last executing test programs: 17.459392317s ago: executing program 0 (id=1548): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 17.364425025s ago: executing program 0 (id=1550): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xf0}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) 16.748579915s ago: executing program 0 (id=1552): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x40047452, 0x1000000000000) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x2e}, 0x20) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000c0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 14.652444614s ago: executing program 0 (id=1574): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x3, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 14.531872384s ago: executing program 0 (id=1576): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14.040531684s ago: executing program 0 (id=1578): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x1002, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x10c40) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000500)=""/47) ioctl$UI_SET_PROPBIT(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f00000005c0), 0x200005d8) 3.693350101s ago: executing program 2 (id=1620): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={@cgroup=r0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.640011075s ago: executing program 2 (id=1621): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000007c0)) socket$netlink(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) lremovexattr(0x0, 0x0) epoll_create1(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = semget(0xffffffffffffffff, 0x8, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x5}, {0x0, 0x9d45}], 0x2, &(0x7f0000000040)={0x0, 0x989680}) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) 2.744896637s ago: executing program 2 (id=1624): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x80, @none, 0x0, 0x1}, 0xe) 2.672722863s ago: executing program 2 (id=1625): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x81901) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0xc0086c43, &(0x7f0000000080)=0x700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0086c43, &(0x7f0000000080)=0x700) 2.416732324s ago: executing program 2 (id=1627): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 2.34031761s ago: executing program 3 (id=1628): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b000000000000000000"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdef}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.211799971s ago: executing program 3 (id=1631): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084"], 0x38}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 2.194624882s ago: executing program 3 (id=1633): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f00000001c0), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000180), 0x0}, 0x20) 2.123146808s ago: executing program 3 (id=1635): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@netkit}, 0x40) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x4090) 2.093219901s ago: executing program 3 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000074020000140a01"], 0x324}}, 0x0) 1.944417462s ago: executing program 3 (id=1639): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 1.740078728s ago: executing program 2 (id=1644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 1.260092497s ago: executing program 1 (id=1648): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 1.195216233s ago: executing program 1 (id=1650): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1a, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2}]}}}}}}, 0x0) 1.055763644s ago: executing program 1 (id=1652): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x4}]}}}}}) 1.030230166s ago: executing program 1 (id=1653): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) 985.553559ms ago: executing program 4 (id=1654): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078666666666666666666666666666636332c6e6f646f74732c666c7573682c616c6c6f775f7574696d653d30303030303030303030303030303030303030303331372c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c646f74732c0063e6dc1525399f5772f1e8e2a0da0c673fc0b8bef09bb7d7726d6ec52aed5822243bfa77e5ad9f9cc9f2e34b434fe5cc362772ce998c99210f6fde0dfae5"], 0x1, 0x226, &(0x7f0000000300)="$eJzs3b2KE1EYBuDPdX/CNm4tFgM2VkG9g0FWEAeEyBRaObDa7Iow24xWuQnxHrwQL2irdJFkhvwZbTSeTfI8EM4LL4HvNEmKczLvHny8vPh0/eHrj2/R62VxEDGMUcTZJHXudOvBNB/HomEAANtmMKjy1DOwWXWdV0cRcfJLU35PMhAAAAAAAAAAAAB/zfl/ANg/zv/vvrrOq9Pu99sy5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdEbj8b3xH16p5wMA/j3f/wCwf16/efsyL4rzQZb1Im6GTdmU7dr2z18U54+zqbP5u26aprw765+0fbbcH8Vp1z9d2x/Ho4dtP+mevSpW+pO42Pz2AQAAAAAAAAAAAAAAAAAA4FboZzNr7/f3+7/r27Tw/wAr9/cP4/7hf9sGAAAAAAAAAAAAAAAAAAAAbLXrz18uq6ur97UgCMIspP5kAgAAAAAAAAAAAAAAAACA/TO/9Jt6EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIZ/78/82F1HsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbDzwAAAP//cHNiFg==") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 552.029655ms ago: executing program 4 (id=1655): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="74696d655f6f66667365743d3078666666666666666666666666666636332c6e6f646f74732c666c7573682c616c6c6f775f7574696d653d30303030303030303030303030303030303030303331372c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c646f74732c0063e6dc1525399f5772f1e8e2a0da0c673fc0b8bef09bb7d7726d6ec52aed5822243bfa77e5ad9f9cc9f2e34b434fe5cc362772ce998c99210f6fde0dfae5"], 0x1, 0x226, &(0x7f0000000300)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 426.693615ms ago: executing program 4 (id=1656): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0xa25, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 288.772286ms ago: executing program 4 (id=1657): prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x24) 196.052724ms ago: executing program 4 (id=1658): syz_open_procfs(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) 165.880986ms ago: executing program 1 (id=1659): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) 162.664246ms ago: executing program 4 (id=1660): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): system without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.266967][ T6842] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 150.269174][ T6842] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 150.282935][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.998044][ T6842] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms [ 151.001594][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 151.009364][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 151.075870][ T148] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 151.091599][ T6878] netlink: 96 bytes leftover after parsing attributes in process `syz.0.817'. [ 151.155700][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 146ms [ 151.158628][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 151.160217][ T6842] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 151.162450][ T6886] netlink: 104 bytes leftover after parsing attributes in process `syz.3.816'. [ 151.191885][ T4156] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 151.241855][ T6870] loop1: detected capacity change from 0 to 1024 [ 151.311951][ T6581] wlan1: authentication with 08:02:11:00:00:00 timed out [ 151.332417][ T6888] loop0: detected capacity change from 0 to 4096 [ 151.376039][ T6888] __ntfs_error: 8 callbacks suppressed [ 151.376053][ T6888] ntfs: (device loop0): parse_options(): Unrecognized mount option d. [ 151.705603][ T6908] loop0: detected capacity change from 0 to 2048 [ 151.756651][ T6908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.957290][ T6895] loop1: detected capacity change from 0 to 32768 [ 152.005142][ T6895] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.825 (6895) [ 152.011111][ T6895] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 152.014592][ T6895] BTRFS error (device loop1): superblock checksum mismatch [ 152.017365][ T6895] BTRFS error (device loop1): open_ctree failed [ 152.046440][ T4676] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4676) [ 152.149134][ T1672] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.186859][ T6906] chnl_net:caif_netlink_parms(): no params data found [ 152.246425][ T1672] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.260078][ T6930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.326420][ T1672] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.398901][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.510616][ T1672] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.543483][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.612736][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.633108][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.635173][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.640673][ T6906] device bridge_slave_0 entered promiscuous mode [ 152.685165][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.691099][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.698464][ T6906] device bridge_slave_1 entered promiscuous mode [ 152.753582][ T6906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.758270][ T6906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.790338][ T6959] FAULT_INJECTION: forcing a failure. [ 152.790338][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 152.811177][ T6954] loop4: detected capacity change from 0 to 4096 [ 152.825893][ T6959] CPU: 0 PID: 6959 Comm: syz.0.850 Not tainted 5.15.162-syzkaller #0 [ 152.828155][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 152.831033][ T6959] Call trace: [ 152.832036][ T6959] dump_backtrace+0x0/0x530 [ 152.833304][ T6959] show_stack+0x2c/0x3c [ 152.834511][ T6959] dump_stack_lvl+0x108/0x170 [ 152.835869][ T6959] dump_stack+0x1c/0x58 [ 152.837116][ T6959] should_fail+0x3b8/0x514 [ 152.838370][ T6959] __should_failslab+0xbc/0x110 [ 152.839748][ T6959] should_failslab+0x10/0x28 [ 152.841101][ T6959] slab_pre_alloc_hook+0x64/0xe8 [ 152.842582][ T6959] kmem_cache_alloc+0x98/0x45c [ 152.843937][ T6959] pte_alloc_one+0x78/0x258 [ 152.844586][ T6906] team0: Port device team_slave_0 added [ 152.845205][ T6959] __pte_alloc+0x84/0x2c4 [ 152.848404][ T6959] handle_mm_fault+0x2cd8/0x3424 [ 152.848875][ T6906] team0: Port device team_slave_1 added [ 152.851272][ T6959] do_page_fault+0x700/0xb60 [ 152.852618][ T6959] do_translation_fault+0xe8/0x138 [ 152.854200][ T6959] do_mem_abort+0x70/0x1d8 [ 152.855483][ T6959] el0_da+0x94/0x20c [ 152.856543][ T6959] el0t_64_sync_handler+0xc0/0xe4 [ 152.857962][ T6959] el0t_64_sync+0x1a0/0x1a4 [ 152.859241][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.875566][ T6959] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 152.879749][ T6954] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 152.936702][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.939001][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.939965][ T6959] loop0: detected capacity change from 0 to 4096 [ 152.960316][ T6906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.981394][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.983762][ T6954] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 152.989813][ T6959] ntfs: (device loop0): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 152.993526][ T6954] ntfs3: loop4: Failed to load $Secure. [ 152.997388][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.005100][ T6959] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 153.026393][ T6906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.306683][ T6906] device hsr_slave_0 entered promiscuous mode [ 153.355823][ T6906] device hsr_slave_1 entered promiscuous mode [ 153.401920][ T6906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.405339][ T6906] Cannot create hsr debugfs directory [ 153.498504][ T6993] loop0: detected capacity change from 0 to 8 [ 153.572627][ T6993] netlink: 44 bytes leftover after parsing attributes in process `syz.0.860'. [ 153.670171][ T6998] loop2: detected capacity change from 0 to 8 [ 153.737628][ T6998] netlink: 7 bytes leftover after parsing attributes in process `syz.2.863'. [ 153.741248][ T4656] Bluetooth: hci5: command 0x0409 tx timeout [ 154.745432][ T7015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.834450][ T7015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.889789][ T7015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.947567][ T7020] loop0: detected capacity change from 0 to 4096 [ 155.012331][ T6991] loop4: detected capacity change from 0 to 32768 [ 155.057066][ T6991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.861 (6991) [ 155.094070][ T6981] loop1: detected capacity change from 0 to 65536 [ 155.097580][ T6991] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 155.100017][ T6991] BTRFS info (device loop4): turning off barriers [ 155.113488][ T6991] BTRFS info (device loop4): setting nodatasum [ 155.115474][ T6991] BTRFS info (device loop4): enabling ssd optimizations [ 155.117738][ T6991] BTRFS info (device loop4): using free space tree [ 155.120636][ T6991] BTRFS info (device loop4): has skinny extents [ 155.184001][ T6981] XFS (loop1): Mounting V5 Filesystem [ 155.205439][ T6981] XFS (loop1): Ending clean mount [ 155.218970][ T6981] XFS (loop1): Quotacheck needed: Please wait. [ 155.248190][ T4156] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xb58, inode 0x25 dinode [ 155.260249][ T6991] BTRFS info (device loop4): checking UUID tree [ 155.273279][ T4156] XFS (loop1): Unmount and run xfs_repair [ 155.289431][ T4156] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 155.304793][ T4156] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 155.317859][ T4156] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 155.330370][ T4156] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 155.354154][ T6906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.361729][ T4156] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 155.372164][ T4156] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 155.377649][ T4156] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 155.391565][ T4156] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 155.411758][ T4156] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 155.444812][ T6981] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 155.459070][ T6906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.494696][ T6906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.503701][ T3970] XFS (loop1): Unmounting Filesystem [ 155.653630][ T6906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.772912][ T1672] device hsr_slave_0 left promiscuous mode [ 155.832346][ T1672] device hsr_slave_1 left promiscuous mode [ 155.936523][ T4024] Bluetooth: hci5: command 0x041b tx timeout [ 156.018877][ T7100] netlink: 68 bytes leftover after parsing attributes in process `syz.0.872'. [ 156.034252][ T1672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.036375][ T1672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.038907][ T1672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.041115][ T1672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.058288][ T1672] device bridge_slave_1 left promiscuous mode [ 156.075352][ T1672] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.163813][ T1672] device bridge_slave_0 left promiscuous mode [ 156.165722][ T1672] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.502156][ T1672] device veth1_macvtap left promiscuous mode [ 156.503953][ T1672] device veth0_macvtap left promiscuous mode [ 156.507802][ T1672] device veth1_vlan left promiscuous mode [ 156.507887][ T1672] device veth0_vlan left promiscuous mode [ 156.995881][ T1672] team0 (unregistering): Port device team_slave_1 removed [ 157.012240][ T1672] team0 (unregistering): Port device team_slave_0 removed [ 157.020891][ T1672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.059077][ T1672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.187571][ T1672] bond0 (unregistering): Released all slaves [ 157.328039][ T7128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.882'. [ 157.497186][ T7144] loop0: detected capacity change from 0 to 164 [ 157.511219][ T6906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.548044][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.550763][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.567807][ T7138] loop4: detected capacity change from 0 to 512 [ 157.580023][ T6906] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.599184][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.602257][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.604857][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.606883][ T5625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.610103][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.642211][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.645386][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.647928][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.649957][ T4024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.665506][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.668653][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.678510][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.716948][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.744927][ T7138] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.765960][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.768937][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.774047][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.793242][ T7138] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 157.799692][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.808119][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.818720][ T6906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.822926][ T6906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.826982][ T7138] EXT4-fs (loop4): 1 truncate cleaned up [ 157.828732][ T7138] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.834208][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.846569][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.849667][ T7144] loop0: detected capacity change from 0 to 164 [ 157.897397][ T7138] EXT4-fs error (device loop4): ext4_get_first_dir_block:3554: inode #12: comm syz.4.886: Attempting to read directory block (0) that is past i_size (512) [ 157.951890][ T5785] Bluetooth: hci5: command 0x040f tx timeout [ 158.008583][ T7144] loop0: detected capacity change from 0 to 164 [ 158.128955][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.131599][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.201003][ T6906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.255104][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.258421][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.288512][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.291589][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.299871][ T7144] loop0: detected capacity change from 0 to 164 [ 158.343461][ T6906] device veth0_vlan entered promiscuous mode [ 158.413554][ T7186] TCP: TCP_TX_DELAY enabled [ 158.781956][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.790524][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.029947][ T6906] device veth1_vlan entered promiscuous mode [ 159.061486][ T7188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.144657][ T7188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.173316][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.176289][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.184121][ T6906] device veth0_macvtap entered promiscuous mode [ 159.199788][ T7188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.213962][ T6906] device veth1_macvtap entered promiscuous mode [ 159.240830][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.251558][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.261722][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.264728][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.267491][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.288449][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.301459][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.304624][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.320118][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.327906][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.330671][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.333471][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.336387][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.355479][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.358333][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.361036][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.364809][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.392928][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.396431][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.399311][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.414414][ T6906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.416935][ T6906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.419236][ T6906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.421573][ T6906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.575392][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.578454][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.605318][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.628059][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.630787][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.647582][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.909784][ T7193] loop4: detected capacity change from 0 to 32768 [ 160.719502][ T4655] Bluetooth: hci5: command 0x0419 tx timeout [ 160.789245][ T7223] netlink: 'syz.2.908': attribute type 2 has an invalid length. [ 160.793353][ T7218] loop0: detected capacity change from 0 to 2048 [ 160.816035][ T7193] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 160.818961][ T7193] BTRFS info (device loop4): using free space tree [ 160.837776][ T7193] BTRFS info (device loop4): has skinny extents [ 161.443855][ T7236] loop3: detected capacity change from 0 to 256 [ 161.446055][ T7218] loop0: p1 < > p4 [ 161.462597][ T7237] Injecting memory failure for pfn 0x12a83f at process virtual address 0x20ffa000 [ 161.462868][ T7218] loop0: p4 size 8388608 extends beyond EOD, truncated [ 161.468049][ T7237] Memory failure: 0x12a83f: recovery action for dirty LRU page: Recovered [ 161.482495][ T7236] FAT-fs (loop3): Unrecognized mount option "5tf8=1" or missing value [ 161.491989][ T7237] Injecting memory failure for pfn 0x12eb44 at process virtual address 0x20ffb000 [ 161.502028][ T7237] Memory failure: 0x12eb44: keeping poisoned page in swap cache [ 161.504283][ T7237] Memory failure: 0x12eb44: recovery action for clean swapcache page: Recovered [ 161.506780][ T7237] Injecting memory failure for pfn 0x1208cb at process virtual address 0x20ffc000 [ 161.574196][ T7235] xt_hashlimit: max too large, truncated to 1048576 [ 161.576248][ T7235] xt_hashlimit: overflow, try lower: 0/0 [ 161.592723][ T7237] Memory failure: 0x1208cb: recovery action for dirty LRU page: Recovered [ 161.637393][ T7193] BTRFS info (device loop4): enabling ssd optimizations [ 161.644534][ T7237] netlink: 104 bytes leftover after parsing attributes in process `syz.2.910'. [ 162.066817][ T7268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.915'. [ 162.614667][ T3962] udevd[3962]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 162.659310][ T7226] loop0: detected capacity change from 0 to 32768 [ 162.684391][ T7266] loop1: detected capacity change from 0 to 4096 [ 162.791803][ T7266] ntfs: (device loop1): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 162.796360][ T7266] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem. [ 162.891435][ T7273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.947456][ T7273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.010552][ T7273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.052597][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.927'. [ 165.070791][ T7293] loop2: detected capacity change from 0 to 4096 [ 165.209039][ T7307] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.468617][ T7322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.503888][ T7324] loop2: detected capacity change from 0 to 128 [ 166.254454][ T7324] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 166.279182][ T7324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.361331][ T7331] netlink: 104 bytes leftover after parsing attributes in process `syz.0.938'. [ 166.506165][ T7337] loop1: detected capacity change from 0 to 512 [ 166.568566][ T7337] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.274055][ T1672] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.353173][ T7346] loop0: detected capacity change from 0 to 2048 [ 167.408420][ T3962] loop0: p1 < > p4 [ 167.413620][ T3962] loop0: p4 size 8388608 extends beyond EOD, truncated [ 167.418406][ T1672] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.511437][ T7346] loop0: p1 < > p4 [ 167.513594][ T7346] loop0: p4 size 8388608 extends beyond EOD, truncated [ 167.572691][ T4017] Bluetooth: hci2: command 0x0409 tx timeout [ 167.594774][ T1672] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.830544][ T7361] loop0: detected capacity change from 0 to 512 [ 168.527856][ T7355] loop2: detected capacity change from 0 to 32768 [ 168.605219][ T7368] netlink: 104 bytes leftover after parsing attributes in process `syz.1.943'. [ 168.637066][ T1672] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.640878][ T7369] Dev loop2 SGI disklabel: csum bad, label corrupted [ 168.650088][ T7355] Dev loop2 SGI disklabel: csum bad, label corrupted [ 168.689784][ T7361] EXT4-fs (loop0): 1 orphan inode deleted [ 168.691431][ T7361] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 168.735188][ T7318] chnl_net:caif_netlink_parms(): no params data found [ 168.745786][ T7378] loop3: detected capacity change from 0 to 256 [ 168.995022][ T4656] Bluetooth: hci3: command 0x0406 tx timeout [ 169.008109][ T4656] Bluetooth: hci0: command 0x0406 tx timeout [ 169.456603][ T7378] FAT-fs (loop3): Unrecognized mount option "fmask=0177777777777777600000" or missing value [ 169.613799][ T7388] usb usb5: usbfs: process 7388 (syz.1.953) did not claim interface 0 before use [ 169.621258][ T7388] loop1: detected capacity change from 0 to 64 [ 169.632438][ T4024] Bluetooth: hci2: command 0x041b tx timeout [ 169.648731][ T7392] loop2: detected capacity change from 0 to 764 [ 169.668230][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.670516][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.674908][ T7318] device bridge_slave_0 entered promiscuous mode [ 169.676434][ T7378] loop3: detected capacity change from 0 to 1024 [ 169.690132][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.716223][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.719746][ T7318] device bridge_slave_1 entered promiscuous mode [ 169.767645][ T7396] loop0: detected capacity change from 0 to 64 [ 169.787417][ T7378] FAULT_INJECTION: forcing a failure. [ 169.787417][ T7378] name failslab, interval 1, probability 0, space 0, times 0 [ 169.806251][ T7378] CPU: 1 PID: 7378 Comm: syz.3.951 Not tainted 5.15.162-syzkaller #0 [ 169.808662][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 169.811521][ T7378] Call trace: [ 169.812406][ T7378] dump_backtrace+0x0/0x530 [ 169.813774][ T7378] show_stack+0x2c/0x3c [ 169.814913][ T7378] dump_stack_lvl+0x108/0x170 [ 169.816273][ T7378] dump_stack+0x1c/0x58 [ 169.817510][ T7378] should_fail+0x3b8/0x514 [ 169.818737][ T7378] __should_failslab+0xbc/0x110 [ 169.820144][ T7378] should_failslab+0x10/0x28 [ 169.821442][ T7378] slab_pre_alloc_hook+0x64/0xe8 [ 169.822818][ T7378] kmem_cache_alloc_trace+0x9c/0x47c [ 169.824299][ T7378] hfsplus_listxattr+0x36c/0xc9c [ 169.825801][ T7378] listxattr+0x29c/0x3e4 [ 169.827082][ T7378] __arm64_sys_listxattr+0x13c/0x21c [ 169.828582][ T7378] invoke_syscall+0x98/0x2b8 [ 169.829916][ T7378] el0_svc_common+0x138/0x258 [ 169.831345][ T7378] do_el0_svc+0x58/0x14c [ 169.832536][ T7378] el0_svc+0x7c/0x1f0 [ 169.833608][ T7378] el0t_64_sync_handler+0x84/0xe4 [ 169.835018][ T7378] el0t_64_sync+0x1a0/0x1a4 [ 170.475384][ T7318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.510568][ T7318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.627665][ T4674] udevd[4674]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 170.632416][ T7318] team0: Port device team_slave_0 added [ 170.706944][ T7318] team0: Port device team_slave_1 added [ 170.799367][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.810219][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.120361][ T7318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.270526][ T4024] Bluetooth: hci2: command 0x040f tx timeout [ 172.287425][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.289314][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.357684][ T7318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.365524][ T3962] udevd[3962]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 172.528354][ T7433] FAULT_INJECTION: forcing a failure. [ 172.528354][ T7433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.561860][ T7433] CPU: 0 PID: 7433 Comm: syz.3.967 Not tainted 5.15.162-syzkaller #0 [ 172.564226][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 172.567034][ T7433] Call trace: [ 172.567973][ T7433] dump_backtrace+0x0/0x530 [ 172.569342][ T7433] show_stack+0x2c/0x3c [ 172.570506][ T7433] dump_stack_lvl+0x108/0x170 [ 172.571821][ T7433] dump_stack+0x1c/0x58 [ 172.573034][ T7433] should_fail+0x3b8/0x514 [ 172.574267][ T7433] should_fail_usercopy+0x20/0x30 [ 172.575689][ T7433] ipv6_getsockopt_sticky+0x12c/0x2c4 [ 172.577312][ T7433] ipv6_getsockopt+0x16e8/0x3470 [ 172.578784][ T7433] udpv6_getsockopt+0x94/0xac [ 172.580063][ T7433] sock_common_getsockopt+0xa8/0xc4 [ 172.581653][ T7433] __sys_getsockopt+0x1e8/0x460 [ 172.583243][ T7433] __arm64_sys_getsockopt+0xb8/0xd4 [ 172.584739][ T7433] invoke_syscall+0x98/0x2b8 [ 172.586056][ T7433] el0_svc_common+0x138/0x258 [ 172.587374][ T7433] do_el0_svc+0x58/0x14c [ 172.588646][ T7433] el0_svc+0x7c/0x1f0 [ 172.589788][ T7433] el0t_64_sync_handler+0x84/0xe4 [ 172.591190][ T7433] el0t_64_sync+0x1a0/0x1a4 [ 172.756723][ T7318] device hsr_slave_0 entered promiscuous mode [ 172.770501][ T7442] loop1: detected capacity change from 0 to 64 [ 172.862322][ T7318] device hsr_slave_1 entered promiscuous mode [ 172.885494][ T3962] udevd[3962]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 172.907730][ T4674] udevd[4674]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 172.915084][ T7318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.917265][ T7318] Cannot create hsr debugfs directory [ 172.987485][ T7454] loop3: detected capacity change from 0 to 512 [ 173.090204][ T7454] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.971: corrupted in-inode xattr [ 173.093995][ T7454] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.971: couldn't read orphan inode 15 (err -117) [ 173.117910][ T7454] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.480057][ T7468] loop1: detected capacity change from 0 to 4096 [ 173.522044][ T7468] ntfs: (device loop1): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 173.526214][ T7468] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem. [ 173.706230][ T7472] loop3: detected capacity change from 0 to 8192 [ 173.763217][ T3962] Dev loop3: unable to read partition block 1875349504 [ 173.782997][ T3962] loop3: RDSK (57344) unable to read partition table [ 173.785011][ T3962] loop3: partition table beyond EOD, truncated [ 173.789411][ T7472] Dev loop3: unable to read partition block 1875349504 [ 173.812143][ T7472] loop3: RDSK (57344) unable to read partition table [ 173.814120][ T7472] loop3: partition table beyond EOD, truncated [ 173.822212][ T7472] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 174.451899][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'. [ 174.834158][ T5785] Bluetooth: hci2: command 0x0419 tx timeout [ 174.857008][ T7502] loop1: detected capacity change from 0 to 256 [ 174.897483][ T7504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.964908][ T7502] netlink: 84 bytes leftover after parsing attributes in process `syz.1.981'. [ 174.967776][ T7502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 175.140541][ T7514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.982'. [ 175.270761][ T7520] netlink: 104 bytes leftover after parsing attributes in process `syz.1.987'. [ 175.321867][ T7318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.378627][ T7531] loop0: detected capacity change from 0 to 256 [ 175.396906][ T7528] loop3: detected capacity change from 0 to 512 [ 175.412748][ T7531] FAT-fs (loop0): Unrecognized mount option "fmask=0177777777777777600000" or missing value [ 175.458679][ T7528] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.481085][ T7318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.547777][ T7318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.560793][ T7538] loop1: detected capacity change from 0 to 4096 [ 175.572619][ T7318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.593620][ T7531] loop0: detected capacity change from 0 to 1024 [ 175.620538][ T7538] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 175.631507][ T7538] ntfs3: loop1: Failed to load $Volume. [ 175.665028][ T1672] device hsr_slave_0 left promiscuous mode [ 175.730245][ T1672] device hsr_slave_1 left promiscuous mode [ 175.749550][ T7546] loop0: detected capacity change from 0 to 64 [ 175.931825][ T1672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.933959][ T1672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.969836][ T1672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.076723][ T1672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.434090][ T1672] device bridge_slave_1 left promiscuous mode [ 176.490210][ T1672] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.795034][ T1672] device bridge_slave_0 left promiscuous mode [ 176.796998][ T1672] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.854945][ T7573] loop0: detected capacity change from 0 to 512 [ 176.890404][ T7573] EXT4-fs (loop0): 1 orphan inode deleted [ 176.892314][ T7573] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 176.979532][ T1672] device veth1_macvtap left promiscuous mode [ 176.981388][ T1672] device veth0_macvtap left promiscuous mode [ 176.989391][ T1672] device veth1_vlan left promiscuous mode [ 176.992018][ T1672] device veth0_vlan left promiscuous mode [ 177.012825][ T7577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.255902][ T1672] team0 (unregistering): Port device team_slave_1 removed [ 177.265345][ T1672] team0 (unregistering): Port device team_slave_0 removed [ 177.275193][ T1672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.338155][ T1672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.497865][ T1672] bond0 (unregistering): Released all slaves [ 177.616106][ T7566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.618525][ T7566] device batadv_slave_1 entered promiscuous mode [ 177.634332][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'. [ 177.656732][ T7569] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1000'. [ 177.709446][ T7584] loop2: detected capacity change from 0 to 256 [ 177.720431][ T7586] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1004'. [ 177.742573][ T7584] FAT-fs (loop2): Unrecognized mount option "fmask=0177777777777777600000" or missing value [ 177.824629][ T7588] loop1: detected capacity change from 0 to 2048 [ 177.833651][ T7318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.836581][ T7584] loop2: detected capacity change from 0 to 1024 [ 177.848076][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.850911][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.866382][ T7318] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.875413][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.878433][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.882327][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.884345][ T4024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.931939][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.934641][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.937398][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.949466][ T7594] netlink: 'syz.3.1007': attribute type 4 has an invalid length. [ 177.950471][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.953780][ T4024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.956220][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.967792][ T7594] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1007'. [ 177.996145][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.999095][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.009077][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.028658][ T7606] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1005'. [ 178.057151][ T7318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.066875][ T7318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.103737][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.106682][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.109620][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.124261][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.153956][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.167998][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.194559][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.241981][ T7609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.248480][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.008031][ T7622] loop3: detected capacity change from 0 to 8 [ 179.083631][ T7625] loop0: detected capacity change from 0 to 256 [ 179.092880][ T7629] FAULT_INJECTION: forcing a failure. [ 179.092880][ T7629] name failslab, interval 1, probability 0, space 0, times 0 [ 179.096503][ T7629] CPU: 1 PID: 7629 Comm: syz.2.1016 Not tainted 5.15.162-syzkaller #0 [ 179.098885][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 179.101569][ T7629] Call trace: [ 179.102447][ T7629] dump_backtrace+0x0/0x530 [ 179.103696][ T7629] show_stack+0x2c/0x3c [ 179.104803][ T7629] dump_stack_lvl+0x108/0x170 [ 179.106065][ T7629] dump_stack+0x1c/0x58 [ 179.107227][ T7629] should_fail+0x3b8/0x514 [ 179.108467][ T7629] __should_failslab+0xbc/0x110 [ 179.109703][ T7629] should_failslab+0x10/0x28 [ 179.111079][ T7629] slab_pre_alloc_hook+0x64/0xe8 [ 179.112412][ T7629] kmem_cache_alloc+0x98/0x45c [ 179.113795][ T7629] __anon_vma_prepare+0xb0/0x378 [ 179.115235][ T7629] handle_mm_fault+0x30a8/0x3424 [ 179.116615][ T7629] do_page_fault+0x700/0xb60 [ 179.117892][ T7629] do_translation_fault+0xe8/0x138 [ 179.119366][ T7629] do_mem_abort+0x70/0x1d8 [ 179.120573][ T7629] el0_da+0x94/0x20c [ 179.121648][ T7629] el0t_64_sync_handler+0xc0/0xe4 [ 179.123057][ T7629] el0t_64_sync+0x1a0/0x1a4 [ 179.145179][ T7622] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1015'. [ 179.148825][ T7625] FAT-fs (loop0): Unrecognized mount option "fmask=0177777777777777600000" or missing value [ 179.214875][ T7629] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 179.310676][ T7625] loop0: detected capacity change from 0 to 1024 [ 179.332360][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.334723][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.338580][ T7629] loop2: detected capacity change from 0 to 4096 [ 179.353302][ T7318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.362966][ T7625] FAULT_INJECTION: forcing a failure. [ 179.362966][ T7625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.374644][ T7629] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 179.378918][ T7629] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 179.391703][ T7625] CPU: 1 PID: 7625 Comm: syz.0.1013 Not tainted 5.15.162-syzkaller #0 [ 179.394069][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 179.396955][ T7625] Call trace: [ 179.397877][ T7625] dump_backtrace+0x0/0x530 [ 179.399105][ T7625] show_stack+0x2c/0x3c [ 179.400293][ T7625] dump_stack_lvl+0x108/0x170 [ 179.401632][ T7625] dump_stack+0x1c/0x58 [ 179.402744][ T7625] should_fail+0x3b8/0x514 [ 179.404026][ T7625] should_fail_usercopy+0x20/0x30 [ 179.405538][ T7625] simple_read_from_buffer+0xd8/0x26c [ 179.407071][ T7625] proc_fail_nth_read+0x1a0/0x248 [ 179.408470][ T7625] vfs_read+0x278/0xb10 [ 179.409630][ T7625] ksys_read+0x15c/0x26c [ 179.410858][ T7625] __arm64_sys_read+0x7c/0x90 [ 179.412215][ T7625] invoke_syscall+0x98/0x2b8 [ 179.413562][ T7625] el0_svc_common+0x138/0x258 [ 179.414812][ T7625] do_el0_svc+0x58/0x14c [ 179.415973][ T7625] el0_svc+0x7c/0x1f0 [ 179.417036][ T7625] el0t_64_sync_handler+0x84/0xe4 [ 179.418545][ T7625] el0t_64_sync+0x1a0/0x1a4 [ 179.486754][ T7645] loop3: detected capacity change from 0 to 2048 [ 179.675807][ T7659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.685108][ T7645] netlink: 'syz.3.1019': attribute type 10 has an invalid length. [ 179.722910][ T7645] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 179.766774][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.769679][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.806577][ T7657] loop2: detected capacity change from 0 to 4096 [ 179.819622][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.822425][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.825409][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.830271][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.834673][ T7318] device veth0_vlan entered promiscuous mode [ 179.853732][ T7318] device veth1_vlan entered promiscuous mode [ 179.896395][ T7657] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 179.900980][ T7657] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 179.927790][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.930565][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.934253][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.943494][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.949262][ T7318] device veth0_macvtap entered promiscuous mode [ 179.963104][ T7318] device veth1_macvtap entered promiscuous mode [ 180.017926][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.044755][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.057830][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.067957][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.070821][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.087255][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.092377][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.096999][ T7657] loop2: detected capacity change from 0 to 2048 [ 180.098863][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.110351][ T7318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.148084][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.150894][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.168428][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.173046][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.197748][ T7318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.200803][ T7318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.221359][ T7318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.228255][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.231390][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.941322][ T7657] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.018312][ T7318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.021168][ T7318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.029237][ T7318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.032461][ T7318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.041080][ T7688] loop0: detected capacity change from 0 to 256 [ 181.166879][ T7217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.169641][ T7217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.175356][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.252991][ T7217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.272558][ T7217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.305495][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.401627][ C0] sched: RT throttling activated [ 182.826117][ T7704] loop3: detected capacity change from 0 to 512 [ 182.859594][ T7704] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.926380][ T7704] EXT4-fs (loop3): 1 truncate cleaned up [ 182.928046][ T7704] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 182.934581][ T7711] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.1034'. [ 182.976063][ T7680] loop1: detected capacity change from 0 to 32768 [ 183.024838][ T7680] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1027 (7680) [ 183.181326][ T7680] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 183.184269][ T7680] BTRFS info (device loop1): using free space tree [ 183.186169][ T7680] BTRFS info (device loop1): has skinny extents [ 184.056650][ T7744] Injecting memory failure for pfn 0x12c50b at process virtual address 0x20ffa000 [ 184.056834][ T7743] FAULT_INJECTION: forcing a failure. [ 184.056834][ T7743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.072843][ T7743] CPU: 0 PID: 7743 Comm: syz.4.1043 Not tainted 5.15.162-syzkaller #0 [ 184.075141][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 184.076732][ T7744] Memory failure: 0x12c50b: recovery action for dirty LRU page: Recovered [ 184.077752][ T7743] Call trace: [ 184.077761][ T7743] dump_backtrace+0x0/0x530 [ 184.082165][ T7743] show_stack+0x2c/0x3c [ 184.083352][ T7743] dump_stack_lvl+0x108/0x170 [ 184.084660][ T7743] dump_stack+0x1c/0x58 [ 184.085786][ T7743] should_fail+0x3b8/0x514 [ 184.087087][ T7743] should_fail_usercopy+0x20/0x30 [ 184.088542][ T7743] simple_read_from_buffer+0xd8/0x26c [ 184.090133][ T7743] proc_fail_nth_read+0x1a0/0x248 [ 184.091518][ T7743] vfs_read+0x278/0xb10 [ 184.092747][ T7743] ksys_read+0x15c/0x26c [ 184.093983][ T7743] __arm64_sys_read+0x7c/0x90 [ 184.095334][ T7743] invoke_syscall+0x98/0x2b8 [ 184.096660][ T7743] el0_svc_common+0x138/0x258 [ 184.098051][ T7743] do_el0_svc+0x58/0x14c [ 184.099307][ T7743] el0_svc+0x7c/0x1f0 [ 184.100425][ T7743] el0t_64_sync_handler+0x84/0xe4 [ 184.101889][ T7743] el0t_64_sync+0x1a0/0x1a4 [ 184.106954][ T7744] Injecting memory failure for pfn 0x12d5c5 at process virtual address 0x20ffb000 [ 184.108555][ T7722] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1041'. [ 184.128551][ T7744] Memory failure: 0x12d5c5: keeping poisoned page in swap cache [ 184.130903][ T7744] Memory failure: 0x12d5c5: recovery action for clean swapcache page: Recovered [ 184.161718][ T7744] Injecting memory failure for pfn 0x129015 at process virtual address 0x20ffc000 [ 184.188520][ T7680] BTRFS error (device loop1): open_ctree failed [ 184.193650][ T7744] Memory failure: 0x129015: recovery action for dirty LRU page: Recovered [ 184.278576][ T4674] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by udevd (4674) [ 185.342146][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'. [ 186.311395][ T7781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.330997][ T7778] loop2: detected capacity change from 0 to 128 [ 186.423193][ T7778] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 186.437467][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'. [ 186.453112][ T7778] UDF-fs: error (device loop2): udf_read_inode: (ino 93) failed !bh [ 186.455485][ T7778] UDF-fs: Scanning with blocksize 512 failed [ 186.462230][ T7786] device vlan2 entered promiscuous mode [ 186.481216][ T7778] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 186.487150][ T7778] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 186.501819][ T7778] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 186.508086][ T7778] UDF-fs: Scanning with blocksize 1024 failed [ 186.520076][ T7778] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 186.534146][ T7778] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 186.551261][ T7778] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 186.559598][ T7778] UDF-fs: Scanning with blocksize 2048 failed [ 186.574940][ T7778] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 186.611583][ T7778] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 186.615850][ T7778] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 186.617995][ T7778] UDF-fs: Scanning with blocksize 4096 failed [ 186.619690][ T7778] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 186.755973][ T7789] loop3: detected capacity change from 0 to 256 [ 186.814238][ T7789] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1060'. [ 186.817196][ T7789] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.963136][ T7793] loop2: detected capacity change from 0 to 1024 [ 187.164181][ T7800] loop3: detected capacity change from 0 to 512 [ 187.208323][ T153] hfsplus: b-tree write err: -5, ino 4 [ 187.262151][ T7800] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.266915][ T7785] loop0: detected capacity change from 0 to 32768 [ 187.356053][ T7812] loop2: detected capacity change from 0 to 256 [ 187.390880][ T7785] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1059 (7785) [ 187.458515][ T7812] FAT-fs (loop2): Unrecognized mount option "fmask=0177777777777777600000" or missing value [ 187.478412][ T7785] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 187.480944][ T7785] BTRFS info (device loop0): using free space tree [ 187.494424][ T7785] BTRFS info (device loop0): has skinny extents [ 187.546782][ T7814] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 187.624012][ T7812] loop2: detected capacity change from 0 to 1024 [ 187.712082][ T7777] loop1: detected capacity change from 0 to 65536 [ 187.813568][ T7785] BTRFS info (device loop0): enabling ssd optimizations [ 188.558947][ T7839] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1070'. [ 188.639690][ T7847] loop2: detected capacity change from 0 to 512 [ 188.875903][ T7847] EXT4-fs (loop2): 1 orphan inode deleted [ 188.877644][ T7847] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 189.123472][ T7866] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1078'. [ 190.132945][ T7885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1077'. [ 190.214469][ T7893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 190.342424][ T7899] loop0: detected capacity change from 0 to 8 [ 191.317318][ T7908] FAULT_INJECTION: forcing a failure. [ 191.317318][ T7908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.320962][ T7908] CPU: 0 PID: 7908 Comm: syz.3.1092 Not tainted 5.15.162-syzkaller #0 [ 191.323235][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 191.326024][ T7908] Call trace: [ 191.326969][ T7908] dump_backtrace+0x0/0x530 [ 191.328227][ T7908] show_stack+0x2c/0x3c [ 191.329502][ T7908] dump_stack_lvl+0x108/0x170 [ 191.330757][ T7908] dump_stack+0x1c/0x58 [ 191.331922][ T7908] should_fail+0x3b8/0x514 [ 191.333108][ T7908] should_fail_alloc_page+0x74/0xa8 [ 191.334552][ T7908] prepare_alloc_pages+0x160/0x460 [ 191.336103][ T7908] __alloc_pages+0x138/0x674 [ 191.337453][ T7908] alloc_pages_vma+0x294/0x7c0 [ 191.338782][ T7908] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 191.340765][ T7908] handle_mm_fault+0x1f0c/0x3424 [ 191.342314][ T7908] do_page_fault+0x700/0xb60 [ 191.343668][ T7908] do_translation_fault+0xe8/0x138 [ 191.345208][ T7908] do_mem_abort+0x70/0x1d8 [ 191.346431][ T7908] el0_da+0x94/0x20c [ 191.347536][ T7908] el0t_64_sync_handler+0xc0/0xe4 [ 191.348866][ T7908] el0t_64_sync+0x1a0/0x1a4 [ 191.441338][ T7908] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 191.566250][ T7916] loop2: detected capacity change from 0 to 8 [ 191.568053][ T7908] loop3: detected capacity change from 0 to 4096 [ 191.618317][ T7908] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 191.620171][ T7916] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1096'. [ 191.632058][ T7908] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 191.938679][ T7933] loop0: detected capacity change from 0 to 512 [ 192.027171][ T7903] loop1: detected capacity change from 0 to 32768 [ 192.054160][ T7933] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.513933][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.517072][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.765896][ T7933] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 192.782315][ T7933] EXT4-fs (loop0): 1 truncate cleaned up [ 192.783959][ T7933] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 192.795731][ T7903] XFS (loop1): Mounting V5 Filesystem [ 192.874467][ T7955] loop3: detected capacity change from 0 to 164 [ 192.964777][ T7955] Unable to read rock-ridge attributes [ 193.060809][ T7903] XFS (loop1): Ending clean mount [ 193.163959][ T149] block nbd2: Attempted send on invalid socket [ 193.165765][ T149] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.172449][ T7962] FAT-fs (nbd2): unable to read boot sector [ 195.741046][ T3970] XFS (loop1): Unmounting Filesystem [ 195.878116][ T8004] loop3: detected capacity change from 0 to 128 [ 195.937822][ T7977] loop4: detected capacity change from 0 to 32768 [ 195.997553][ T8004] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.020738][ T7977] XFS (loop4): Mounting V5 Filesystem [ 196.210696][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 196.268103][ T7977] XFS (loop4): Ending clean mount [ 196.278772][ T7977] XFS (loop4): Quotacheck needed: Please wait. [ 196.348932][ T7977] XFS (loop4): Quotacheck: Done. [ 196.383099][ T7318] XFS (loop4): Unmounting Filesystem [ 196.420318][ T8034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.490945][ T8038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.493900][ T8039] loop0: detected capacity change from 0 to 256 [ 196.521710][ T8039] FAT-fs (loop0): Unrecognized mount option "fmask=0177777777777777600000" or missing value [ 196.565973][ T8028] loop1: detected capacity change from 0 to 8192 [ 196.571977][ T8038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.634765][ T8028] Dev loop1: unable to read partition block 1875349504 [ 196.637506][ T8028] loop1: RDSK (57344) unable to read partition table [ 196.639640][ T8028] loop1: partition table beyond EOD, truncated [ 196.641518][ T8028] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 196.723261][ T8039] loop0: detected capacity change from 0 to 1024 [ 196.726768][ T3589] Dev loop1: unable to read partition block 1875349504 [ 196.729002][ T3589] loop1: RDSK (57344) unable to read partition table [ 196.731025][ T3589] loop1: partition table beyond EOD, truncated [ 197.628888][ T8054] loop3: detected capacity change from 0 to 8 [ 197.664155][ T8056] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1132'. [ 197.717470][ T8059] loop1: detected capacity change from 0 to 512 [ 197.808235][ T8059] EXT4-fs (loop1): 1 orphan inode deleted [ 197.809826][ T8059] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 197.979688][ T8070] loop4: detected capacity change from 0 to 512 [ 198.627542][ T8070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e02c, mo2=0002] [ 198.629969][ T8070] System zones: 1-12 [ 198.633507][ T8070] EXT4-fs error (device loop4): __ext4_iget:4861: inode #11: block 393240: comm syz.4.1127: invalid block [ 198.647593][ T8070] EXT4-fs (loop4): Remounting filesystem read-only [ 198.658902][ T8070] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1127: couldn't read orphan inode 11 (err -117) [ 198.682315][ T8070] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,bsdgroups,noinit_itable,errors=remount-ro,data_err=ignore. Quota mode: none. [ 198.772864][ T8081] fuse: Unknown parameter '7' [ 199.318676][ T8069] loop2: detected capacity change from 0 to 32768 [ 199.957615][ T6466] Bluetooth: hci4: command 0x0406 tx timeout [ 200.127186][ T8097] loop1: detected capacity change from 0 to 256 [ 200.129698][ T8097] FAT-fs (loop1): Unrecognized mount option "fmask=0177777777777777600000" or missing value [ 200.256570][ T8070] dlm: dev_write: no op 0 0 [ 200.508364][ T8069] XFS (loop2): Mounting V5 Filesystem [ 200.659291][ T8104] loop0: detected capacity change from 0 to 32768 [ 200.679070][ T8113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.720681][ T8123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1152'. [ 200.741720][ T8069] XFS (loop2): Ending clean mount [ 200.772292][ T5785] wlan1: authenticate with 08:02:11:00:00:00 [ 200.774851][ T5785] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 200.779991][ T8113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.793603][ T556] wlan1: authenticated [ 200.814159][ T4021] mac80211_hwsim hwsim21 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 200.823985][ T9] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 200.846913][ T9] wlan1: RX AssocResp from 08:02:11:00:00:01 (capab=0x1 status=0 aid=1) [ 200.847232][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.849405][ T9] wlan1: no SuppRates element in AssocResp [ 200.850555][ T8104] XFS (loop0): Mounting V5 Filesystem [ 200.999631][ T8104] XFS (loop0): Ending clean mount [ 201.003606][ T8104] XFS (loop0): Quotacheck needed: Please wait. [ 201.089161][ T8104] XFS (loop0): Quotacheck: Done. [ 201.126006][ T8104] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1148'. [ 201.320775][ T8156] FAULT_INJECTION: forcing a failure. [ 201.320775][ T8156] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.334785][ T8156] CPU: 1 PID: 8156 Comm: syz.3.1161 Not tainted 5.15.162-syzkaller #0 [ 201.337121][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 201.339897][ T8156] Call trace: [ 201.340829][ T8156] dump_backtrace+0x0/0x530 [ 201.342115][ T8156] show_stack+0x2c/0x3c [ 201.343328][ T8156] dump_stack_lvl+0x108/0x170 [ 201.344659][ T8156] dump_stack+0x1c/0x58 [ 201.345818][ T8156] should_fail+0x3b8/0x514 [ 201.347053][ T8156] should_fail_alloc_page+0x74/0xa8 [ 201.348503][ T8156] prepare_alloc_pages+0x160/0x460 [ 201.349970][ T8156] __alloc_pages+0x138/0x674 [ 201.351276][ T8156] alloc_pages_vma+0x294/0x7c0 [ 201.352586][ T8156] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 201.354384][ T8156] handle_mm_fault+0x1f0c/0x3424 [ 201.355778][ T8156] do_page_fault+0x700/0xb60 [ 201.357060][ T8156] do_translation_fault+0xe8/0x138 [ 201.358426][ T8156] do_mem_abort+0x70/0x1d8 [ 201.359667][ T8156] el0_da+0x94/0x20c [ 201.360736][ T8156] el0t_64_sync_handler+0xc0/0xe4 [ 201.362082][ T8156] el0t_64_sync+0x1a0/0x1a4 [ 201.414297][ T8156] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 201.466600][ T4594] XFS (loop0): Unmounting Filesystem [ 201.470024][ T8158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1162'. [ 201.488019][ T8158] netlink: 'syz.4.1162': attribute type 3 has an invalid length. [ 201.490258][ T8158] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1162'. [ 201.575961][ T8156] loop3: detected capacity change from 0 to 4096 [ 201.682469][ T3976] XFS (loop2): Unmounting Filesystem [ 201.684337][ T8156] ntfs: (device loop3): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 201.688614][ T8156] ntfs: (device loop3): ntfs_fill_super(): Unsupported NTFS filesystem. [ 202.019440][ T8149] loop1: detected capacity change from 0 to 40427 [ 202.079522][ T8149] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.112570][ T8187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.146817][ T8193] wlan1: authenticate with 08:02:11:00:00:00 [ 202.150524][ T8193] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 202.157799][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.171449][ T8195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.180335][ T8149] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.217793][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.220794][ T6578] wlan1: authenticated [ 202.222168][ T7] mac80211_hwsim hwsim21 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 202.230762][ T8149] attempt to access beyond end of device [ 202.230762][ T8149] loop1: rw=2049, want=45104, limit=40427 [ 202.234604][ T556] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 202.239149][ T8187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.308317][ T136] wlan1: RX AssocResp from 08:02:11:00:00:01 (capab=0x1 status=0 aid=1) [ 202.310655][ T136] wlan1: no SuppRates element in AssocResp [ 202.313538][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.359853][ T3970] attempt to access beyond end of device [ 202.359853][ T3970] loop1: rw=2049, want=45112, limit=40427 [ 203.246024][ T8205] loop3: detected capacity change from 0 to 164 [ 203.305403][ T8205] Unable to read rock-ridge attributes [ 203.335951][ T8205] Unable to read rock-ridge attributes [ 203.360824][ T8205] Unable to read rock-ridge attributes [ 203.381352][ T8205] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 203.526925][ T8236] Injecting memory failure for pfn 0x12de41 at process virtual address 0x20ffa000 [ 203.531581][ T8238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.540454][ T8236] Memory failure: 0x12de41: recovery action for dirty LRU page: Recovered [ 203.546345][ T8236] Injecting memory failure for pfn 0x11dc1f at process virtual address 0x20ffb000 [ 203.549658][ T8236] Memory failure: 0x11dc1f: keeping poisoned page in swap cache [ 203.556903][ T8236] Memory failure: 0x11dc1f: recovery action for clean swapcache page: Recovered [ 203.559448][ T8236] Injecting memory failure for pfn 0x12de45 at process virtual address 0x20ffc000 [ 203.581121][ T8236] Memory failure: 0x12de45: recovery action for dirty LRU page: Recovered [ 203.595529][ T8239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.596787][ T8243] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1184'. [ 203.604500][ T8242] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.607870][ T8242] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.610281][ T8242] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.612782][ T8242] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.651040][ T8239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.723886][ T8239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.734356][ T8248] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1192'. [ 203.785955][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'. [ 204.843267][ T8277] FAULT_INJECTION: forcing a failure. [ 204.843267][ T8277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.847072][ T8277] CPU: 1 PID: 8277 Comm: syz.3.1200 Not tainted 5.15.162-syzkaller #0 [ 204.849290][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 204.852158][ T8277] Call trace: [ 204.853062][ T8277] dump_backtrace+0x0/0x530 [ 204.854298][ T8277] show_stack+0x2c/0x3c [ 204.855465][ T8277] dump_stack_lvl+0x108/0x170 [ 204.856746][ T8277] dump_stack+0x1c/0x58 [ 204.857846][ T8277] should_fail+0x3b8/0x514 [ 204.859067][ T8277] should_fail_usercopy+0x20/0x30 [ 204.860512][ T8277] simple_read_from_buffer+0xd8/0x26c [ 204.862004][ T8277] proc_fail_nth_read+0x1a0/0x248 [ 204.863451][ T8277] vfs_read+0x278/0xb10 [ 204.864896][ T8277] ksys_read+0x15c/0x26c [ 204.866171][ T8277] __arm64_sys_read+0x7c/0x90 [ 204.867540][ T8277] invoke_syscall+0x98/0x2b8 [ 204.868936][ T8277] el0_svc_common+0x138/0x258 [ 204.870291][ T8277] do_el0_svc+0x58/0x14c [ 204.871514][ T8277] el0_svc+0x7c/0x1f0 [ 204.872684][ T8277] el0t_64_sync_handler+0x84/0xe4 [ 204.874080][ T8277] el0t_64_sync+0x1a0/0x1a4 [ 204.878169][ T8270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.962453][ T8270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.027297][ T8270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.065904][ T8279] loop0: detected capacity change from 0 to 8192 [ 205.141501][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 205.199473][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'. [ 205.202050][ T8285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1204'. [ 205.234409][ T8279] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 205.237259][ T8279] REISERFS (device loop0): using ordered data mode [ 205.239043][ T8279] reiserfs: using flush barriers [ 205.243402][ T8279] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.272275][ T8279] REISERFS (device loop0): checking transaction log (loop0) [ 205.280594][ T8279] REISERFS (device loop0): Using r5 hash to sort names [ 205.303338][ T8279] reiserfs: enabling write barrier flush mode [ 205.306847][ T8308] loop3: detected capacity change from 0 to 256 [ 205.309736][ T8308] FAT-fs (loop3): Unrecognized mount option "fmask=0177777777777777600000" or missing value [ 205.331443][ T8279] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 205.348561][ T8279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.371351][ T8310] wlan1: authenticate with 08:02:11:00:00:00 [ 205.376951][ T8308] loop3: detected capacity change from 0 to 1024 [ 205.384060][ T8310] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 205.391146][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.446895][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.451140][ T9] wlan1: authenticated [ 205.463666][ T6466] mac80211_hwsim hwsim21 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 205.472513][ T136] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 205.487925][ T8313] loop3: detected capacity change from 0 to 512 [ 205.490905][ T8279] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 205.497385][ T8279] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 205.500201][ T8279] REISERFS (device loop0): Remounting filesystem read-only [ 205.504592][ T6578] wlan1: RX AssocResp from 08:02:11:00:00:01 (capab=0x1 status=0 aid=1) [ 205.504938][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.506884][ T6578] wlan1: no SuppRates element in AssocResp [ 205.567602][ T8313] EXT4-fs (loop3): orphan cleanup on readonly fs [ 205.570739][ T8313] Quota error (device loop3): find_tree_dqentry: Getting block too big (71 >= 6) [ 205.575486][ T8313] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 205.578209][ T8313] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1212: Failed to acquire dquot type 0 [ 205.586957][ T8313] EXT4-fs (loop3): 1 truncate cleaned up [ 205.589301][ T8313] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.704998][ T8323] loop3: detected capacity change from 0 to 256 [ 205.806589][ T8325] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1218'. [ 205.919265][ T8327] loop2: detected capacity change from 0 to 256 [ 206.081692][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 206.088406][ T8339] loop0: detected capacity change from 0 to 512 [ 206.151875][ T8340] sctp: [Deprecated]: syz.4.1222 (pid 8340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.151875][ T8340] Use struct sctp_sack_info instead [ 206.210238][ T8339] EXT4-fs (loop0): 1 orphan inode deleted [ 206.211914][ T8339] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 206.294018][ T8349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.360551][ T8349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.426036][ T8349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.533721][ T8365] __nla_validate_parse: 2 callbacks suppressed [ 206.533737][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1232'. [ 206.542901][ T8365] device syz_tun entered promiscuous mode [ 206.545464][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1232'. [ 206.611665][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.658308][ T8372] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.673861][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.737239][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.762696][ T8374] sctp: failed to load transform for md5: -4 [ 206.931677][ T8390] loop2: detected capacity change from 0 to 8 [ 206.973405][ T8390] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1241'. [ 207.139592][ T8396] loop1: detected capacity change from 0 to 256 [ 207.217938][ T8396] FAT-fs (loop1): Unrecognized mount option "fmask=0177777777777777600000" or missing value [ 207.294926][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1248'. [ 207.347657][ T8396] batman_adv: batadv0: Adding interface: ipvlan2 [ 207.349561][ T8396] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.367472][ T8396] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 207.532342][ T8416] device macvlan2 entered promiscuous mode [ 207.535043][ T8416] device virt_wifi0 entered promiscuous mode [ 207.539345][ T8416] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 207.551973][ T8360] loop3: detected capacity change from 0 to 65536 [ 207.675798][ T8416] loop2: detected capacity change from 0 to 4096 [ 207.738217][ T8360] XFS (loop3): Mounting V5 Filesystem [ 208.512511][ T8416] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 208.621374][ T8425] loop4: detected capacity change from 0 to 32768 [ 208.626743][ T8360] XFS (loop3): Ending clean mount [ 208.640145][ T8360] XFS (loop3): Quotacheck needed: Please wait. [ 208.653223][ T556] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xb58, inode 0x25 dinode [ 208.659100][ T8425] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1250 (8425) [ 208.660632][ T556] XFS (loop3): Unmount and run xfs_repair [ 208.664113][ T556] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 208.667571][ T556] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 208.670319][ T556] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 208.672904][ T556] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 208.676069][ T556] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 208.678580][ T556] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 208.684262][ T556] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 208.686664][ T556] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 208.689222][ T556] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 208.717734][ T8360] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 208.753384][ T6906] XFS (loop3): Unmounting Filesystem [ 208.792293][ T8425] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 208.794891][ T8425] BTRFS info (device loop4): using free space tree [ 208.796670][ T8425] BTRFS info (device loop4): has skinny extents [ 208.911815][ T8446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.967444][ T8459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.980295][ T8461] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 208.982599][ T8461] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 208.992007][ T8461] trusted_key: encrypted_key: master key parameter 'ŹźZq¸Ö‰jÝnœŇ,ńrÜţ"-ĹëÄĘZ`| ÔáŒ>‘Yŕz°"ŞÂú=UɃ^ŮiKďÓ$Ÿ{€d' is invalid [ 209.025498][ T8459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.046247][ T8425] BTRFS info (device loop4): enabling ssd optimizations [ 209.050164][ T7217] BTRFS warning (device loop4): checksum verify failed on 5267456 wanted 0x335d39565c71738882e9c778b97d855737807c3b4cc2d9fb107991a100dbef3e found 0x9868ee62697e2a8bda14c401a9e84255771c781384f2057fade9b032a1deed5a level 0 [ 209.068109][ T8425] BTRFS warning (device loop4): failed to read fs tree: -5 [ 209.082562][ T8425] BTRFS error (device loop4): open_ctree failed [ 209.088085][ T8452] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 209.090395][ T8452] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 209.099932][ T8452] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 209.102394][ T8452] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 209.161630][ T8452] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 209.177011][ T8452] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 209.196921][ T8452] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 209.236815][ T8452] netlink: 'syz.2.1258': attribute type 5 has an invalid length. [ 209.289927][ T8466] FAULT_INJECTION: forcing a failure. [ 209.289927][ T8466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.304304][ T8466] CPU: 0 PID: 8466 Comm: syz.2.1259 Not tainted 5.15.162-syzkaller #0 [ 209.306735][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 209.309484][ T8466] Call trace: [ 209.310344][ T8466] dump_backtrace+0x0/0x530 [ 209.311575][ T8466] show_stack+0x2c/0x3c [ 209.312691][ T8466] dump_stack_lvl+0x108/0x170 [ 209.313972][ T8466] dump_stack+0x1c/0x58 [ 209.315102][ T8466] should_fail+0x3b8/0x514 [ 209.316477][ T8466] should_fail_alloc_page+0x74/0xa8 [ 209.317939][ T8466] prepare_alloc_pages+0x160/0x460 [ 209.319351][ T8466] __alloc_pages+0x138/0x674 [ 209.320622][ T8466] alloc_pages_vma+0x294/0x7c0 [ 209.321976][ T8466] alloc_zeroed_user_highpage_movable+0x9c/0xd8 [ 209.323801][ T8466] handle_mm_fault+0x1f0c/0x3424 [ 209.325183][ T8466] do_page_fault+0x700/0xb60 [ 209.326443][ T8466] do_translation_fault+0xe8/0x138 [ 209.327844][ T8466] do_mem_abort+0x70/0x1d8 [ 209.329046][ T8466] el0_da+0x94/0x20c [ 209.330149][ T8466] el0t_64_sync_handler+0xc0/0xe4 [ 209.331575][ T8466] el0t_64_sync+0x1a0/0x1a4 [ 209.344060][ T8410] loop1: detected capacity change from 0 to 40427 [ 209.360698][ T8466] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 209.397198][ T8466] loop2: detected capacity change from 0 to 4096 [ 209.480801][ T8466] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 209.487257][ T8466] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 209.646932][ T8476] loop0: detected capacity change from 0 to 2048 [ 209.694889][ T8481] loop1: detected capacity change from 0 to 8 [ 209.721673][ T8476] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.749299][ T8481] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1264'. [ 209.780850][ T8487] loop3: detected capacity change from 0 to 512 [ 209.867289][ T8487] EXT2-fs (loop3): (no)acl options not supported [ 209.869679][ T8487] EXT2-fs (loop3): error: can't find an ext2 filesystem on dev loop3. [ 209.931281][ T8493] loop1: detected capacity change from 0 to 512 [ 210.056406][ T8493] EXT4-fs (loop1): 1 orphan inode deleted [ 210.062813][ T8493] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 210.183555][ T8508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.468019][ T8517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.960651][ T8517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.101077][ T8524] 9pnet: Insufficient options for proto=fd [ 211.324109][ T8534] loop3: detected capacity change from 0 to 64 [ 211.333248][ T8534] hfs: unable to change codepage [ 211.348103][ T8534] hfs: unable to parse mount options [ 211.371278][ T8495] loop4: detected capacity change from 0 to 32768 [ 211.398650][ T8540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.410092][ T8495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1271 (8495) [ 211.437720][ T8495] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 211.440118][ T8495] BTRFS info (device loop4): use zlib compression, level 3 [ 211.442096][ T8495] BTRFS info (device loop4): using free space tree [ 211.443807][ T8495] BTRFS info (device loop4): has skinny extents [ 211.480624][ T8542] loop3: detected capacity change from 0 to 2048 [ 211.486795][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 211.546735][ T8542] loop3: p4 < > [ 211.571408][ T8495] BTRFS info (device loop4): enabling ssd optimizations [ 211.586907][ T8572] Injecting memory failure for pfn 0x1270a2 at process virtual address 0x20ffa000 [ 211.593891][ T8572] Memory failure: 0x1270a2: recovery action for dirty LRU page: Recovered [ 211.596442][ T8572] Injecting memory failure for pfn 0x11fb5c at process virtual address 0x20ffb000 [ 211.601741][ T8572] Memory failure: 0x11fb5c: keeping poisoned page in swap cache [ 211.604390][ T8572] Memory failure: 0x11fb5c: recovery action for clean swapcache page: Recovered [ 211.608372][ T8572] Injecting memory failure for pfn 0x11fb56 at process virtual address 0x20ffc000 [ 211.612028][ T8572] Memory failure: 0x11fb56: recovery action for dirty LRU page: Recovered [ 211.623991][ T8572] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1286'. [ 211.740459][ T8580] loop2: detected capacity change from 0 to 4096 [ 211.760379][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1287'. [ 211.797507][ T8580] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 211.943629][ T8580] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 211.947739][ T3589] loop3: p4 < > [ 211.991691][ T8580] ntfs3: loop2: ino=1e, "file1" mmap encrypted not supported [ 212.094197][ T8586] loop1: detected capacity change from 0 to 4096 [ 212.145036][ T8586] NILFS (loop1): invalid segment: Checksum error in segment payload [ 212.152169][ T8586] NILFS (loop1): trying rollback from an earlier position [ 212.168369][ T8594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.209079][ T8586] NILFS (loop1): recovery complete [ 212.468831][ T8597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.993945][ T8599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.043565][ T8594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.050115][ T8603] udc-core: couldn't find an available UDC or it's busy [ 213.058679][ T8603] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 213.217254][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1300'. [ 213.284859][ T8610] loop1: detected capacity change from 0 to 256 [ 213.290873][ T3962] udevd[3962]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 213.348742][ T8610] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1301'. [ 213.363144][ T8610] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 213.410479][ T3962] udevd[3962]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 214.474528][ T8623] loop1: detected capacity change from 0 to 512 [ 214.568002][ T8623] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 215.443313][ T8637] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1312'. [ 215.610201][ T8641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.670278][ T8641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.865111][ T8641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.919674][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.924344][ T8650] validate_nla: 13 callbacks suppressed [ 215.924359][ T8650] netlink: 'syz.4.1316': attribute type 3 has an invalid length. [ 215.995280][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.050185][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.074946][ T8656] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1319'. [ 216.088239][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 216.095654][ T8656] nbd: socks must be embedded in a SOCK_ITEM attr [ 216.259413][ T8661] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1321'. [ 216.364247][ T8663] loop1: detected capacity change from 0 to 8192 [ 216.428686][ T8670] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.573924][ T8663] loop1: detected capacity change from 0 to 512 [ 216.607047][ T8663] EXT4-fs (loop1): can't mount with commit=9, fs mounted w/o journal [ 216.698623][ T8693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1330'. [ 216.774260][ T8697] loop2: detected capacity change from 0 to 2048 [ 216.823998][ T8697] UDF-fs: bad mount option "iocharőœƒLštH]55" or missing value [ 216.909040][ T8706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.932334][ T8702] loop3: detected capacity change from 0 to 8192 [ 216.977564][ T8706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.002941][ T8702] Dev loop3: unable to read partition block 1875349504 [ 217.008761][ T8702] loop3: RDSK (57344) unable to read partition table [ 217.011224][ T8702] loop3: partition table beyond EOD, truncated [ 217.013046][ T8702] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 217.050955][ T8706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.054069][ T3589] Dev loop3: unable to read partition block 1875349504 [ 217.056337][ T3589] loop3: RDSK (57344) unable to read partition table [ 217.058261][ T3589] loop3: partition table beyond EOD, truncated [ 217.316948][ T8731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.378718][ T8685] loop4: detected capacity change from 0 to 40427 [ 217.385167][ T8731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.408601][ T8685] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 217.411089][ T8685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 217.424272][ T8685] F2FS-fs (loop4): invalid crc value [ 217.439927][ T8731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.463812][ T8685] F2FS-fs (loop4): Found nat_bits in checkpoint [ 217.490951][ T8685] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 217.499398][ T8685] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 217.524214][ T8685] mmap: syz.4.1328 (8685) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 218.562636][ T8756] netlink: 'syz.2.1347': attribute type 3 has an invalid length. [ 218.944918][ T8774] loop0: detected capacity change from 0 to 8 [ 219.015483][ T8774] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1353'. [ 219.129171][ T8745] loop3: detected capacity change from 0 to 65536 [ 219.196742][ T8745] XFS (loop3): Mounting V5 Filesystem [ 219.205357][ T8777] loop0: detected capacity change from 0 to 4096 [ 219.252287][ T8777] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 219.282162][ T8745] XFS (loop3): Ending clean mount [ 219.288482][ T8745] XFS (loop3): Quotacheck needed: Please wait. [ 219.310041][ T9] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2c8/0xb58, inode 0x25 dinode [ 219.311933][ T8792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.314899][ T9] XFS (loop3): Unmount and run xfs_repair [ 219.318723][ T9] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 219.321169][ T9] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 219.324042][ T9] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.327101][ T9] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 219.330032][ T9] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 219.333367][ T9] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 219.336175][ T9] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 219.340373][ T9] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 219.343426][ T9] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 219.368727][ T8792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.375054][ T8745] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 219.404777][ T6906] XFS (loop3): Unmounting Filesystem [ 219.423978][ T8792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.484875][ T8795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.572048][ T8798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.639235][ T8795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.771111][ T8800] udc-core: couldn't find an available UDC or it's busy [ 219.773174][ T8800] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 220.749481][ T8804] fuse: Bad value for 'user_id' [ 220.778456][ T8804] loop2: detected capacity change from 0 to 8 [ 220.883666][ T8808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.968174][ T8814] netlink: 'syz.2.1364': attribute type 2 has an invalid length. [ 220.971970][ T8814] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 220.978756][ T8814] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 220.983343][ T8812] loop0: detected capacity change from 0 to 64 [ 221.208522][ T8806] loop3: detected capacity change from 0 to 32768 [ 221.256689][ T8806] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1359 (8806) [ 221.297433][ T8822] binder: 8821:8822 tried to acquire reference to desc 0, got 1 instead [ 221.301859][ T8822] binder: 8821:8822 got transaction with invalid parent offset or type [ 221.308804][ T8806] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 221.312051][ T8822] binder: 8821:8822 transaction failed 29201/-22, size 96-24 line 3287 [ 221.314031][ T8806] BTRFS info (device loop3): using free space tree [ 221.324882][ T8806] BTRFS info (device loop3): has skinny extents [ 221.394322][ T8831] loop2: detected capacity change from 0 to 1024 [ 221.544639][ T8806] BTRFS info (device loop3): enabling ssd optimizations [ 221.607911][ T8831] EXT4-fs (loop2): Test dummy encryption mode enabled [ 221.617802][ T8831] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 221.636551][ T8831] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 221.640694][ T8831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e815c01c, mo2=0003] [ 221.642951][ T8831] System zones: 0-1, 3-36 [ 221.652254][ T8831] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,sb=0x0000000000000003,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 221.775942][ T8854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.826742][ T8850] loop0: detected capacity change from 0 to 4096 [ 221.839706][ T8850] ntfs: (device loop0): parse_options(): Unrecognized mount option [ 221.839706][ T8850] . [ 221.867219][ T8854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.895166][ T8822] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 221.940377][ T8864] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1374'. [ 221.944586][ T8854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.006400][ T4021] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.208240][ T8881] loop2: detected capacity change from 0 to 512 [ 222.322688][ T8881] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1380'. [ 222.484174][ T8885] loop1: detected capacity change from 0 to 256 [ 222.524757][ T8883] loop3: detected capacity change from 0 to 32768 [ 222.557091][ T8885] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1381'. [ 222.561247][ T8885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.566004][ T8887] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 222.568263][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 222.596083][ T8883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1372 (8883) [ 222.599720][ T8887] device gretap0 entered promiscuous mode [ 222.605580][ T8883] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 222.609729][ T8883] BTRFS info (device loop3): setting nodatacow, compression disabled [ 222.613718][ T8883] BTRFS info (device loop3): turning on flush-on-commit [ 222.622092][ T8883] BTRFS info (device loop3): enabling auto defrag [ 222.625846][ T8883] BTRFS info (device loop3): max_inline at 0 [ 222.628774][ T8883] BTRFS info (device loop3): using free space tree [ 222.630818][ T8883] BTRFS info (device loop3): has skinny extents [ 222.638012][ T8887] device gretap0 left promiscuous mode [ 222.655112][ T8883] BTRFS info (device loop3): enabling ssd optimizations [ 222.694229][ T8908] sctp: [Deprecated]: syz.4.1382 (pid 8908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.694229][ T8908] Use struct sctp_sack_info instead [ 223.103013][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'. [ 223.117658][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'. [ 223.871600][ T8912] loop1: detected capacity change from 0 to 32768 [ 223.938355][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.000159][ T8930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.077488][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.094467][ T8912] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1384 (8912) [ 224.231547][ T8912] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 224.240332][ T8912] BTRFS info (device loop1): force zlib compression, level 3 [ 224.251877][ T8912] BTRFS info (device loop1): force clearing of disk cache [ 224.254655][ T8912] BTRFS info (device loop1): setting nodatasum [ 224.257437][ T8912] BTRFS info (device loop1): allowing degraded mounts [ 224.260158][ T8912] BTRFS info (device loop1): enabling disk space caching [ 224.262499][ T8912] BTRFS info (device loop1): disk space caching is enabled [ 224.264715][ T8912] BTRFS info (device loop1): has skinny extents [ 225.488155][ T8912] BTRFS info (device loop1): clearing free space tree [ 225.491914][ T8912] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.494970][ T8912] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.114974][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1401'. [ 226.273751][ T8956] loop2: detected capacity change from 0 to 32768 [ 226.315137][ T8976] loop4: detected capacity change from 0 to 2048 [ 226.336291][ T8982] tun0: tun_chr_ioctl cmd 1074025680 [ 226.481713][ T8956] jfs: Unrecognized mount option "umas" or missing value [ 227.240627][ T8976] hpfs: filesystem error: invalid size in superblock: feffffff; already mounted read-only [ 228.621319][ T9025] loop0: detected capacity change from 0 to 1024 [ 228.642022][ T9030] loop4: detected capacity change from 0 to 1024 [ 228.698402][ T9030] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 228.712047][ T9030] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,sysvgroups,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 228.715264][ T9033] loop1: detected capacity change from 0 to 4096 [ 228.731878][ T9030] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 228.770913][ T9033] ntfs: (device loop1): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 228.793919][ T9033] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem. [ 228.828754][ T9039] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1424'. [ 228.942558][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 229.038033][ T9065] vxcan1: MTU too low for tipc bearer [ 229.039659][ T9065] tipc: Enabling of bearer rejected, failed to enable media [ 229.419435][ T9095] syz.2.1449 uses old SIOCAX25GETINFO [ 229.429095][ T9095] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1449'. [ 229.928112][ T9137] tipc: Failed to obtain node identity [ 229.928145][ T9137] tipc: Enabling of bearer rejected, failed to enable media [ 229.977609][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1466'. [ 230.149587][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 230.164032][ T9162] device vxcan3 entered promiscuous mode [ 230.223503][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 230.387633][ T9181] xt_bpf: check failed: parse error [ 230.463386][ T9190] Cannot find set identified by id 0 to match [ 230.919940][ T9217] device syzkaller1 entered promiscuous mode [ 233.294826][ T9261] udc-core: couldn't find an available UDC or it's busy [ 233.296856][ T9261] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 233.876047][ T9285] input: syz0 as /devices/virtual/input/input4 [ 234.795999][ T9295] udc-core: couldn't find an available UDC or it's busy [ 234.798055][ T9295] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 234.996067][ T9305] loop2: detected capacity change from 0 to 1024 [ 235.086645][ T9305] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 235.123604][ T3976] hfsplus: bad catalog entry type [ 235.129783][ T3976] hfsplus: bad catalog entry type [ 235.410451][ T26] audit: type=1326 audit(235.773:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97a54e68 code=0x7ffc0000 [ 235.436215][ T26] audit: type=1326 audit(235.773:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff97a54e68 code=0x7ffc0000 [ 235.479035][ T26] audit: type=1326 audit(235.773:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97a54e68 code=0x7ffc0000 [ 235.501551][ T26] audit: type=1326 audit(235.773:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff97a54e68 code=0x7ffc0000 [ 235.515571][ T26] audit: type=1326 audit(235.773:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97a54e68 code=0x7ffc0000 [ 235.537691][ T26] audit: type=1326 audit(235.773:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=81 compat=0 ip=0xffff97a54e68 code=0x7ffc0000 [ 235.562291][ T26] audit: type=1326 audit(235.844:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97a54e68 code=0x7ffc0000 [ 235.596248][ T26] audit: type=1326 audit(235.844:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.1.1539" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff97a54e68 code=0x7ffc0000 [ 235.614668][ T9309] loop4: detected capacity change from 0 to 32768 [ 235.719414][ T9325] netlink: 'syz.1.1545': attribute type 2 has an invalid length. [ 235.739380][ T9325] netlink: 723 bytes leftover after parsing attributes in process `syz.1.1545'. [ 235.739465][ T9309] XFS (loop4): Mounting V5 Filesystem [ 235.835139][ T9309] XFS (loop4): Ending clean mount [ 235.885437][ T9309] XFS (loop4): Quotacheck needed: Please wait. [ 235.981224][ T9341] netlink: 'syz.3.1547': attribute type 10 has an invalid length. [ 235.984313][ T9309] XFS (loop4): Quotacheck: Done. [ 235.990240][ T9341] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1547'. [ 235.992696][ T9341] device team0 entered promiscuous mode [ 235.994211][ T9341] device team_slave_0 entered promiscuous mode [ 236.030417][ T9341] device team_slave_1 entered promiscuous mode [ 236.068306][ T9341] bridge0: port 3(team0) entered blocking state [ 236.071722][ T9341] bridge0: port 3(team0) entered disabled state [ 236.077775][ T7318] XFS (loop4): Unmounting Filesystem [ 236.108310][ T9341] bridge0: port 3(team0) entered blocking state [ 236.111235][ T9341] bridge0: port 3(team0) entered forwarding state [ 236.152796][ T3975] Bluetooth: hci5: SCO packet for unknown connection handle 205 [ 236.161057][ T9341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1547'. [ 236.216351][ T9333] chnl_net:caif_netlink_parms(): no params data found [ 236.294001][ T9333] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.296140][ T9333] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.299987][ T9333] device bridge_slave_0 entered promiscuous mode [ 236.305182][ T9333] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.307379][ T9333] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.310666][ T9333] device bridge_slave_1 entered promiscuous mode [ 236.329254][ T9333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.334118][ T9333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.377491][ T9333] team0: Port device team_slave_0 added [ 236.390436][ T9333] team0: Port device team_slave_1 added [ 236.435297][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.440886][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.448861][ T9333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.454654][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.456727][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.472404][ T9333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.559377][ T9333] device hsr_slave_0 entered promiscuous mode [ 236.577862][ T9333] device hsr_slave_1 entered promiscuous mode [ 236.617261][ T9333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.619399][ T9333] Cannot create hsr debugfs directory [ 236.648881][ T9356] udc-core: couldn't find an available UDC or it's busy [ 236.652602][ T9356] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 236.753120][ T9333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.825880][ T9333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.874772][ T9333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.949841][ T9333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.188689][ T9333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.217629][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 237.220199][ T9333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.256251][ T9333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.277927][ T9333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.278878][ T9376] udc-core: couldn't find an available UDC or it's busy [ 237.284107][ T9376] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 237.432825][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.452951][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.456420][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.466309][ T9333] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.476031][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.479063][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.482363][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.484465][ T4024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.505604][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.508616][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.511641][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.519983][ T4017] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.522082][ T4017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.531561][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.548393][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.551740][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.557510][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.560648][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.566467][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.569768][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.572886][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.581562][ T9333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.586764][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.591059][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 237.594587][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.597594][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.704068][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.706566][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.717311][ T9333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.735704][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.738804][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.773209][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.776106][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.779197][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.783250][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.787795][ T9333] device veth0_vlan entered promiscuous mode [ 237.797861][ T9333] device veth1_vlan entered promiscuous mode [ 237.816675][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.819527][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.822950][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.826896][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.840334][ T9333] device veth0_macvtap entered promiscuous mode [ 237.853908][ T9333] device veth1_macvtap entered promiscuous mode [ 237.879896][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.884864][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.887825][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.891006][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.894125][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.897665][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.900586][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.904053][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.906920][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.910684][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.915843][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.918392][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.921125][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 237.924807][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.928389][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.931973][ T4021] Bluetooth: hci1: command 0x0409 tx timeout [ 237.933111][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.937069][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.939919][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.950637][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.968451][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.973483][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.977555][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.989518][ T9333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.994769][ T9333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.999527][ T9333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.004673][ T9333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.111432][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.115440][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.126918][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.160496][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.168542][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.185839][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.715745][ T9406] loop2: detected capacity change from 0 to 4096 [ 238.862564][ T9406] ntfs3: Unexpected value for 'showmeta' [ 239.382284][ T9434] input: syz0 as /devices/virtual/input/input5 [ 239.994943][ T4050] Bluetooth: hci1: command 0x041b tx timeout [ 240.945394][ T9444] device macsec1 entered promiscuous mode [ 241.179235][ T9442] loop2: detected capacity change from 0 to 40427 [ 241.311211][ T9442] F2FS-fs (loop2): invalid crc value [ 241.402005][ T9442] F2FS-fs (loop2): Found nat_bits in checkpoint [ 241.470966][ T9442] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 241.485201][ T9442] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 242.077108][ T4050] Bluetooth: hci1: command 0x040f tx timeout [ 242.618729][ T4021] kernel write not supported for file /21/uid_map (pid: 4021 comm: kworker/1:5) [ 242.783023][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1588'. [ 243.003030][ T9462] loop1: detected capacity change from 0 to 256 [ 243.320382][ T9462] device bridge0 entered promiscuous mode [ 243.322889][ T9462] device macsec1 entered promiscuous mode [ 243.339019][ T9462] bridge0: port 3(macsec1) entered blocking state [ 243.341252][ T9462] bridge0: port 3(macsec1) entered disabled state [ 243.673041][ T9462] device bridge0 left promiscuous mode [ 243.846643][ T9468] udc-core: couldn't find an available UDC or it's busy [ 243.848546][ T9468] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 243.932408][ T9470] loop1: detected capacity change from 0 to 512 [ 244.039703][ T9470] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #3: comm syz.1.1591: corrupted inode contents [ 244.074121][ T9470] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #3: comm syz.1.1591: mark_inode_dirty error [ 244.095091][ T9470] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #3: comm syz.1.1591: corrupted inode contents [ 244.108993][ T9470] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1591: mark_inode_dirty error [ 244.129874][ T9470] Quota error (device loop1): write_blk: dquota write failed [ 244.139921][ T9470] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 244.149867][ T9470] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.1591: Failed to acquire dquot type 0 [ 244.151091][ T4021] Bluetooth: hci1: command 0x0419 tx timeout [ 244.185143][ T9470] EXT4-fs (loop1): 1 orphan inode deleted [ 244.186854][ T9470] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.088271][ T9503] loop3: detected capacity change from 0 to 256 [ 245.584190][ T9500] device bridge0 entered promiscuous mode [ 245.586507][ T9500] device macsec1 entered promiscuous mode [ 245.589167][ T9500] bridge0: port 4(macsec1) entered blocking state [ 245.590947][ T9500] bridge0: port 4(macsec1) entered disabled state [ 245.594486][ T9500] device bridge0 left promiscuous mode [ 246.371198][ T9526] device macsec1 entered promiscuous mode [ 246.949666][ T9536] loop3: detected capacity change from 0 to 160 [ 247.416244][ T9536] loop3: detected capacity change from 0 to 2048 [ 247.520306][ T9536] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 249.175179][ T9551] loop3: detected capacity change from 0 to 256 [ 249.569728][ T9550] device bridge0 entered promiscuous mode [ 249.571447][ T9550] device macsec1 entered promiscuous mode [ 249.573947][ T9550] bridge0: port 4(macsec1) entered blocking state [ 249.575794][ T9550] bridge0: port 4(macsec1) entered disabled state [ 249.580470][ T9550] device bridge0 left promiscuous mode [ 250.032688][ T9559] chnl_net:caif_netlink_parms(): no params data found [ 250.125401][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.129893][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.133784][ T9559] device bridge_slave_0 entered promiscuous mode [ 250.159409][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.166056][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.180421][ T9559] device bridge_slave_1 entered promiscuous mode [ 250.265677][ T9559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.290925][ T9559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.388910][ T9559] team0: Port device team_slave_0 added [ 250.409551][ T9559] team0: Port device team_slave_1 added [ 250.456735][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.476717][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.516491][ T9571] udc-core: couldn't find an available UDC or it's busy [ 250.518664][ T9571] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 250.520176][ T9559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.533177][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.540760][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.559090][ T9559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.650368][ T9571] udc-core: couldn't find an available UDC or it's busy [ 250.659469][ T9571] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 250.670519][ T9559] device hsr_slave_0 entered promiscuous mode [ 250.717248][ T9559] device hsr_slave_1 entered promiscuous mode [ 250.725602][ T9575] loop2: detected capacity change from 0 to 2048 [ 250.773247][ T9559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.775350][ T9559] Cannot create hsr debugfs directory [ 250.796233][ T9577] loop3: detected capacity change from 0 to 1024 [ 250.822627][ T9575] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.855524][ T9577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.900617][ T9333] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 250.904295][ T9333] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 251.035324][ T9559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.247200][ T9559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.288155][ T9598] netlink: 608 bytes leftover after parsing attributes in process `syz.3.1636'. [ 251.316356][ T9596] loop4: detected capacity change from 0 to 1024 [ 251.336711][ T9596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.355412][ T9559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.459377][ T9559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.536970][ T9610] loop1: detected capacity change from 0 to 512 [ 251.574142][ T9609] loop4: detected capacity change from 0 to 2048 [ 251.624485][ T9609] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.645752][ T9610] EXT4-fs (loop1): Unrecognized mount option "context=sysadm_u" or missing value [ 251.762777][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.879970][ T9621] loop4: detected capacity change from 0 to 128 [ 251.889662][ T4021] Bluetooth: hci3: command 0x0409 tx timeout [ 251.989723][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.069084][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.148374][ T9628] netlink: 'syz.4.1649': attribute type 4 has an invalid length. [ 252.186526][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.198491][ T9615] chnl_net:caif_netlink_parms(): no params data found [ 252.355937][ T9615] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.358000][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.360887][ T9615] device bridge_slave_0 entered promiscuous mode [ 252.377191][ T9645] loop4: detected capacity change from 0 to 512 [ 252.416807][ T9615] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.418765][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.422350][ T9615] device bridge_slave_1 entered promiscuous mode [ 252.472149][ T9643] device syz_tun entered promiscuous mode [ 252.484592][ T9643] device macsec1 entered promiscuous mode [ 252.497869][ T9643] device syz_tun left promiscuous mode [ 252.610598][ T9615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.625862][ T9615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.691384][ T9615] team0: Port device team_slave_0 added [ 252.744988][ T9559] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.784042][ T9615] team0: Port device team_slave_1 added [ 252.817636][ T9559] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.821569][ T9653] loop4: detected capacity change from 0 to 512 [ 252.855072][ T9559] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.915993][ T9559] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.964304][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.966272][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.985306][ T9615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.028579][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.030461][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.053278][ T9615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.216713][ T26] audit: type=1326 audit(253.633:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9670 comm="syz.4.1660" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e016e68 code=0x0 [ 253.254740][ T9615] device hsr_slave_0 entered promiscuous mode [ 253.294245][ T9615] device hsr_slave_1 entered promiscuous mode [ 253.332779][ T9615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.334934][ T9615] Cannot create hsr debugfs directory [ 253.410218][ T9676] ------------[ cut here ]------------ [ 253.412263][ T9676] WARNING: CPU: 0 PID: 9676 at net/mac80211/cfg.c:3685 ieee80211_probe_client+0x54c/0x6a8 [ 253.415066][ T9676] Modules linked in: [ 253.416048][ T9559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.416101][ T9676] CPU: 0 PID: 9676 Comm: syz.1.1661 Not tainted 5.15.162-syzkaller #0 [ 253.420276][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 253.423266][ T9676] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 253.425478][ T9676] pc : ieee80211_probe_client+0x54c/0x6a8 [ 253.427085][ T9676] lr : ieee80211_probe_client+0x548/0x6a8 [ 253.428774][ T9676] sp : ffff80001cb17070 [ 253.429925][ T9676] x29: ffff80001cb170a0 x28: ffff0000d4f28dc0 x27: ffff80001cb17180 [ 253.432221][ T9676] x26: ffff0000d4f2a980 x25: 0000000000000000 x24: ffff0000cd685420 [ 253.434528][ T9676] x23: ffff0000e449a558 x22: ffff0000e4498000 x21: dfff800000000000 [ 253.436742][ T9676] x20: 00000000ffffffea x19: ffff0000e4499288 x18: 0000000000000000 [ 253.438938][ T9676] x17: 0000000000000002 x16: ffff8000084c45b4 x15: ffff80000fd55208 [ 253.441209][ T9676] x14: 1ffff0000292a06a x13: dfff800000000000 x12: 0000000000040000 [ 253.443448][ T9676] x11: 000000000000147d x10: ffff80001df0b000 x9 : 000000000000147e [ 253.445759][ T9676] x8 : ffff80001137c2f8 x7 : ffff800011382268 x6 : 0000000000000000 [ 253.448050][ T9676] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 253.450384][ T9676] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 253.452664][ T9676] Call trace: [ 253.453582][ T9676] ieee80211_probe_client+0x54c/0x6a8 [ 253.455096][ T9676] nl80211_probe_client+0x380/0xa80 [ 253.456645][ T9676] genl_rcv_msg+0xc18/0x1018 [ 253.457940][ T9676] netlink_rcv_skb+0x20c/0x3b8 [ 253.459274][ T9676] genl_rcv+0x38/0x50 [ 253.460455][ T9676] netlink_unicast+0x664/0x938 [ 253.461815][ T9676] netlink_sendmsg+0x844/0xb38 [ 253.463192][ T9676] ____sys_sendmsg+0x584/0x870 [ 253.464600][ T9676] ___sys_sendmsg+0x214/0x294 [ 253.465913][ T9676] __arm64_sys_sendmsg+0x1ac/0x25c [ 253.467338][ T9676] invoke_syscall+0x98/0x2b8 [ 253.468627][ T9676] el0_svc_common+0x138/0x258 [ 253.469893][ T9676] do_el0_svc+0x58/0x14c [ 253.471053][ T9676] el0_svc+0x7c/0x1f0 [ 253.472138][ T9676] el0t_64_sync_handler+0x84/0xe4 [ 253.473549][ T9676] el0t_64_sync+0x1a0/0x1a4 [ 253.474733][ T9676] irq event stamp: 136 [ 253.475868][ T9676] hardirqs last enabled at (135): [] _raw_spin_unlock_irqrestore+0xac/0x158 [ 253.478849][ T9676] hardirqs last disabled at (136): [] el1_dbg+0x24/0x80 [ 253.481195][ T9676] softirqs last enabled at (126): [] local_bh_enable+0x10/0x34 [ 253.483759][ T9676] softirqs last disabled at (122): [] local_bh_disable+0x10/0x34 [ 253.486390][ T9676] ---[ end trace d08840ef784f92cc ]--- [ 253.494568][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.496419][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.519277][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.523710][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.530501][ T9559] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.583360][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.586219][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.588853][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.590854][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.660778][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.664366][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.667259][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.670035][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.672191][ T4021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.694432][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.722362][ T5785] Bluetooth: hci1: command 0x0409 tx timeout [ 253.752183][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.755105][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.758097][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.760905][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.775346][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.780695][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.790335][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.793789][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.819238][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.822198][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.827194][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.961781][ T5785] Bluetooth: hci3: command 0x041b tx timeout [ 254.089493][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.095147][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.097554][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.149001][ T9] device hsr_slave_0 left promiscuous mode [ 254.191673][ T9] device hsr_slave_1 left promiscuous mode [ 254.271276][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.273374][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.277125][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.279192][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.281786][ T9] device bridge_slave_1 left promiscuous mode [ 254.283455][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.322347][ T9] device bridge_slave_0 left promiscuous mode [ 254.324277][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.451085][ T9] device veth1_macvtap left promiscuous mode [ 254.452968][ T9] device veth0_macvtap left promiscuous mode [ 254.454728][ T9] device veth1_vlan left promiscuous mode [ 254.456347][ T9] device veth0_vlan left promiscuous mode [ 254.646099][ T9] team0 (unregistering): Port device team_slave_1 removed [ 254.655564][ T9] team0 (unregistering): Port device team_slave_0 removed [ 254.663478][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.717948][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.856477][ T9] bond0 (unregistering): Released all slaves [ 254.974609][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.977529][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.997779][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.001067][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.004063][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.006674][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.022646][ T9559] device veth0_vlan entered promiscuous mode [ 255.029594][ T9559] device veth1_vlan entered promiscuous mode [ 255.065758][ T9615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.092008][ T9615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.136770][ T9559] device veth0_macvtap entered promiscuous mode [ 255.140683][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.143287][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.145882][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.148685][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.161351][ T4021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.165058][ T9615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.201879][ T9615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.233900][ T9559] device veth1_macvtap entered promiscuous mode [ 255.269255][ T9559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.272325][ T9559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.274975][ T9559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.277734][ T9559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.290011][ T9559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.293036][ T9559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.295671][ T9559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.298454][ T9559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.310983][ T9559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.313831][ T9559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.317820][ T9559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.361213][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.364030][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.366880][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.385250][ T9559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.388356][ T9559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.396298][ T9559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.400655][ T9559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.404572][ T9559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.411161][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.413867][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.439138][ T9559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.443301][ T9559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.445696][ T9559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.448065][ T9559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.475255][ T9615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.512112][ T9615] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.514432][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.517085][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.546500][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.550123][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.552859][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.554896][ T5884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.557939][ T556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.561714][ T556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.563895][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.593403][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 255.596415][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.600443][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.606046][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.608111][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.621470][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.647456][ T9615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.651528][ T9615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.657146][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 255.660426][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 255.663571][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 255.667018][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 255.671570][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 255.674639][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 255.677503][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.690718][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.693857][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.697033][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.700565][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.703539][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.709934][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.734809][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.799547][ T4017] Bluetooth: hci1: command 0x041b tx timeout [ 255.867888][ T9615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.888573][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.891865][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.906713][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.909925][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.924268][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.927058][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.931024][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.934698][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.940458][ T9615] device veth0_vlan entered promiscuous mode [ 255.951136][ T9615] device veth1_vlan entered promiscuous mode [ 255.967434][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 255.971588][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 255.974337][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.977569][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.983199][ T9615] device veth0_macvtap entered promiscuous mode [ 255.987656][ T9615] device veth1_macvtap entered promiscuous mode [ 255.992735][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.995491][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.015918][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.019187][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.021992][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.024968][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.027687][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.031254][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.033970][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.036817][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.042456][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.043650][ T5785] Bluetooth: hci3: command 0x040f tx timeout [ 256.045494][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.050119][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.053136][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.057395][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.067507][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.070895][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.076384][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.080318][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.083465][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.086541][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.089920][ T9615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.092827][ T9615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.097016][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.102834][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.105789][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.111646][ T9615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.114192][ T9615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.116723][ T9615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.120015][ T9615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.198822][ T6578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.201789][ T6578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.208349][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.238955][ T556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.241826][ T556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.247312][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.877102][ T5785] Bluetooth: hci1: command 0x040f tx timeout [ 258.116896][ T5785] Bluetooth: hci3: command 0x0419 tx timeout [ 259.124008][ T6578] device hsr_slave_0 left promiscuous mode [ 259.175672][ T6578] device hsr_slave_1 left promiscuous mode [ 259.255300][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.257515][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.260865][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.263949][ T6578] device bridge_slave_1 left promiscuous mode [ 259.270511][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.308623][ T6578] device bridge_slave_0 left promiscuous mode [ 259.310476][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.445292][ T6578] device veth0_macvtap left promiscuous mode [ 259.447048][ T6578] device veth1_vlan left promiscuous mode [ 259.448696][ T6578] device veth0_vlan left promiscuous mode [ 259.651053][ T6578] team0 (unregistering): Port device team_slave_1 removed [ 259.659929][ T6578] team0 (unregistering): Port device team_slave_0 removed [ 259.668550][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.701317][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.831173][ T6578] bond0 (unregistering): Released all slaves [ 259.954949][ T25] Bluetooth: hci1: command 0x0419 tx timeout