T17420] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5542'. [ 242.675426][T17433] loop4: detected capacity change from 0 to 2048 [ 242.742009][T17403] loop2: detected capacity change from 0 to 32768 [ 242.754651][T17433] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.809112][T17433] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 242.811918][T17433] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 242.816825][T17403] JBD2: Ignoring recovery information on journal [ 242.858808][T16970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.861139][T16970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.864201][T16774] device veth0_macvtap entered promiscuous mode [ 242.962284][T17403] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 242.996451][ T5860] Bluetooth: hci1: command 0x0409 tx timeout [ 243.022732][T17325] chnl_net:caif_netlink_parms(): no params data found [ 243.040180][T16774] device veth1_macvtap entered promiscuous mode [ 243.121854][ T4030] ocfs2: Unmounting device (7,2) on (node local) [ 243.163272][T17456] loop6: detected capacity change from 0 to 4096 [ 243.247140][T17458] loop4: detected capacity change from 0 to 4096 [ 243.298240][T17458] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 243.350137][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.352303][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.354176][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.356422][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.382165][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.384292][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.386013][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.436195][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.469106][T16774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.607353][T17476] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5557'. [ 243.645199][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.648892][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.650959][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.653253][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.664381][T17479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.833113][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.835149][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.860506][T17462] loop2: detected capacity change from 0 to 32768 [ 243.890963][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.893067][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.894941][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.927036][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.929194][T16774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.931371][T16774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.966091][T16774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.981859][T17462] XFS: noikeep mount option is deprecated. [ 244.024994][T17493] loop6: detected capacity change from 0 to 4096 [ 244.050282][T17493] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 244.053540][T17462] XFS (loop2): Mounting V5 Filesystem [ 244.081023][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.083983][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.122104][T17493] ntfs: volume version 3.1. [ 244.143537][T16774] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.145661][T16774] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.214563][T17462] XFS (loop2): Ending clean mount [ 244.217631][T17462] XFS (loop2): Quotacheck needed: Please wait. [ 244.227213][T16774] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.229068][T16774] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.252618][T17325] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.254344][T17325] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.256480][T17325] device bridge_slave_0 entered promiscuous mode [ 244.281901][T17514] loop4: detected capacity change from 0 to 2048 [ 244.341265][T17462] XFS (loop2): Quotacheck: Done. [ 244.394452][T17514] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.400643][ T4030] XFS (loop2): Unmounting Filesystem [ 244.406102][T17325] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.420643][T17325] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.422886][T17325] device bridge_slave_1 entered promiscuous mode [ 244.600545][T17516] loop6: detected capacity change from 0 to 32768 [ 244.619476][T17516] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.5568 (17516) [ 244.675457][T17325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.710706][T17516] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 244.713048][T17516] BTRFS info (device loop6): turning off barriers [ 244.714433][T17516] BTRFS info (device loop6): setting nodatasum [ 244.715785][T17516] BTRFS info (device loop6): enabling auto defrag [ 244.722712][T17516] BTRFS info (device loop6): allowing degraded mounts [ 244.724335][T17516] BTRFS info (device loop6): force zlib compression, level 3 [ 244.738200][T17516] BTRFS info (device loop6): turning on async discard [ 244.739639][T17516] BTRFS info (device loop6): doing ref verification [ 244.740956][T17516] BTRFS info (device loop6): using free space tree [ 244.742587][T17516] BTRFS info (device loop6): has skinny extents [ 244.790117][T17325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.811460][T17521] netlink: 'syz.4.5570': attribute type 10 has an invalid length. [ 244.841956][T17521] team0: Device hsr_slave_0 failed to register rx_handler [ 245.031894][T17549] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 245.067600][ T5922] Bluetooth: hci1: command 0x041b tx timeout [ 245.172246][ T4103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.174537][ T4103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.214465][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.261732][T17325] team0: Port device team_slave_0 added [ 245.566184][T17325] team0: Port device team_slave_1 added [ 245.660355][T17568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5576'. [ 245.797482][T16970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.799508][T16970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.826454][T17325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.843448][T17559] loop4: detected capacity change from 0 to 32768 [ 245.863972][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.877263][T17325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.914680][T17559] (syz.4.5574,17559,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 245.926055][T13817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.941224][T17559] (syz.4.5574,17559,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 245.950964][T17583] netlink: 'syz.2.5583': attribute type 30 has an invalid length. [ 245.965897][T17325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.968121][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.972546][T17559] JBD2: Ignoring recovery information on journal [ 245.974193][T17325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.054585][T17590] loop7: detected capacity change from 0 to 512 [ 246.072852][T17592] loop2: detected capacity change from 0 to 64 [ 246.187138][T17559] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 246.220711][T17559] [ 246.221261][T17559] ====================================================== [ 246.222742][T17559] WARNING: possible circular locking dependency detected [ 246.224314][T17559] 5.15.173-syzkaller #0 Not tainted [ 246.225495][T17559] ------------------------------------------------------ [ 246.227090][T17559] syz.4.5574/17559 is trying to acquire lock: [ 246.228525][T17559] ffff0000e97742c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1b8/0x260 [ 246.231230][T17559] [ 246.231230][T17559] but task is already holding lock: [ 246.232629][T17559] ffff0000ee6ca0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x24c/0xa90 [ 246.234960][T17559] [ 246.234960][T17559] which lock already depends on the new lock. [ 246.234960][T17559] [ 246.237276][T17559] [ 246.237276][T17559] the existing dependency chain (in reverse order) is: [ 246.239662][T17559] [ 246.239662][T17559] -> #6 (&dquot->dq_lock){+.+.}-{3:3}: [ 246.241341][T17559] __mutex_lock_common+0x194/0x2154 [ 246.242538][T17559] mutex_lock_nested+0xa4/0xf8 [ 246.243797][T17559] dquot_commit+0x54/0x240 [ 246.244893][T17559] ext4_write_dquot+0x1b4/0x314 [ 246.245973][T17559] ext4_mark_dquot_dirty+0xe8/0x140 [ 246.247226][T17559] mark_all_dquot_dirty+0x108/0x424 [ 246.248493][T17559] __dquot_free_space+0x878/0xce8 [ 246.249697][T17559] ext4_free_blocks+0x1bf8/0x2bdc [ 246.250778][T17559] ext4_ext_remove_space+0x1c48/0x4254 [ 246.252005][T17559] ext4_ext_truncate+0x188/0x250 [ 246.253280][T17559] ext4_truncate+0x9c4/0x1058 [ 246.254659][T17559] ext4_process_orphan+0x180/0x2b8 [ 246.255856][T17559] ext4_orphan_cleanup+0x8bc/0x1048 [ 246.257263][T17559] ext4_fill_super+0x8044/0x8768 [ 246.258383][T17559] mount_bdev+0x274/0x370 [ 246.259460][T17559] ext4_mount+0x44/0x58 [ 246.260409][T17559] legacy_get_tree+0xd4/0x16c [ 246.261624][T17559] vfs_get_tree+0x90/0x274 [ 246.262837][T17559] do_new_mount+0x278/0x8fc [ 246.263945][T17559] path_mount+0x594/0x101c [ 246.265224][T17559] __arm64_sys_mount+0x510/0x5e0 [ 246.266440][T17559] invoke_syscall+0x98/0x2b8 [ 246.267499][T17559] el0_svc_common+0x138/0x258 [ 246.268987][T17559] do_el0_svc+0x58/0x14c [ 246.269951][T17559] el0_svc+0x7c/0x1f0 [ 246.270960][T17559] el0t_64_sync_handler+0x84/0xe4 [ 246.272175][T17559] el0t_64_sync+0x1a0/0x1a4 [ 246.273272][T17559] [ 246.273272][T17559] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 246.275048][T17559] down_write+0xbc/0x12c [ 246.276305][T17559] ext4_truncate+0x7c0/0x1058 [ 246.277677][T17559] ext4_setattr+0xc48/0x1440 [ 246.278840][T17559] notify_change+0xa34/0xcf8 [ 246.279952][T17559] do_truncate+0x1c0/0x28c [ 246.281204][T17559] do_sys_ftruncate+0x288/0x31c [ 246.282414][T17559] __arm64_sys_ftruncate+0x60/0x74 [ 246.283765][T17559] invoke_syscall+0x98/0x2b8 [ 246.284983][T17559] el0_svc_common+0x138/0x258 [ 246.286100][T17559] do_el0_svc+0x58/0x14c [ 246.287023][T17559] el0_svc+0x7c/0x1f0 [ 246.288082][T17559] el0t_64_sync_handler+0x84/0xe4 [ 246.289185][T17559] el0t_64_sync+0x1a0/0x1a4 [ 246.290479][T17559] [ 246.290479][T17559] -> #4 (jbd2_handle){++++}-{0:0}: [ 246.292187][T17559] start_this_handle+0xfc0/0x12a4 [ 246.293445][T17559] jbd2__journal_start+0x29c/0x7b4 [ 246.294803][T17559] jbd2_journal_start+0x3c/0x4c [ 246.295976][T17559] ocfs2_start_trans+0x468/0x804 [ 246.297171][T17559] ocfs2_shutdown_local_alloc+0x1d8/0x8d8 [ 246.298528][T17559] ocfs2_dismount_volume+0x1d8/0x904 [ 246.299738][T17559] ocfs2_put_super+0xec/0x350 [ 246.300885][T17559] generic_shutdown_super+0x130/0x2f0 [ 246.302134][T17559] kill_block_super+0x70/0xdc [ 246.303413][T17559] deactivate_locked_super+0xb8/0x13c [ 246.304691][T17559] deactivate_super+0x108/0x128 [ 246.305869][T17559] cleanup_mnt+0x3c0/0x474 [ 246.306914][T17559] __cleanup_mnt+0x20/0x30 [ 246.308086][T17559] task_work_run+0x130/0x1e4 [ 246.309318][T17559] do_notify_resume+0x262c/0x32b8 [ 246.310579][T17559] el0_svc+0xfc/0x1f0 [ 246.311693][T17559] el0t_64_sync_handler+0x84/0xe4 [ 246.313072][T17559] el0t_64_sync+0x1a0/0x1a4 [ 246.314326][T17559] [ 246.314326][T17559] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 246.316352][T17559] down_read+0xc0/0x398 [ 246.317461][T17559] ocfs2_start_trans+0x45c/0x804 [ 246.318777][T17559] ocfs2_shutdown_local_alloc+0x1d8/0x8d8 [ 246.320263][T17559] ocfs2_dismount_volume+0x1d8/0x904 [ 246.321607][T17559] ocfs2_put_super+0xec/0x350 [ 246.322606][T17559] generic_shutdown_super+0x130/0x2f0 [ 246.323824][T17559] kill_block_super+0x70/0xdc [ 246.324949][T17559] deactivate_locked_super+0xb8/0x13c [ 246.326287][T17559] deactivate_super+0x108/0x128 [ 246.327341][T17559] cleanup_mnt+0x3c0/0x474 [ 246.328503][T17559] __cleanup_mnt+0x20/0x30 [ 246.329670][T17559] task_work_run+0x130/0x1e4 [ 246.330959][T17559] do_notify_resume+0x262c/0x32b8 [ 246.332212][T17559] el0_svc+0xfc/0x1f0 [ 246.333287][T17559] el0t_64_sync_handler+0x84/0xe4 [ 246.334542][T17559] el0t_64_sync+0x1a0/0x1a4 [ 246.335672][T17559] [ 246.335672][T17559] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 246.337187][T17559] ocfs2_start_trans+0x2dc/0x804 [ 246.338404][T17559] ocfs2_write_info+0x114/0x354 [ 246.339569][T17559] dquot_set_dqinfo+0x398/0x5f4 [ 246.340793][T17559] quota_setinfo+0x3d8/0x524 [ 246.341913][T17559] do_quotactl+0x4c0/0x698 [ 246.343048][T17559] __arm64_sys_quotactl+0x2d8/0x7a4 [ 246.344250][T17559] invoke_syscall+0x98/0x2b8 [ 246.345305][T17559] el0_svc_common+0x138/0x258 [ 246.346413][T17559] do_el0_svc+0x58/0x14c [ 246.347357][T17559] el0_svc+0x7c/0x1f0 [ 246.348341][T17559] el0t_64_sync_handler+0x84/0xe4 [ 246.349471][T17559] el0t_64_sync+0x1a0/0x1a4 [ 246.350512][T17559] [ 246.350512][T17559] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 246.352387][T17559] down_write+0xbc/0x12c [ 246.353434][T17559] ocfs2_lock_global_qf+0x1d4/0x260 [ 246.354636][T17559] ocfs2_write_info+0xdc/0x354 [ 246.355901][T17559] dquot_set_dqinfo+0x398/0x5f4 [ 246.357163][T17559] quota_setinfo+0x3d8/0x524 [ 246.358186][T17559] do_quotactl+0x4c0/0x698 [ 246.359126][T17559] __arm64_sys_quotactl+0x2d8/0x7a4 [ 246.360311][T17559] invoke_syscall+0x98/0x2b8 [ 246.361393][T17559] el0_svc_common+0x138/0x258 [ 246.362566][T17559] do_el0_svc+0x58/0x14c [ 246.363650][T17559] el0_svc+0x7c/0x1f0 [ 246.364802][T17559] el0t_64_sync_handler+0x84/0xe4 [ 246.366063][T17559] el0t_64_sync+0x1a0/0x1a4 [ 246.366170][T17590] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nouid32,discard,,errors=continue. Quota mode: writeback. [ 246.367216][T17559] [ 246.367216][T17559] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 246.367244][T17559] __lock_acquire+0x32d4/0x7638 [ 246.373279][T17559] lock_acquire+0x240/0x77c [ 246.374349][T17559] down_write+0xbc/0x12c [ 246.375449][T17559] ocfs2_lock_global_qf+0x1b8/0x260 [ 246.376704][T17559] ocfs2_acquire_dquot+0x258/0xa90 [ 246.377830][T17559] dqget+0x664/0xd0c [ 246.378714][T17559] dquot_set_dqblk+0x40/0xfec [ 246.379783][T17559] quota_setquota+0x5f4/0x728 [ 246.380801][T17559] do_quotactl+0x508/0x698 [ 246.381768][T17559] __arm64_sys_quotactl+0x2d8/0x7a4 [ 246.382960][T17559] invoke_syscall+0x98/0x2b8 [ 246.384031][T17559] el0_svc_common+0x138/0x258 [ 246.385124][T17559] do_el0_svc+0x58/0x14c [ 246.386098][T17559] el0_svc+0x7c/0x1f0 [ 246.386977][T17559] el0t_64_sync_handler+0x84/0xe4 [ 246.388228][T17559] el0t_64_sync+0x1a0/0x1a4 [ 246.389354][T17559] [ 246.389354][T17559] other info that might help us debug this: [ 246.389354][T17559] [ 246.391539][T17559] Chain exists of: [ 246.391539][T17559] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ei->i_data_sem --> &dquot->dq_lock [ 246.391539][T17559] [ 246.394965][T17559] Possible unsafe locking scenario: [ 246.394965][T17559] [ 246.396644][T17559] CPU0 CPU1 [ 246.397682][T17559] ---- ---- [ 246.398706][T17559] lock(&dquot->dq_lock); [ 246.399670][T17559] lock(&ei->i_data_sem); [ 246.401132][T17559] lock(&dquot->dq_lock); [ 246.402538][T17559] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 246.404097][T17559] [ 246.404097][T17559] *** DEADLOCK *** [ 246.404097][T17559] [ 246.405898][T17559] 2 locks held by syz.4.5574/17559: [ 246.407079][T17559] #0: ffff0000edc140e0 (&type->s_umount_key#102){++++}-{3:3}, at: user_get_super+0x11c/0x240 [ 246.409380][T17559] #1: ffff0000ee6ca0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x24c/0xa90 [ 246.411725][T17559] [ 246.411725][T17559] stack backtrace: [ 246.413029][T17559] CPU: 0 PID: 17559 Comm: syz.4.5574 Not tainted 5.15.173-syzkaller #0 [ 246.414828][T17559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.416953][T17559] Call trace: [ 246.417656][T17559] dump_backtrace+0x0/0x530 [ 246.418629][T17559] show_stack+0x2c/0x3c [ 246.419463][T17559] dump_stack_lvl+0x108/0x170 [ 246.420350][T17559] dump_stack+0x1c/0x58 [ 246.421251][T17559] print_circular_bug+0x150/0x1b8 [ 246.422325][T17559] check_noncircular+0x2cc/0x378 [ 246.423227][T17559] __lock_acquire+0x32d4/0x7638 [ 246.424203][T17559] lock_acquire+0x240/0x77c [ 246.425113][T17559] down_write+0xbc/0x12c [ 246.426006][T17559] ocfs2_lock_global_qf+0x1b8/0x260 [ 246.427121][T17559] ocfs2_acquire_dquot+0x258/0xa90 [ 246.428137][T17559] dqget+0x664/0xd0c [ 246.428893][T17559] dquot_set_dqblk+0x40/0xfec [ 246.429867][T17559] quota_setquota+0x5f4/0x728 [ 246.430857][T17559] do_quotactl+0x508/0x698 [ 246.431797][T17559] __arm64_sys_quotactl+0x2d8/0x7a4 [ 246.432882][T17559] invoke_syscall+0x98/0x2b8 [ 246.433862][T17559] el0_svc_common+0x138/0x258 [ 246.434863][T17559] do_el0_svc+0x58/0x14c [ 246.435700][T17559] el0_svc+0x7c/0x1f0 [ 246.436572][T17559] el0t_64_sync_handler+0x84/0xe4 [ 246.437621][T17559] el0t_64_sync+0x1a0/0x1a4 [ 246.469856][T17325] device hsr_slave_0 entered promiscuous mode [ 246.475273][ T4031] ocfs2: Unmounting device (7,4) on (node local) [ 246.586089][T17325] device hsr_slave_1 entered promiscuous mode [ 246.647094][T17325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.648746][T17325] Cannot create hsr debugfs directory [ 246.837753][T17325] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 246.879356][T17325] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 246.955155][ T148] device hsr_slave_0 left promiscuous mode [ 246.988123][ T148] device hsr_slave_1 left promiscuous mode [ 247.077088][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.079153][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.081155][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.082733][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.084580][ T148] device bridge_slave_1 left promiscuous mode [ 247.085961][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.128355][ T148] device bridge_slave_0 left promiscuous mode [ 247.129817][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.137183][ T5866] Bluetooth: hci1: command 0x040f tx timeout [ 247.267180][ T148] device veth1_macvtap left promiscuous mode [ 247.268489][ T148] device veth0_macvtap left promiscuous mode [ 247.269946][ T148] device veth1_vlan left promiscuous mode [ 247.378859][ T148] bond2 (unregistering): Released all slaves [ 247.470866][ T148] bond1 (unregistering): Released all slaves [ 247.536991][ T148] team0 (unregistering): Port device team_slave_1 removed [ 247.543474][ T148] team0 (unregistering): Port device team_slave_0 removed [ 247.556491][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.623607][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.746401][ T148] bond0 (unregistering): Released all slaves [ 247.851344][T17325] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 247.900614][T17325] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 248.005396][T17325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.015591][T17325] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.018474][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.020444][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.025349][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.033005][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.035148][ T640] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.036697][ T640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.039329][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.046128][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.053203][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.055082][ T640] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.056519][ T640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.068315][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.075202][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.077902][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.080251][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.083092][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.090326][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.092523][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.111980][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.114228][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.116382][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.125562][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.136667][T17325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.204948][T16970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.206637][T16970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.223918][T17325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.315999][T16970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.318103][T16970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.332261][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.334481][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.336618][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.346411][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.351228][T17325] device veth0_vlan entered promiscuous mode [ 248.365476][T17325] device veth1_vlan entered promiscuous mode [ 248.384872][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.386807][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.389831][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.391942][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.396482][T17325] device veth0_macvtap entered promiscuous mode [ 248.400675][T17325] device veth1_macvtap entered promiscuous mode [ 248.413706][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.416168][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.419343][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.421379][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.423405][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.425349][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.427544][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.429603][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.432665][T17325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.434165][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.436120][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.439227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.442329][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.446503][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.452211][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.454495][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.456772][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.460356][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.462683][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.464932][T17325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.468254][T17325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.471493][T17325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.477389][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.479510][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.488277][T17325] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.490068][T17325] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.491746][T17325] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.493642][T17325] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.527231][T17325] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 248.575316][T17325] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 248.578572][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.580222][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.583150][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.610678][ T696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.612265][ T696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.613769][ T4103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.221060][ T5922] Bluetooth: hci1: command 0x0419 tx timeout [ 253.938553][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.940144][ T2055] ieee802154 phy1 wpan1: encryption failed: -22