last executing test programs: 2.139736349s ago: executing program 2 (id=381): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2c020400) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 2.029761372s ago: executing program 0 (id=384): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="3c00000033000b12d25a80648c2594f90124fc60100c0340040000000f2000119215a2281cf6b809f2db60490d20a735b16b6a4479b406db26a57b35", 0x3c}], 0x1}, 0x0) 2.029392712s ago: executing program 3 (id=385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'netpci0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x3) 1.911747155s ago: executing program 4 (id=386): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/23, 0x17}, 0x8001}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4087, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) 1.757372129s ago: executing program 4 (id=388): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@newtaction={0x144, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x130, 0x1, [@m_connmark={0xe4, 0xb, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xe, 0x20000000, 0x10000, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x8001, 0x2000000c, 0x7, 0xfffffffa}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff860, 0x0, 0xffffffffffffffff, 0xffffffff, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x5, 0x1, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x80, 0x7}, 0x200}}]}, {0x25, 0x6, "0e4745b496a93223849e22923f7e0e1771959853da4c6c01fad7808805c18dcd56"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x48, 0xd, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0xffffffffffffffff, 0x6, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.67662328s ago: executing program 0 (id=389): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/softnet_stat\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) getresgid(0x0, &(0x7f00000002c0), 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, 0x0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setns(0xc9, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, 0x4f, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.631757502s ago: executing program 3 (id=390): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101180, 0x0) lseek(r0, 0x8, 0x0) read(r0, 0x0, 0x0) 1.570496403s ago: executing program 2 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x84000) 1.563021943s ago: executing program 4 (id=393): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x87, @local, 0x15, 0x4, 'lc\x00', 0x28, 0x5, 0x72}, 0x2c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000810}, 0x8010) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.391750538s ago: executing program 0 (id=394): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup(r0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setownex(r0, 0xf, &(0x7f0000001700)={0x2}) 1.391645967s ago: executing program 3 (id=395): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x2) setxattr$incfs_id(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000300), &(0x7f0000000340)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) 1.355380718s ago: executing program 1 (id=396): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c) 1.212351391s ago: executing program 0 (id=397): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000002cbd7000ffdbdf25030006003c00000002004e20e0000001000000000000000003000500ff00000002004e30640101020000000000000000020013"], 0x50}, 0x1, 0x7}, 0x0) 1.163776123s ago: executing program 1 (id=398): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'veth0_to_hsr\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x0, 0x1}}}) 1.163682273s ago: executing program 2 (id=399): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x8000000000000000, 0x2000) ioctl$BLKSECTGET(r0, 0x1267, 0x0) 1.054786145s ago: executing program 3 (id=400): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x400000}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x2000000, @loopback}, 0x1c) 999.313267ms ago: executing program 0 (id=401): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r1}}, 0x18) 935.737358ms ago: executing program 1 (id=402): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r1, @ANYBLOB="09000000000000000000140000000c0003800800010008000000580007"], 0x19c}}, 0x0) 856.87714ms ago: executing program 3 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}}, 0x40) 835.110481ms ago: executing program 2 (id=404): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000001380)=""/117, 0x75}], 0x2, 0x3, 0x5, 0x0) 663.709524ms ago: executing program 3 (id=405): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 663.616504ms ago: executing program 1 (id=406): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlink(&(0x7f00000001c0)='./file0\x00') 609.626856ms ago: executing program 2 (id=407): unshare(0x2a060400) r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x1c1300) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x49cdee) 580.241347ms ago: executing program 4 (id=408): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 483.663379ms ago: executing program 1 (id=409): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x0) 467.638409ms ago: executing program 4 (id=410): capset(&(0x7f0000000c00)={0x19980330}, &(0x7f0000000140)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400"], 0x30}, 0x800) 381.640222ms ago: executing program 4 (id=411): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@debug}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0xa, 0x5fc, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x5) lseek(r0, 0x7, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) close(r1) 323.761152ms ago: executing program 1 (id=412): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 133.812587ms ago: executing program 2 (id=413): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}}, 0x20000800) 0s ago: executing program 0 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl(r0, 0xc138fd08, &(0x7f0000000000)) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.891371][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.906122][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. syzkaller login: [ 61.463490][ T4172] cgroup: Unknown subsys name 'net' [ 61.606804][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.063848][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.495189][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 64.514864][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 64.600281][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.631383][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 64.688801][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.735263][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.742552][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.751073][ T4186] device bridge_slave_0 entered promiscuous mode [ 64.759736][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.767141][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.775519][ T4191] device bridge_slave_0 entered promiscuous mode [ 64.799974][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.807351][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.815785][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.823646][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.831419][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.839716][ T4191] device bridge_slave_1 entered promiscuous mode [ 64.890330][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.897609][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.909047][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.949548][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.958881][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.966202][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.974431][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.981803][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.988881][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.997555][ T4195] device bridge_slave_0 entered promiscuous mode [ 65.007018][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.022928][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.046329][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.053994][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.062401][ T4195] device bridge_slave_1 entered promiscuous mode [ 65.071178][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.118643][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.130216][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.141993][ T4191] team0: Port device team_slave_0 added [ 65.161124][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.168229][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.176618][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.190357][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.197828][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.206401][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.215254][ T4191] team0: Port device team_slave_1 added [ 65.229963][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.241946][ T4186] team0: Port device team_slave_0 added [ 65.275870][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.293348][ T4186] team0: Port device team_slave_1 added [ 65.308644][ T4188] team0: Port device team_slave_0 added [ 65.316489][ T4195] team0: Port device team_slave_0 added [ 65.323999][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.332421][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.358885][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.373205][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.391848][ T4188] team0: Port device team_slave_1 added [ 65.399345][ T4195] team0: Port device team_slave_1 added [ 65.412935][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.419917][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.446163][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.465682][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.489380][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.496453][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.522565][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.559315][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.567510][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.594060][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.606147][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.613456][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.642162][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.668262][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.675558][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.702104][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.718145][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.725528][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.751850][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.776966][ T4187] team0: Port device team_slave_0 added [ 65.783894][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.791311][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.817913][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.839468][ T4191] device hsr_slave_0 entered promiscuous mode [ 65.846647][ T4191] device hsr_slave_1 entered promiscuous mode [ 65.863772][ T4187] team0: Port device team_slave_1 added [ 65.893017][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.900239][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.907350][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.915531][ T4186] Cannot create hsr debugfs directory [ 65.945298][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.952501][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.978568][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.002457][ T4195] device hsr_slave_0 entered promiscuous mode [ 66.009302][ T4195] device hsr_slave_1 entered promiscuous mode [ 66.016307][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.024397][ T4195] Cannot create hsr debugfs directory [ 66.042615][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.049630][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.075731][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.131347][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.138472][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.145400][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.153470][ T4188] Cannot create hsr debugfs directory [ 66.181385][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 66.183099][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 66.188935][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 66.200109][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 66.206731][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 66.236045][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.242770][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.249678][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.257634][ T4187] Cannot create hsr debugfs directory [ 66.533146][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.548787][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.564140][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.574601][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.624025][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.644047][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.653802][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.665299][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.713045][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.735709][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.747152][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.761458][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.768873][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.803875][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.813668][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.828598][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.853978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.863057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.873667][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.881201][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.892256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.925424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.934708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.944164][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.951310][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.959126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.991915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.011519][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.027856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.038100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.047859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.057350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.066581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.087375][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.098352][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.112102][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.122270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.131222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.140228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.149513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.158854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.169789][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.182445][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.200083][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.223344][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.236566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.247660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.272688][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.292692][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.319018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.331776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.339556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.349573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.358777][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.365925][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.375208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.387563][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.405240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.414411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.423481][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.430616][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.439617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.450241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.459148][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.466292][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.475429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.484411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.493359][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.500489][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.512164][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.536476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.551637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.566724][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.581708][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.607002][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.616416][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.624868][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.632738][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.659909][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.675759][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.686199][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.696945][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.706337][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.715125][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.724277][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.733539][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.750290][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.762350][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.786542][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.799628][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.808742][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.824713][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.836852][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.848607][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.865232][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.877402][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.887475][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.917603][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.932904][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.947334][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.958719][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.975947][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.994816][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.017097][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.027493][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.036252][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.066138][ T4191] device veth0_vlan entered promiscuous mode [ 68.081337][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.089154][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.107205][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.119990][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.143341][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.161719][ T4191] device veth1_vlan entered promiscuous mode [ 68.184326][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.200900][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.211408][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.219902][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.229561][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.238008][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.260917][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 68.270866][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 68.280851][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 68.281292][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.301041][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 68.307248][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 68.314724][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.323733][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.330926][ T420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.339226][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.352757][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.361807][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.370239][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.377401][ T420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.390208][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.420386][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.432956][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.441389][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.452055][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.461304][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.469056][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.477170][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.484861][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.495442][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.517640][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.528334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.546569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.557324][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.564488][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.623503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.634659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.645217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.654364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.663986][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.671110][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.679780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.688511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.697645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.706591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.715815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.725096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.734687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.747083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.756286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.765191][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.773945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.782184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.790093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.809662][ T4191] device veth0_macvtap entered promiscuous mode [ 68.824355][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.837631][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.847173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.859791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.876639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.888040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.897635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.907769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.917889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.929148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.944182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.955378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.964216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.973015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.984314][ T4195] device veth0_vlan entered promiscuous mode [ 68.993592][ T4191] device veth1_macvtap entered promiscuous mode [ 69.005566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.014168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.023060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.062599][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.088438][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.105650][ T4195] device veth1_vlan entered promiscuous mode [ 69.115848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.136826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.154344][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.182636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.193332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.222678][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.251755][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.261057][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.269786][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.291974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.305410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.322779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.331998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.358193][ T4195] device veth0_macvtap entered promiscuous mode [ 69.398859][ T4186] device veth0_vlan entered promiscuous mode [ 69.417618][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.427024][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.451310][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.482574][ T4195] device veth1_macvtap entered promiscuous mode [ 69.510873][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.522053][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.537300][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.552359][ T4186] device veth1_vlan entered promiscuous mode [ 69.565404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.575600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.583653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.600952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.608413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.625802][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.636418][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.648456][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.659456][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.672310][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.697192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.707485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.717109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.749270][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.758669][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.775491][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.791301][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.804696][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.813854][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.823188][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.850850][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.864811][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.876768][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.899108][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.918149][ T4186] device veth0_macvtap entered promiscuous mode [ 69.924813][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.936398][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.946685][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.955870][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.964563][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.973274][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.982139][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.992189][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.002116][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.011218][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.019654][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.028926][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.037330][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.046414][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.054626][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.066263][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.075495][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.084518][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.093533][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.105861][ T4187] device veth0_vlan entered promiscuous mode [ 70.117053][ T4186] device veth1_macvtap entered promiscuous mode [ 70.125615][ T4188] device veth0_vlan entered promiscuous mode [ 70.148083][ T4187] device veth1_vlan entered promiscuous mode [ 70.173784][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.186497][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.197567][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.208345][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.220126][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.233077][ T4188] device veth1_vlan entered promiscuous mode [ 70.268257][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.291113][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.299417][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.308774][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.317093][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.325868][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.338140][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.342613][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 70.350148][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.365175][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.376233][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.377959][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 70.390997][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.406004][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 70.412199][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 70.418337][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 70.430793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.439878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.474448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.486001][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.498201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.519998][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.529277][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.541354][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.550124][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.578211][ T4187] device veth0_macvtap entered promiscuous mode [ 70.606576][ T4262] tipc: Enabling of bearer rejected, media not registered [ 70.617853][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.633258][ T4187] device veth1_macvtap entered promiscuous mode [ 70.641666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.649836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.665152][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.669366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.687486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.696889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.707847][ T4188] device veth0_macvtap entered promiscuous mode [ 70.763319][ T4264] autofs4:pid:4264:autofs_fill_super: called with bogus options [ 70.774435][ T4188] device veth1_macvtap entered promiscuous mode [ 70.793703][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.808962][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.819644][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.846076][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.856726][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.875601][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.887834][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.928439][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.938593][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.954581][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.970230][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.980827][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.995966][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.005954][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.017425][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.029900][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.056589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.069148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.079770][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.091209][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.101958][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.114165][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.124497][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.135411][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.146111][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.157072][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.168791][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.177580][ T4267] device syzkaller0 entered promiscuous mode [ 71.190935][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.198786][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.216690][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.233700][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.242662][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.251592][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.265077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.275031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.284324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.295488][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.312387][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.319020][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.329230][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.340624][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.353504][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.364114][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.375109][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.386990][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.397520][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.408987][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.431285][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.443919][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.451412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.453278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.471852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.495850][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.505157][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.515086][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.525171][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.610084][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.638907][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.655630][ T4271] loop3: detected capacity change from 0 to 256 [ 71.708767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.782569][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.817648][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.852801][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.861551][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.869399][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.890750][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.944432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.971301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.995797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.117508][ T4278] loop4: detected capacity change from 0 to 256 [ 72.159554][ T4278] ======================================================= [ 72.159554][ T4278] WARNING: The mand mount option has been deprecated and [ 72.159554][ T4278] and is ignored by this kernel. Remove the mand [ 72.159554][ T4278] option from the mount to silence this warning. [ 72.159554][ T4278] ======================================================= [ 72.207280][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.239458][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.249777][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.335536][ T4278] FAT-fs (loop4): Directory bread(block 64) failed [ 72.396289][ T4278] FAT-fs (loop4): Directory bread(block 65) failed [ 72.408880][ T4278] FAT-fs (loop4): Directory bread(block 66) failed [ 72.422056][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 72.430155][ T4284] loop0: detected capacity change from 0 to 512 [ 72.436933][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 72.459263][ T4278] FAT-fs (loop4): Directory bread(block 67) failed [ 72.466227][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 72.486599][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 72.493563][ T4278] FAT-fs (loop4): Directory bread(block 68) failed [ 72.500138][ T4278] FAT-fs (loop4): Directory bread(block 69) failed [ 72.525627][ T4284] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 72.531293][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 72.544003][ T4287] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11'. [ 72.555527][ T4278] FAT-fs (loop4): Directory bread(block 70) failed [ 72.573909][ T4278] FAT-fs (loop4): Directory bread(block 71) failed [ 72.588197][ T4278] FAT-fs (loop4): Directory bread(block 72) failed [ 72.595200][ T4278] FAT-fs (loop4): Directory bread(block 73) failed [ 72.601361][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.610499][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.660104][ T4278] attempt to access beyond end of device [ 72.660104][ T4278] loop4: rw=524288, want=1820, limit=256 [ 72.674293][ T4278] attempt to access beyond end of device [ 72.674293][ T4278] loop4: rw=0, want=1808, limit=256 [ 72.679787][ T4284] EXT4-fs (loop0): 1 truncate cleaned up [ 72.692433][ T26] audit: type=1800 audit(1786269504.029:2): pid=4278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9" name="file2" dev="loop4" ino=1048593 res=0 errno=0 [ 72.713090][ T4278] attempt to access beyond end of device [ 72.713090][ T4278] loop4: rw=0, want=1804, limit=256 [ 72.769551][ T4284] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,i_version,noblock_validity,,errors=continue. Quota mode: none. [ 72.793714][ T4293] attempt to access beyond end of device [ 72.793714][ T4293] loop4: rw=0, want=1804, limit=256 [ 72.815919][ T4293] Buffer I/O error on dev loop4, logical block 450, async page read [ 72.826565][ T4293] attempt to access beyond end of device [ 72.826565][ T4293] loop4: rw=0, want=1808, limit=256 [ 72.837582][ T4293] Buffer I/O error on dev loop4, logical block 451, async page read [ 73.083559][ T4298] loop4: detected capacity change from 0 to 1024 [ 73.090303][ T4299] loop3: detected capacity change from 0 to 512 [ 73.152101][ T4298] EXT4-fs (loop4): inline encryption not supported [ 73.159639][ T4299] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.188402][ T4299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.233105][ T4298] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #3: block 1: comm syz.4.13: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.294215][ T4299] EXT4-fs (loop3): 1 truncate cleaned up [ 73.336657][ T4299] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.376811][ T4298] EXT4-fs (loop4): Remounting filesystem read-only [ 73.412825][ T4298] Quota error (device loop4): write_blk: dquota write failed [ 73.423797][ T26] audit: type=1804 audit(1786269504.769:3): pid=4299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14" name="/newroot/5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=18 res=1 errno=0 [ 73.489016][ T4306] loop1: detected capacity change from 0 to 1024 [ 73.502309][ T4298] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 73.552516][ T4298] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.13: Failed to acquire dquot type 0 [ 73.588164][ T4298] EXT4-fs (loop4): Remounting filesystem read-only [ 73.601011][ T4298] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.13: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.642205][ T4306] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.742883][ T4298] EXT4-fs (loop4): Remounting filesystem read-only [ 73.771359][ T4298] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.13: Invalid inode bitmap blk 0 in block_group 0 [ 73.798096][ T4306] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8840c028, mo2=0002] [ 73.801527][ T144] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.834638][ T4306] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,min_batch_time=0x0000000000000002,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,init_itable,errors=remount-ro,acl,auto_da_alloc=0x0000000000000340,debug,barrier=0x00000000000000. Quota mode: none. [ 73.868681][ T144] EXT4-fs (loop4): Remounting filesystem read-only [ 73.871504][ T4298] EXT4-fs (loop4): Remounting filesystem read-only [ 73.879416][ T144] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 73.891391][ T144] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 73.906512][ T144] EXT4-fs (loop4): Remounting filesystem read-only [ 73.937241][ T4298] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 73.997743][ T4298] EXT4-fs (loop4): Remounting filesystem read-only [ 74.051060][ T4298] EXT4-fs (loop4): 1 orphan inode deleted [ 74.076603][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 74.101420][ T4298] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; barrier,min_batch_time=0x0000000000000003,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 74.173325][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 74.244759][ T4298] EXT4-fs (loop4): shut down requested (2) [ 74.348823][ T4328] netlink: 'syz.1.21': attribute type 4 has an invalid length. [ 74.433689][ T4329] netlink: 'syz.1.21': attribute type 4 has an invalid length. [ 74.628995][ T4328] syz.1.21 (4328) used greatest stack depth: 21136 bytes left [ 74.725672][ T4337] loop3: detected capacity change from 0 to 512 [ 74.792490][ T4337] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 74.813761][ T4337] EXT4-fs (loop3): Unrecognized mount option "=" or missing value [ 74.939317][ T9] Bluetooth: hci6: Frame reassembly failed (-84) [ 75.280013][ T4354] device syzkaller0 entered promiscuous mode [ 75.391214][ T4361] loop4: detected capacity change from 0 to 512 [ 75.455210][ T4361] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 75.549923][ T4361] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.35: casefold flag without casefold feature [ 75.574322][ T4365] loop3: detected capacity change from 0 to 512 [ 75.621159][ T4361] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.35: couldn't read orphan inode 15 (err -117) [ 75.636715][ T4361] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none. [ 75.672400][ T4361] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 4: comm syz.4.35: lblock 0 mapped to illegal pblock 4 (length 1) [ 75.713491][ T4365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.36: iget: bad extra_isize 90 (inode size 256) [ 75.776110][ T4365] EXT4-fs (loop3): Remounting filesystem read-only [ 75.817652][ T4365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.36: error while reading EA inode 11 err=-117 [ 75.844396][ T4365] EXT4-fs (loop3): Remounting filesystem read-only [ 75.856337][ T4365] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.878045][ T4365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.36: iget: bad extra_isize 90 (inode size 256) [ 75.898507][ T4365] EXT4-fs (loop3): Remounting filesystem read-only [ 75.916306][ T4365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.36: error while reading EA inode 11 err=-117 [ 75.974334][ T4365] EXT4-fs (loop3): Remounting filesystem read-only [ 75.993864][ T4365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.36: iget: bad extra_isize 90 (inode size 256) [ 76.043425][ T4365] EXT4-fs (loop3): Remounting filesystem read-only [ 76.050050][ T4365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.36: error while reading EA inode 18 err=-117 [ 76.112926][ T4365] EXT4-fs (loop3): Remounting filesystem read-only [ 76.130017][ T4365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.36: iget: bad extra_isize 90 (inode size 256) [ 76.162454][ T4365] EXT4-fs (loop3): Remounting filesystem read-only [ 76.175267][ T4373] loop1: detected capacity change from 0 to 512 [ 76.184793][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 76.186369][ T4365] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.36: error while reading EA inode 18 err=-117 [ 76.205691][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 76.226586][ T4373] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 76.245831][ T4365] EXT4-fs (loop3): Remounting filesystem read-only [ 76.264844][ T4365] EXT4-fs (loop3): 1 orphan inode deleted [ 76.271519][ T4365] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,grpid,noquota,min_batch_time=0x0000000000000003,jqfmt=vfsold,. Quota mode: none. [ 76.305649][ T4373] EXT4-fs (loop1): 1 truncate cleaned up [ 76.318114][ T4373] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,i_version,noblock_validity,,errors=continue. Quota mode: none. [ 76.352769][ T4365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 76.807377][ T4381] loop3: detected capacity change from 0 to 128 [ 76.986774][ T4232] Bluetooth: hci6: command 0x1003 tx timeout [ 76.996471][ T4192] Bluetooth: hci6: sending frame failed (-49) [ 77.041570][ T4391] device syzkaller0 entered promiscuous mode [ 77.597081][ T4404] capability: warning: `syz.3.52' uses 32-bit capabilities (legacy support in use) syzkaller syzkaller login: [ 78.194979][ T4420] loop1: detected capacity change from 0 to 2048 [ 78.247324][ T4421] loop4: detected capacity change from 0 to 2048 [ 78.268585][ T4228] Bluetooth: hci5: command 0x1001 tx timeout [ 78.292694][ T4192] Bluetooth: hci5: sending frame failed (-49) [ 78.304848][ T4420] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000001cc4,,errors=continue. Quota mode: none. [ 78.402102][ T4421] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.789911][ T4433] device syzkaller0 entered promiscuous mode [ 79.060650][ T4227] Bluetooth: hci6: command 0x1001 tx timeout [ 79.066775][ T4192] Bluetooth: hci6: sending frame failed (-49) [ 79.135847][ T26] audit: type=1800 audit(1786269510.479:4): pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.59" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 79.201185][ T26] audit: type=1800 audit(1786269510.509:5): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.59" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 79.489043][ T4455] loop1: detected capacity change from 0 to 512 [ 79.549626][ T4455] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 79.570945][ T4455] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.097652][ T4462] loop3: detected capacity change from 0 to 1024 [ 80.351897][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 80.442569][ T4462] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 80.748455][ T4462] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.925325][ T4482] loop1: detected capacity change from 0 to 1024 [ 81.004011][ T4486] device syzkaller0 entered promiscuous mode [ 81.022177][ T4482] EXT4-fs (loop1): Ignoring removed oldalloc option [ 81.102287][ T4482] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000002,nodioread_nolock,oldalloc,barrier,delalloc,grpjquota=,,errors=continue. Quota mode: none. [ 81.130531][ T4482] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.141796][ T4227] Bluetooth: hci6: command 0x1009 tx timeout [ 81.169164][ T4482] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.77: lblock 3 mapped to illegal pblock 3 (length 3) [ 81.211245][ T4482] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 81.224928][ T4482] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.224928][ T4482] [ 81.238963][ T4489] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.77: lblock 0 mapped to illegal pblock 0 (length 1) [ 81.311926][ T4316] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 81.360185][ T4316] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 81.372745][ T4316] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.372745][ T4316] [ 81.826715][ T4512] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.931684][ T4516] device syzkaller0 entered promiscuous mode [ 82.326049][ T4526] hub 8-0:1.0: USB hub found [ 82.333425][ T4526] hub 8-0:1.0: 1 port detected [ 83.193365][ T4537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.323266][ T4532] device geneve1 entered promiscuous mode [ 84.049733][ T4545] loop1: detected capacity change from 0 to 128 [ 84.163069][ T4545] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.188564][ T4545] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.256140][ T4552] device syzkaller0 entered promiscuous mode [ 85.030218][ T4581] tipc: Started in network mode [ 85.035652][ T4581] tipc: Node identity aa1967a59241, cluster identity 4711 [ 85.044634][ T4581] tipc: Enabled bearer , priority 0 [ 85.079073][ T4581] tipc: Resetting bearer [ 85.124712][ T4580] tipc: Disabling bearer [ 85.262026][ T4585] loop2: detected capacity change from 0 to 2048 [ 85.309696][ T4589] loop4: detected capacity change from 0 to 128 [ 85.358400][ T4585] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.396374][ T4598] loop3: detected capacity change from 0 to 256 [ 85.436345][ T4585] EXT4-fs error (device loop2): ext4_remount:6062: comm syz.2.115: Abort forced by user [ 85.449153][ T4585] EXT4-fs (loop2): Remounting filesystem read-only [ 85.458852][ T4585] EXT4-fs (loop2): re-mounted. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 85.678363][ T4610] tipc: Enabled bearer , priority 0 [ 85.692331][ T4610] tipc: Resetting bearer [ 85.714390][ T4609] tipc: Disabling bearer [ 85.767286][ T4613] loop4: detected capacity change from 0 to 128 [ 86.008330][ T26] audit: type=1326 audit(1786269517.349:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2d46d0d9 code=0x7ffc0000 [ 86.108957][ T26] audit: type=1326 audit(1786269517.379:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2d46d0d9 code=0x7ffc0000 [ 86.212287][ T26] audit: type=1326 audit(1786269517.379:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2d46d0d9 code=0x7ffc0000 [ 86.291433][ T4631] netlink: 14 bytes leftover after parsing attributes in process `syz.2.130'. [ 86.300780][ T26] audit: type=1326 audit(1786269517.399:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2d46d0d9 code=0x7ffc0000 [ 86.377762][ T26] audit: type=1326 audit(1786269517.399:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c2d46d0d9 code=0x7ffc0000 [ 86.474505][ T26] audit: type=1326 audit(1786269517.429:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2d46d0d9 code=0x7ffc0000 [ 86.543808][ T26] audit: type=1326 audit(1786269517.429:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2d46d0d9 code=0x7ffc0000 [ 86.598785][ T26] audit: type=1326 audit(1786269517.439:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c2d46ce42 code=0x7ffc0000 [ 86.664890][ T1325] cfg80211: failed to load regulatory.db [ 86.676496][ T26] audit: type=1326 audit(1786269517.439:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c2d46ce42 code=0x7ffc0000 [ 86.729402][ T4639] netlink: 52 bytes leftover after parsing attributes in process `syz.4.136'. [ 86.738886][ T4639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 86.850541][ T26] audit: type=1326 audit(1786269517.549:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.130" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2d46d0d9 code=0x7ffc0000 [ 86.966656][ T4649] netlink: 48 bytes leftover after parsing attributes in process `syz.4.141'. [ 87.710115][ T4663] tipc: Enabling of bearer rejected, failed to enable media [ 88.091708][ T4668] autofs4:pid:4668:autofs_fill_super: called with bogus options [ 88.508785][ T4678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 89.010435][ C1] sched: RT throttling activated [ 89.029342][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 89.036484][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 89.375344][ T4692] loop0: detected capacity change from 0 to 512 [ 89.481394][ T4692] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.823240][ T4708] device syzkaller0 entered promiscuous mode [ 89.853855][ T4708] tipc: Started in network mode [ 89.880671][ T4708] tipc: Node identity 72d258f0127a, cluster identity 4711 [ 89.888049][ T4708] tipc: Enabled bearer , priority 0 [ 89.974287][ T4708] tipc: Resetting bearer [ 90.030827][ T4707] tipc: Resetting bearer [ 90.089111][ T4707] tipc: Disabling bearer [ 90.143948][ T4722] netlink: 124 bytes leftover after parsing attributes in process `syz.4.165'. [ 90.468834][ T4735] netlink: 27 bytes leftover after parsing attributes in process `syz.2.171'. [ 90.861491][ T4757] device syzkaller0 entered promiscuous mode [ 90.908365][ T4760] loop4: detected capacity change from 0 to 128 [ 90.915417][ T4757] tipc: Enabled bearer , priority 0 [ 90.931865][ T4760] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.961700][ T4757] tipc: Resetting bearer [ 90.990035][ T4760] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.999891][ T4756] tipc: Resetting bearer [ 91.019778][ T4756] tipc: Disabling bearer [ 91.060832][ T4229] Bluetooth: hci5: command 0x1001 tx timeout [ 91.077415][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 91.098109][ T4764] loop0: detected capacity change from 0 to 512 [ 91.187522][ T4766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.185'. [ 91.207385][ T4766] openvswitch: netlink: Message has 34 unknown bytes. [ 91.332789][ T4770] loop0: detected capacity change from 0 to 512 [ 91.357398][ T4770] EXT4-fs (loop0): inline encryption not supported [ 91.375582][ T4770] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.448192][ T4770] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 91.470928][ T4770] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.187: bg 0: block 248: padding at end of block bitmap is not set [ 91.496824][ T4770] __quota_error: 68 callbacks suppressed [ 91.496841][ T4770] Quota error (device loop0): write_blk: dquota write failed [ 91.523923][ T4770] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 91.534000][ T4770] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.187: Failed to acquire dquot type 1 [ 91.574890][ T4770] EXT4-fs (loop0): 1 truncate cleaned up [ 91.596127][ T4770] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 91.677091][ T4770] syz.0.187 (4770) used greatest stack depth: 20896 bytes left [ 91.782901][ T154] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 91.798542][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 1 [ 91.868038][ T4795] netlink: 48 bytes leftover after parsing attributes in process `syz.2.197'. [ 92.166585][ T4803] device syzkaller0 entered promiscuous mode [ 92.206596][ T4803] tipc: Started in network mode [ 92.219956][ T4803] tipc: Node identity ce03894d2f6f, cluster identity 4711 [ 92.233132][ T4803] tipc: Enabled bearer , priority 0 [ 92.285574][ T4807] netlink: 44 bytes leftover after parsing attributes in process `syz.4.202'. [ 92.311214][ T4803] tipc: Resetting bearer [ 92.317332][ T4802] tipc: Resetting bearer [ 92.321937][ T4807] netlink: 35 bytes leftover after parsing attributes in process `syz.4.202'. [ 92.321984][ T4807] netlink: 'syz.4.202': attribute type 5 has an invalid length. [ 92.322037][ T4807] netlink: 'syz.4.202': attribute type 6 has an invalid length. [ 92.322052][ T4807] netlink: 35 bytes leftover after parsing attributes in process `syz.4.202'. [ 92.328918][ T4802] tipc: Disabling bearer [ 92.401361][ T4814] loop4: detected capacity change from 0 to 128 [ 92.623515][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.649071][ T4824] Zero length message leads to an empty skb [ 92.729058][ T4830] loop2: detected capacity change from 0 to 512 [ 92.810597][ T4830] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.863750][ T4830] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.926120][ T4830] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 93.141513][ T4229] Bluetooth: hci5: command 0x1009 tx timeout [ 93.184642][ T4846] device syzkaller0 entered promiscuous mode [ 93.203091][ T4846] tipc: Enabled bearer , priority 0 [ 93.221188][ T4846] tipc: Resetting bearer [ 93.232667][ T4845] tipc: Resetting bearer [ 93.249399][ T4845] tipc: Disabling bearer [ 93.362728][ T154] tipc: Subscription rejected, illegal request [ 93.728044][ T4852] loop0: detected capacity change from 0 to 512 [ 93.761214][ T4852] EXT4-fs (loop0): Ignoring removed orlov option [ 93.767874][ T4852] EXT4-fs (loop0): inodes count not valid: 0 vs 32 [ 94.456018][ T4878] device syzkaller0 entered promiscuous mode [ 94.467825][ T4878] tipc: Enabled bearer , priority 0 [ 94.489898][ T4878] tipc: Resetting bearer [ 94.499813][ T4874] tipc: Resetting bearer [ 94.519227][ T4874] tipc: Disabling bearer [ 94.579677][ T4881] loop4: detected capacity change from 0 to 256 [ 94.669729][ T4883] device syzkaller0 entered promiscuous mode [ 94.676190][ T1325] Bluetooth: hci6: command 0x1003 tx timeout [ 94.682692][ T4192] Bluetooth: hci6: sending frame failed (-49) [ 94.695087][ T4883] tipc: Enabled bearer , priority 0 [ 94.724924][ T4883] tipc: Resetting bearer [ 94.754134][ T4885] autofs4:pid:4885:autofs_fill_super: called with bogus options [ 94.763267][ T4882] tipc: Resetting bearer [ 94.779530][ T4882] tipc: Disabling bearer [ 95.061049][ T4899] loop2: detected capacity change from 0 to 1024 [ 95.186109][ T4899] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 95.227045][ T4899] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #32: comm syz.2.241: iget: special inode unallocated [ 95.262712][ T4899] EXT4-fs (loop2): no journal found [ 95.278261][ T4899] EXT4-fs (loop2): can't get journal size [ 95.295522][ T4899] EXT4-fs (loop2): filesystem is read-only [ 95.312939][ T4899] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,noload,noblock_validity,noblock_validity,grpjquota=,,errors=continue. Quota mode: none. [ 95.409547][ T4908] device syzkaller0 entered promiscuous mode [ 95.522596][ T4910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.575226][ T4914] tipc: Started in network mode [ 95.580346][ T4914] tipc: Node identity 4abc98c18462, cluster identity 4711 [ 95.594217][ T4914] tipc: Enabled bearer , priority 0 [ 95.625712][ T4914] tipc: Resetting bearer [ 95.666341][ T4913] tipc: Disabling bearer [ 95.925968][ T4924] syz.1.252 (4924) used greatest stack depth: 20816 bytes left [ 95.943088][ T4932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.257'. [ 95.961060][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.968450][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.006917][ T4936] loop1: detected capacity change from 0 to 256 [ 96.033138][ T4936] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.201013][ T4938] loop0: detected capacity change from 0 to 2048 [ 96.286377][ T4938] loop0: p2 < > p3 < p5 > p4 [ 96.293636][ T4938] loop0: partition table partially beyond EOD, truncated [ 96.349434][ T4938] loop0: p2 start 4278190080 is beyond EOD, truncated [ 96.390353][ T4938] loop0: p4 size 8192 extends beyond EOD, truncated [ 96.413044][ T4938] loop0: p5 size 8192 extends beyond EOD, truncated [ 96.494865][ T3558] loop0: p2 < > p3 < p5 > p4 [ 96.501619][ T3558] loop0: partition table partially beyond EOD, truncated [ 96.509828][ T3558] loop0: p2 start 4278190080 is beyond EOD, truncated [ 96.518897][ T3558] loop0: p4 size 8192 extends beyond EOD, truncated [ 96.526826][ T3558] loop0: p5 size 8192 extends beyond EOD, truncated [ 96.537894][ T4951] tipc: Started in network mode [ 96.545016][ T4951] tipc: Node identity ee69087d7c18, cluster identity 4711 [ 96.552452][ T4951] tipc: Enabled bearer , priority 0 [ 96.567053][ T4951] tipc: Resetting bearer [ 96.574770][ T4953] device syzkaller0 entered promiscuous mode [ 96.587274][ T4950] tipc: Disabling bearer [ 96.649208][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 96.663151][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 96.692115][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 96.740661][ T4228] Bluetooth: hci6: command 0x1001 tx timeout [ 96.754058][ T4196] Bluetooth: hci6: sending frame failed (-49) [ 96.874957][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 96.891852][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 96.908521][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 97.143636][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 97.236093][ T4968] loop2: detected capacity change from 0 to 512 [ 97.261935][ T4970] netlink: 'syz.1.273': attribute type 4 has an invalid length. [ 97.303606][ T4972] syz.4.275 uses obsolete (PF_INET,SOCK_PACKET) [ 97.424918][ T4974] loop1: detected capacity change from 0 to 512 [ 97.567524][ T4979] tipc: Enabled bearer , priority 0 [ 97.603932][ T4979] tipc: Resetting bearer [ 97.618555][ T4974] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 97.638542][ T4977] tipc: Disabling bearer [ 97.650572][ T4974] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 97.658695][ T4974] System zones: 0-1, 15-15, 18-18, 34-34 [ 97.669612][ T4974] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.699939][ T4974] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 97.710192][ T4974] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 97.726560][ T4974] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 97.736200][ T4974] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.276: bad orphan inode 16 [ 97.757715][ T4974] ext4_test_bit(bit=15, block=18) = 1 [ 97.763297][ T4974] is_bad_inode(inode)=0 [ 97.767546][ T4974] NEXT_ORPHAN(inode)=0 [ 97.771792][ T4974] max_ino=32 [ 97.775029][ T4974] i_nlink=2 [ 97.785382][ T4974] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 97.919684][ T4988] loop4: detected capacity change from 0 to 512 [ 97.978771][ T4991] loop1: detected capacity change from 0 to 1024 [ 98.039420][ T4991] EXT4-fs (loop1): inline encryption not supported [ 98.109565][ T4991] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #3: block 1: comm syz.1.280: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.129830][ T4991] EXT4-fs (loop1): Remounting filesystem read-only [ 98.137277][ T4991] Quota error (device loop1): write_blk: dquota write failed [ 98.150664][ T4991] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 98.214060][ T4991] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.280: Failed to acquire dquot type 0 [ 98.302563][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 98.321046][ T4991] EXT4-fs (loop1): Remounting filesystem read-only [ 98.327816][ T4991] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.280: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.343887][ T4991] EXT4-fs (loop1): Remounting filesystem read-only [ 98.353260][ T4991] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.280: Invalid inode bitmap blk 0 in block_group 0 [ 98.369282][ T4991] EXT4-fs (loop1): Remounting filesystem read-only [ 98.376770][ T4542] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 98.392241][ T4991] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 98.401755][ T4542] EXT4-fs (loop1): Remounting filesystem read-only [ 98.408383][ T4542] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 98.417581][ T4991] EXT4-fs (loop1): Remounting filesystem read-only [ 98.437135][ T4991] EXT4-fs (loop1): 1 orphan inode deleted [ 98.455332][ T4542] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:11: Failed to release dquot type 0 [ 98.476287][ T4991] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; barrier,min_batch_time=0x0000000000000003,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 98.497727][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.511173][ T4542] EXT4-fs (loop1): Remounting filesystem read-only [ 98.579958][ T4991] EXT4-fs (loop1): shut down requested (2) [ 98.804619][ T5010] loop2: detected capacity change from 0 to 1024 [ 98.830596][ T4231] Bluetooth: hci6: command 0x1009 tx timeout [ 99.044526][ T5010] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.184656][ T5010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8840c028, mo2=0002] [ 99.204945][ T5010] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,min_batch_time=0x0000000000000002,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,init_itable,errors=remount-ro,acl,auto_da_alloc=0x0000000000000340,debug,barrier=0x00000000000000. Quota mode: none. [ 99.615850][ T5029] loop4: detected capacity change from 0 to 512 [ 99.703044][ T5025] loop1: detected capacity change from 0 to 8192 [ 99.767037][ T5029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.778604][ T5025] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.854955][ T5029] EXT4-fs (loop4): 1 truncate cleaned up [ 99.880575][ T5029] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.020089][ T26] audit: type=1804 audit(1786269531.359:84): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.295" name="/newroot/96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=18 res=1 errno=0 [ 100.207718][ T5047] loop2: detected capacity change from 0 to 1024 [ 100.248943][ T5047] EXT4-fs (loop2): inline encryption not supported [ 100.323671][ T5047] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.302: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.377004][ T5050] netlink: 5 bytes leftover after parsing attributes in process `syz.1.303'. [ 100.416095][ T5047] EXT4-fs (loop2): Remounting filesystem read-only [ 100.424788][ T5047] Quota error (device loop2): write_blk: dquota write failed [ 100.432438][ T5047] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 100.443073][ T5047] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.302: Failed to acquire dquot type 0 [ 100.456819][ T5047] EXT4-fs (loop2): Remounting filesystem read-only [ 100.463567][ T5047] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.302: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.487675][ T5047] EXT4-fs (loop2): Remounting filesystem read-only [ 100.494554][ T5047] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.302: Invalid inode bitmap blk 0 in block_group 0 [ 100.521671][ T154] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.571084][ T154] EXT4-fs (loop2): Remounting filesystem read-only [ 100.577699][ T154] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 100.588530][ T5047] EXT4-fs (loop2): Remounting filesystem read-only [ 100.631527][ T5047] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 100.642664][ T154] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 100.682217][ T5047] EXT4-fs (loop2): Remounting filesystem read-only [ 100.688932][ T5047] EXT4-fs (loop2): 1 orphan inode deleted [ 100.695212][ T154] EXT4-fs (loop2): Remounting filesystem read-only [ 100.721141][ T5047] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; barrier,min_batch_time=0x0000000000000003,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 100.859369][ T5066] loop1: detected capacity change from 0 to 256 [ 100.879782][ T5047] EXT4-fs (loop2): shut down requested (2) [ 100.974436][ T5070] loop0: detected capacity change from 0 to 512 [ 100.998644][ T5066] FAT-fs (loop1): Directory bread(block 64) failed [ 101.010762][ T5066] FAT-fs (loop1): Directory bread(block 65) failed [ 101.023557][ T5066] FAT-fs (loop1): Directory bread(block 66) failed [ 101.030546][ T5066] FAT-fs (loop1): Directory bread(block 67) failed [ 101.038388][ T5066] FAT-fs (loop1): Directory bread(block 68) failed [ 101.058024][ T5070] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 101.086397][ T5066] FAT-fs (loop1): Directory bread(block 69) failed [ 101.094874][ T5066] FAT-fs (loop1): Directory bread(block 70) failed [ 101.107864][ T5066] FAT-fs (loop1): Directory bread(block 71) failed [ 101.116868][ T5066] FAT-fs (loop1): Directory bread(block 72) failed [ 101.124694][ T5066] FAT-fs (loop1): Directory bread(block 73) failed [ 101.137740][ T5070] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.197870][ T5066] attempt to access beyond end of device [ 101.197870][ T5066] loop1: rw=524288, want=1820, limit=256 [ 101.213120][ T5077] loop4: detected capacity change from 0 to 512 [ 101.236910][ T5066] attempt to access beyond end of device [ 101.236910][ T5066] loop1: rw=0, want=1808, limit=256 [ 101.249886][ T26] audit: type=1800 audit(1786269532.589:85): pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.310" name="file2" dev="loop1" ino=1048616 res=0 errno=0 [ 101.273653][ T5077] EXT4-fs (loop4): Mount option "nodioread_nolock" incompatible with ext2 [ 101.292699][ T5066] attempt to access beyond end of device [ 101.292699][ T5066] loop1: rw=0, want=1808, limit=256 [ 101.332189][ T26] audit: type=1800 audit(1786269532.679:86): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.313" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 101.485553][ T5082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'. [ 101.570682][ T5082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'. [ 101.595912][ T5086] loop0: detected capacity change from 0 to 1024 [ 101.738247][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 102.177641][ T5114] loop0: detected capacity change from 0 to 512 [ 102.218134][ T5114] EXT4-fs (loop0): Ignoring removed bh option [ 102.238664][ T5116] loop1: detected capacity change from 0 to 512 [ 102.299299][ T5112] loop4: detected capacity change from 0 to 8192 [ 102.309496][ T5114] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,grpquota,,errors=continue. Quota mode: writeback. [ 102.327554][ T5114] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.358974][ T5116] EXT4-fs (loop1): Unrecognized mount option "journal_path" or missing value [ 102.400889][ T5112] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.612011][ T5120] tmpfs: Bad value for 'mpol' [ 103.131628][ T5140] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.143716][ T5140] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.423923][ T5155] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.594711][ T5169] netlink: 64 bytes leftover after parsing attributes in process `syz.0.355'. [ 104.214885][ T5188] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.447928][ T5201] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 104.564033][ T5201] EXT4-fs (loop3): mount failed [ 104.606772][ T5218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 104.650679][ T5218] openvswitch: netlink: Message has 34 unknown bytes. [ 104.740979][ T4228] syzkaller0: tun_net_xmit 76 [ 104.747237][ T4228] syzkaller0: tun_net_xmit 48 [ 104.756303][ T5229] syzkaller0: create flow: hash 3608340107 index 1 [ 104.780766][ T4228] syzkaller0: tun_net_xmit 76 [ 104.814107][ T5226] syzkaller0: delete flow: hash 3608340107 index 1 [ 105.069062][ T5234] set_capacity_and_notify: 2 callbacks suppressed [ 105.069078][ T5234] loop0: detected capacity change from 0 to 4096 [ 105.135805][ T5243] loop3: detected capacity change from 0 to 256 [ 105.267185][ T5234] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.650732][ T5260] process 'syz.2.381' launched './file0' with NULL argv: empty string added [ 106.068663][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 106.115777][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 106.236739][ T5299] loop3: detected capacity change from 0 to 512 [ 106.340483][ T5299] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 106.386027][ T5299] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.650323][ T5315] netlink: 292 bytes leftover after parsing attributes in process `syz.1.402'. [ 106.717217][ T5315] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 106.742181][ T26] audit: type=1326 audit(1786269538.089:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5317 comm="syz.0.401" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd38a2780d9 code=0x0 [ 106.795292][ T5315] netlink: 'syz.1.402': attribute type 2 has an invalid length. [ 107.256048][ T5341] loop1: detected capacity change from 0 to 128 [ 107.305083][ T5339] loop4: detected capacity change from 0 to 1024 [ 107.335132][ T5341] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.386494][ T5341] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.427388][ T5339] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 107.490792][ T5339] EXT4-fs (loop4): invalid journal inode [ 107.499031][ T5344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 107.526246][ T5339] EXT4-fs (loop4): can't get journal size [ 107.575099][ T5339] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 107.584964][ T5346] [ 107.587329][ T5346] ====================================================== [ 107.594394][ T5346] WARNING: possible circular locking dependency detected [ 107.601445][ T5346] syzkaller #0 Not tainted [ 107.605883][ T5346] ------------------------------------------------------ [ 107.612921][ T5346] syz.1.412/5346 is trying to acquire lock: [ 107.618828][ T5346] ffff88807bffe650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x41f/0x1050 [ 107.627926][ T5346] [ 107.627926][ T5346] but task is already holding lock: [ 107.635307][ T5346] ffff8880731f0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2b1/0xe50 [ 107.645445][ T5346] [ 107.645445][ T5346] which lock already depends on the new lock. [ 107.645445][ T5346] [ 107.655868][ T5346] [ 107.655868][ T5346] the existing dependency chain (in reverse order) is: [ 107.664900][ T5346] [ 107.664900][ T5346] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 107.673368][ T5346] percpu_down_read+0x46/0x1b0 [ 107.678692][ T5346] ext4_writepages+0x213/0x2d40 [ 107.684094][ T5346] do_writepages+0x493/0x700 [ 107.689237][ T5346] __writeback_single_inode+0x153/0xda0 [ 107.695444][ T5346] writeback_single_inode+0x3d2/0x8e0 [ 107.701368][ T5346] write_inode_now+0x23b/0x2c0 [ 107.706682][ T5346] iput+0x599/0x880 [ 107.711047][ T5346] ext4_xattr_set_entry+0x1d76/0x3f70 [ 107.716976][ T5346] ext4_xattr_block_set+0x4d7/0x2ce0 [ 107.722822][ T5346] ext4_expand_extra_isize_ea+0xebe/0x18e0 [ 107.729186][ T5346] __ext4_expand_extra_isize+0x301/0x3e0 [ 107.735369][ T5346] __ext4_mark_inode_dirty+0x444/0x6c0 [ 107.741380][ T5346] ext4_evict_inode+0xa55/0x1050 [ 107.746863][ T5346] evict+0x4b6/0x8b0 [ 107.751309][ T5346] ext4_orphan_cleanup+0xad8/0x1320 [ 107.757056][ T5346] ext4_fill_super+0x8c65/0x93f0 [ 107.762541][ T5346] mount_bdev+0x28a/0x3c0 [ 107.767425][ T5346] legacy_get_tree+0xe6/0x180 [ 107.772648][ T5346] vfs_get_tree+0x88/0x270 [ 107.777611][ T5346] do_new_mount+0x247/0xa40 [ 107.782664][ T5346] __se_sys_mount+0x2e3/0x3d0 [ 107.787892][ T5346] do_syscall_64+0x4c/0xa0 [ 107.792951][ T5346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.799401][ T5346] [ 107.799401][ T5346] -> #0 (sb_internal){.+.+}-{0:0}: [ 107.806767][ T5346] __lock_acquire+0x2c66/0x7b50 [ 107.812181][ T5346] lock_acquire+0x19e/0x400 [ 107.817239][ T5346] percpu_down_read+0x46/0x1b0 [ 107.822560][ T5346] ext4_evict_inode+0x41f/0x1050 [ 107.828044][ T5346] evict+0x4b6/0x8b0 [ 107.832483][ T5346] ext4_ext_migrate+0xc07/0xe50 [ 107.837885][ T5346] ext4_ioctl+0x1a84/0x3840 [ 107.842940][ T5346] __se_sys_ioctl+0xfa/0x170 [ 107.848116][ T5346] do_syscall_64+0x4c/0xa0 [ 107.853113][ T5346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.859560][ T5346] [ 107.859560][ T5346] other info that might help us debug this: [ 107.859560][ T5346] [ 107.869803][ T5346] Possible unsafe locking scenario: [ 107.869803][ T5346] [ 107.877267][ T5346] CPU0 CPU1 [ 107.882646][ T5346] ---- ---- [ 107.885538][ T5350] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(8) [ 107.888029][ T5346] lock(&sbi->s_writepages_rwsem); [ 107.888049][ T5346] lock(sb_internal); [ 107.909573][ T5346] lock(&sbi->s_writepages_rwsem); [ 107.917328][ T5346] lock(sb_internal); [ 107.921423][ T5346] [ 107.921423][ T5346] *** DEADLOCK *** [ 107.921423][ T5346] [ 107.929609][ T5346] 3 locks held by syz.1.412/5346: [ 107.934653][ T5346] #0: ffff88807bffe460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 107.944371][ T5346] #1: ffff8880626d21d8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_ioctl+0x1a7c/0x3840 [ 107.954800][ T5346] #2: ffff8880731f0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2b1/0xe50 [ 107.965375][ T5346] [ 107.965375][ T5346] stack backtrace: [ 107.971288][ T5346] CPU: 1 PID: 5346 Comm: syz.1.412 Not tainted syzkaller #0 [ 107.978605][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.988704][ T5346] Call Trace: [ 107.992016][ T5346] [ 107.994970][ T5346] dump_stack_lvl+0x188/0x250 [ 107.999701][ T5346] ? load_image+0x410/0x410 [ 108.004237][ T5346] ? show_regs_print_info+0x20/0x20 [ 108.009484][ T5346] ? print_circular_bug+0x12b/0x1a0 [ 108.014715][ T5346] check_noncircular+0x296/0x330 [ 108.019686][ T5346] ? add_chain_block+0x9b0/0x9b0 [ 108.024664][ T5346] ? lockdep_lock+0xf1/0x1f0 [ 108.029290][ T5346] ? __lock_acquire+0x1305/0x7b50 [ 108.034348][ T5346] ? mark_lock+0x94/0x320 [ 108.038703][ T5346] ? _find_first_zero_bit+0xd1/0xf0 [ 108.043931][ T5346] __lock_acquire+0x2c66/0x7b50 [ 108.048830][ T5346] ? __lock_acquire+0x13dc/0x7b50 [ 108.053905][ T5346] ? verify_lock_unused+0x140/0x140 [ 108.059147][ T5346] ? truncate_inode_pages_range+0x392/0xf90 [ 108.065087][ T5346] lock_acquire+0x19e/0x400 [ 108.069626][ T5346] ? ext4_evict_inode+0x41f/0x1050 [ 108.074782][ T5346] ? __might_sleep+0xf0/0xf0 [ 108.079402][ T5346] ? read_lock_is_recursive+0x10/0x10 [ 108.084812][ T5346] ? do_raw_spin_lock+0x128/0x2f0 [ 108.089875][ T5346] ? dquot_initialize+0x20/0x20 [ 108.094775][ T5346] ? __rwlock_init+0x140/0x140 [ 108.099571][ T5346] percpu_down_read+0x46/0x1b0 [ 108.104364][ T5346] ? ext4_evict_inode+0x41f/0x1050 [ 108.109509][ T5346] ext4_evict_inode+0x41f/0x1050 [ 108.114569][ T5346] ? sb_clear_inode_writeback+0x330/0x330 [ 108.120327][ T5346] ? do_raw_spin_lock+0x128/0x2f0 [ 108.125383][ T5346] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 108.131306][ T5346] ? do_raw_spin_unlock+0x11d/0x230 [ 108.136532][ T5346] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 108.142459][ T5346] evict+0x4b6/0x8b0 [ 108.146390][ T5346] ? ext4_ext_migrate+0xbff/0xe50 [ 108.151443][ T5346] ? proc_nr_inodes+0x320/0x320 [ 108.156328][ T5346] ? do_raw_spin_unlock+0x11d/0x230 [ 108.161558][ T5346] ? _raw_spin_unlock+0x24/0x40 [ 108.166431][ T5346] ? iput+0x6ea/0x880 [ 108.170435][ T5346] ext4_ext_migrate+0xc07/0xe50 [ 108.175316][ T5346] ? mb_regenerate_buddy+0x4f0/0x4f0 [ 108.180636][ T5346] ? sb_start_write+0x112/0x1c0 [ 108.185522][ T5346] ext4_ioctl+0x1a84/0x3840 [ 108.190057][ T5346] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 108.194953][ T5346] ? ext4_fileattr_set+0x1750/0x1750 [ 108.200274][ T5346] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 108.205935][ T5346] ? rcu_lock_release+0x5/0x20 [ 108.210730][ T5346] ? __lock_acquire+0x7b50/0x7b50 [ 108.215790][ T5346] ? kfree+0xef/0x2a0 [ 108.219807][ T5346] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 108.225477][ T5346] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 108.230999][ T5346] ? bpf_lsm_file_ioctl+0x5/0x10 [ 108.235974][ T5346] ? security_file_ioctl+0x7c/0xa0 [ 108.241120][ T5346] ? ext4_fileattr_set+0x1750/0x1750 [ 108.246431][ T5346] __se_sys_ioctl+0xfa/0x170 [ 108.251054][ T5346] do_syscall_64+0x4c/0xa0 [ 108.255508][ T5346] ? clear_bhb_loop+0x30/0x80 [ 108.260218][ T5346] ? clear_bhb_loop+0x30/0x80 [ 108.265028][ T5346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.271009][ T5346] RIP: 0033:0x7f47d34b60d9 [ 108.275451][ T5346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.295098][ T5346] RSP: 002b:00007f47d16ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.303567][ T5346] RAX: ffffffffffffffda RBX: 00007f47d373e090 RCX: 00007f47d34b60d9 [ 108.311571][ T5346] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 108.319596][ T5346] RBP: 00007f47d354d024 R08: 0000000000000000 R09: 0000000000000000 [ 108.327602][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.335608][ T5346] R13: 00007f47d373e128 R14: 00007f47d373e090 R15: 00007ffe25ee0c58 [ 108.343620][ T5346] [ 108.370559][ T5339] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.411: blocks 48-48 from inode overlap system zone [ 108.400690][ T5339] EXT4-fs (loop4): failed to initialize system zone (-117) [ 108.412807][ T5339] EXT4-fs (loop4): mount failed