last executing test programs: 3.915516744s ago: executing program 1: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f00000005c0)=""/241, 0xf1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000900), &(0x7f0000000940)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 3.659981214s ago: executing program 1: shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f000040d000/0x1000)=nil, 0x8fa1e93eb21569a9) mlockall(0x0) mmap$binder(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 3.464808814s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x386) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.42447081s ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 2.509663721s ago: executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x7, 0x0, &(0x7f0000000000)="259a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.463598508s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x9004}], 0x10, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 2.407854817s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01040000000000000000920000000800", @ANYRES32=r2, @ANYBLOB="08001180020006000a0006"], 0x30}}, 0x0) 2.404343508s ago: executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e3"}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}, 0x1, 0x7}, 0x0) 2.318673361s ago: executing program 0: syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000a05, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c657365743d3030303030303030303030313032352c726f6f746469723d30303030303030303030303030303030303030332c706172746974696f6e3d30303030303030303030303030303030303030302c6769643d69676e6f7265006e6f6164696e6963622cde6661736b3d30303030303030303030303030303030303030343732302c62733d30303030303030303030303230303030303030362c6769643d69676e6f72652c12e7473721b0d36853f83b3237931f7bf54d593a4b0e2a94b2208a0318c4095a29b12750ca47c7a60cd523accdee2710fd9dc6171d154f9426ce2b8e251b"], 0x0, 0xc3c, &(0x7f0000000ec0)="$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") 2.213316287s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}]}, 0x2c}}, 0x0) 2.113033703s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763608600000811"], 0xffdd) 2.045016623s ago: executing program 0: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.984708833s ago: executing program 2: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f00000005c0)=""/241, 0xf1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000900), &(0x7f0000000940)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 1.965622486s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x4c}}, 0x0) 1.842690105s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000000000005509010000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.767798766s ago: executing program 4: mlockall(0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f000040d000/0x1000)=nil, 0x8fa1e93eb21569a9) mlockall(0x0) mmap$binder(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 1.711504985s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000022850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000001480)=ANY=[], 0x8) 1.674031181s ago: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x0, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 1.659344093s ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 1.608806761s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) 1.506488107s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001940)=@newtaction={0x18, 0x30, 0x0, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x0) 1.497925228s ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}]}, 0x2c}}, 0x0) 1.334706664s ago: executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e3"}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}, 0x1, 0x7}, 0x0) 1.306301658s ago: executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x7, 0x0, &(0x7f0000000000)="259a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 410.924776ms ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763608600000811"], 0xffdd) 406.101717ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x4c}}, 0x0) 285.275056ms ago: executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)) 132.07385ms ago: executing program 2: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, 0x0, 0x0) recvfrom$l2tp(r2, &(0x7f00000005c0)=""/241, 0xf1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000900), &(0x7f0000000940)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 29.654745ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000000000005509010000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4: mlockall(0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f000040d000/0x1000)=nil, 0x8fa1e93eb21569a9) mlockall(0x0) mmap$binder(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz-executor.1'. [ 185.657943][ T9595] loop1: detected capacity change from 0 to 8192 [ 186.054463][ T9593] loop4: detected capacity change from 0 to 32768 [ 186.075528][ T9593] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (9593) [ 186.116291][ T9593] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 186.130546][ T9593] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 186.141129][ T9593] BTRFS info (device loop4): setting nodatacow, compression disabled [ 186.153159][ T9593] BTRFS info (device loop4): enabling ssd optimizations [ 186.160774][ T9593] BTRFS info (device loop4): turning off barriers [ 186.169110][ T9593] BTRFS error (device loop4): invalid value 0 for thread_pool [ 186.179629][ T9593] BTRFS error (device loop4): open_ctree failed [ 186.362304][ T9605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.376542][ T9605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.594400][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.902361][ T4258] Bluetooth: hci4: command tx timeout [ 187.060981][ T9609] loop4: detected capacity change from 0 to 32768 [ 187.070581][ T9630] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.080026][ T47] block nbd3: Receive control failed (result -107) [ 187.091074][ T9626] nbd3: detected capacity change from 0 to 15960 [ 187.095125][ T79] block nbd3: Dead connection, failed to find a fallback [ 187.097199][ T79] block nbd3: shutting down sockets [ 187.098531][ T79] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.100878][ T79] buffer_io_error: 3 callbacks suppressed [ 187.100888][ T79] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.114767][ T9609] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (9609) [ 187.118623][ T79] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.120966][ T79] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.124717][ T79] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.127145][ T79] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.129401][ T79] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.132012][ T79] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.138274][ T79] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.140857][ T79] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.146837][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.149484][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.153600][ T9609] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.160126][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.162677][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.165053][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.167497][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.169727][ T6223] ldm_validate_partition_table(): Disk read failed. [ 187.175469][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.178087][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.181986][ T51] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 187.184536][ T51] Buffer I/O error on dev nbd3, logical block 0, async page read [ 187.187081][ T9609] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 187.189830][ T6223] Dev nbd3: unable to read RDB block 0 [ 187.194030][ T6223] nbd3: unable to read partition table [ 187.195007][ T9609] BTRFS info (device loop4): force zlib compression, level 3 [ 187.199082][ T9609] BTRFS info (device loop4): enabling auto defrag [ 187.202506][ T6223] ldm_validate_partition_table(): Disk read failed. [ 187.204217][ T9609] BTRFS info (device loop4): enabling disk space caching [ 187.207567][ T9609] BTRFS info (device loop4): max_inline at 0 [ 187.208133][ T6223] Dev nbd3: unable to read RDB block 0 [ 187.214951][ T6223] nbd3: unable to read partition table [ 187.221038][ T9609] BTRFS info (device loop4): force clearing of disk cache [ 187.226968][ T9626] ldm_validate_partition_table(): Disk read failed. [ 187.239251][ T9626] Dev nbd3: unable to read RDB block 0 [ 187.254834][ T9626] nbd3: unable to read partition table [ 187.269356][ T9609] BTRFS info (device loop4): turning on sync discard [ 187.271270][ T9609] BTRFS info (device loop4): disk space caching is enabled [ 187.383080][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.384861][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.578587][ T9609] BTRFS info (device loop4): enabling ssd optimizations [ 187.581339][ T9609] BTRFS info (device loop4): rebuilding free space tree [ 187.595904][ T9619] loop2: detected capacity change from 0 to 32768 [ 187.598343][ T9667] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.598749][ T9619] XFS: attr2 mount option is deprecated. [ 187.602532][ T9619] XFS: ikeep mount option is deprecated. [ 187.603971][ T9619] XFS: noikeep mount option is deprecated. [ 187.607127][ T9609] BTRFS info (device loop4): disabling free space tree [ 187.616351][ T9609] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 187.629653][ T9609] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 187.650169][ T9619] XFS (loop2): Mounting V5 Filesystem [ 187.691408][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.711079][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.791040][ T9619] XFS (loop2): Ending clean mount [ 187.804732][ T9619] XFS (loop2): Quotacheck needed: Please wait. [ 187.882833][ T6511] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.915320][ T9619] XFS (loop2): Quotacheck: Done. [ 188.093186][ T7548] XFS (loop2): Unmounting Filesystem [ 188.345882][ T9694] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.361895][ T47] block nbd1: Receive control failed (result -107) [ 188.399304][ T9692] nbd1: detected capacity change from 0 to 15960 [ 188.409104][ T79] block nbd1: Dead connection, failed to find a fallback [ 188.411014][ T79] block nbd1: shutting down sockets [ 188.416394][ T9692] ldm_validate_partition_table(): Disk read failed. [ 188.418782][ T9692] Dev nbd1: unable to read RDB block 0 [ 188.421127][ T9692] nbd1: unable to read partition table [ 188.556772][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.586715][ T9703] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.827165][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.869437][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.016556][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.315503][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.468505][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.572431][ T9710] loop3: detected capacity change from 0 to 32768 [ 189.580782][ T9710] XFS: attr2 mount option is deprecated. [ 189.592360][ T9710] XFS: ikeep mount option is deprecated. [ 189.598005][ T9710] XFS: noikeep mount option is deprecated. [ 189.669900][ T9710] XFS (loop3): Mounting V5 Filesystem [ 189.756614][ T9710] XFS (loop3): Ending clean mount [ 189.783847][ T9710] XFS (loop3): Quotacheck needed: Please wait. [ 189.844702][ T9710] XFS (loop3): Quotacheck: Done. [ 189.915914][ T5795] XFS (loop3): Unmounting Filesystem [ 189.986502][ T9767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.995112][ T9767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.513038][ T9799] __nla_validate_parse: 5 callbacks suppressed [ 190.513052][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.716631][ T9809] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.954724][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.172014][ T9788] loop1: detected capacity change from 0 to 32768 [ 191.179407][ T9788] XFS: attr2 mount option is deprecated. [ 191.190316][ T9788] XFS: ikeep mount option is deprecated. [ 191.197773][ T9788] XFS: noikeep mount option is deprecated. [ 191.234683][ T9831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.242171][ T9831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.265746][ T9788] XFS (loop1): Mounting V5 Filesystem [ 191.329497][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.346286][ T9788] XFS (loop1): Ending clean mount [ 191.351797][ T9788] XFS (loop1): Quotacheck needed: Please wait. [ 191.444267][ T9788] XFS (loop1): Quotacheck: Done. [ 191.515079][ T6949] XFS (loop1): Unmounting Filesystem [ 191.587852][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.914007][ T9868] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.917885][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.847672][ T9877] loop4: detected capacity change from 0 to 32768 [ 192.865829][ T9877] XFS: attr2 mount option is deprecated. [ 192.872187][ T9877] XFS: ikeep mount option is deprecated. [ 192.878665][ T9877] XFS: noikeep mount option is deprecated. [ 192.906556][ T47] block nbd0: Receive control failed (result -107) [ 192.921013][ T9886] nbd0: detected capacity change from 0 to 15960 [ 192.937056][ T79] block nbd0: Dead connection, failed to find a fallback [ 192.939104][ T79] block nbd0: shutting down sockets [ 192.940489][ T79] blk_print_req_error: 56 callbacks suppressed [ 192.940499][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.944877][ T79] buffer_io_error: 55 callbacks suppressed [ 192.944887][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.957595][ T9876] loop1: detected capacity change from 0 to 32768 [ 192.962172][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.964750][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.968245][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.970713][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.978309][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.980869][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 192.992223][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 192.994681][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.002297][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.004844][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.007180][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.009585][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.011905][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.014400][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.016647][ T9886] ldm_validate_partition_table(): Disk read failed. [ 193.018643][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.021125][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.027901][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.030540][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 193.034385][ T9886] Dev nbd0: unable to read RDB block 0 [ 193.040013][ T9886] nbd0: unable to read partition table [ 193.050415][ T9876] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 193.057015][ T6223] ldm_validate_partition_table(): Disk read failed. [ 193.070449][ T9876] dlm: no local IP address has been set [ 193.077070][ T9876] dlm: cannot start dlm midcomms -107 [ 193.077955][ T9877] XFS (loop4): Mounting V5 Filesystem [ 193.078523][ T9876] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 193.101876][ T6223] Dev nbd0: unable to read RDB block 0 [ 193.104141][ T6223] nbd0: unable to read partition table [ 193.108512][ T6223] ldm_validate_partition_table(): Disk read failed. [ 193.110609][ T6223] Dev nbd0: unable to read RDB block 0 [ 193.112834][ T6223] nbd0: unable to read partition table [ 193.281928][ T9877] XFS (loop4): Ending clean mount [ 193.299318][ T9877] XFS (loop4): Quotacheck needed: Please wait. [ 193.340610][ T9877] XFS (loop4): Quotacheck: Done. [ 193.380344][ T9903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.407650][ T9903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.413898][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.434519][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.448434][ T6511] XFS (loop4): Unmounting Filesystem [ 194.098619][ T9938] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 194.433317][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.435812][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.822779][ T9978] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 196.091855][T10000] loop4: detected capacity change from 0 to 256 [ 197.350382][T10017] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 197.750262][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 197.861010][T10046] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 197.982719][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.994767][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.434328][T10074] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 198.577002][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.590794][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.079796][T10067] loop0: detected capacity change from 0 to 32768 [ 199.109978][T10067] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (10067) [ 199.120484][T10067] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.127929][T10067] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 199.133597][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.137224][T10067] BTRFS info (device loop0): turning off barriers [ 199.142462][T10067] BTRFS info (device loop0): max_inline at 0 [ 199.150640][T10067] BTRFS info (device loop0): enabling auto defrag [ 199.155846][T10067] BTRFS info (device loop0): force clearing of disk cache [ 199.161411][T10067] BTRFS info (device loop0): allowing degraded mounts [ 199.166103][T10067] BTRFS info (device loop0): doing ref verification [ 199.170556][T10067] BTRFS info (device loop0): use no compression [ 199.176478][T10067] BTRFS info (device loop0): using free space tree [ 199.295682][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.318315][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.403130][T10067] BTRFS info (device loop0): enabling ssd optimizations [ 199.423181][T10067] BTRFS info (device loop0): rebuilding free space tree [ 199.437277][T10067] BTRFS info (device loop0): checking UUID tree [ 199.438549][T10126] loop2: detected capacity change from 0 to 512 [ 199.500909][ T9291] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.515416][T10126] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 199.529218][T10126] EXT4-fs (loop2): 1 truncate cleaned up [ 199.571119][T10126] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 199.664999][T10126] EXT4-fs (loop2): unmounting filesystem. [ 199.799936][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.824902][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.067540][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.790557][T10156] loop4: detected capacity change from 0 to 32768 [ 200.866203][T10156] XFS (loop4): Mounting V5 Filesystem [ 200.998834][T10156] XFS (loop4): Ending clean mount [ 201.087196][ T6511] XFS (loop4): Unmounting Filesystem [ 201.264723][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.631843][ T8138] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 201.697644][T10200] loop3: detected capacity change from 0 to 512 [ 201.748881][T10200] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 201.760715][T10200] EXT4-fs (loop3): 1 truncate cleaned up [ 201.786764][T10200] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 201.809651][T10200] EXT4-fs (loop3): unmounting filesystem. [ 201.911680][ T8138] usb 1-1: Using ep0 maxpacket: 16 [ 202.031830][ T8138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.034777][ T8138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.037185][ T8138] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.040402][ T8138] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.061701][ T8138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.083954][ T8138] usb 1-1: config 0 descriptor?? [ 202.292213][T10216] No such timeout policy "syz1" [ 202.403904][T10146] loop1: detected capacity change from 0 to 131072 [ 202.444131][T10146] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.497634][T10146] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.804772][ T8138] usbhid 1-1:0.0: can't add hid device: -71 [ 202.809532][ T8138] usbhid: probe of 1-1:0.0 failed with error -71 [ 202.819679][ T8138] usb 1-1: USB disconnect, device number 13 [ 202.921744][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.084880][T10226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.100287][T10226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.142427][ T47] block nbd3: Receive control failed (result -107) [ 203.144688][T10230] nbd3: detected capacity change from 0 to 15960 [ 203.148905][T10228] block nbd3: shutting down sockets [ 203.672291][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.843536][T10238] loop0: detected capacity change from 0 to 32768 [ 203.857966][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.876104][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.884974][ T47] block nbd2: Receive control failed (result -107) [ 203.891926][T10257] nbd2: detected capacity change from 0 to 15960 [ 203.905539][ T4269] block nbd2: shutting down sockets [ 204.405138][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.526934][T10283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.540591][T10283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.990001][T10307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.002619][T10307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.054713][ T4432] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 205.123790][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.189923][T10244] loop1: detected capacity change from 0 to 131072 [ 205.253246][T10244] F2FS-fs (loop1): Found nat_bits in checkpoint [ 205.291646][ T4432] usb 1-1: Using ep0 maxpacket: 32 [ 205.303056][T10244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 205.411916][ T4432] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.414778][ T4432] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.417267][ T4432] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.419823][ T4432] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 205.429999][ T4432] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 205.435873][ T4432] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 205.601896][ T4432] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.604389][ T4432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.606546][ T4432] usb 1-1: Product: syz [ 205.607830][ T4432] usb 1-1: Manufacturer: syz [ 205.609186][ T4432] usb 1-1: SerialNumber: syz [ 205.904981][ T4432] cdc_ncm 1-1:1.0: bind() failure [ 205.908726][ T4432] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 205.910485][ T4432] cdc_ncm 1-1:1.1: bind() failure [ 205.924936][ T4432] usb 1-1: USB disconnect, device number 14 [ 205.972250][T10336] No such timeout policy "syz1" [ 206.040087][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.152283][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.161365][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.545873][T10365] device hsr_slave_0 left promiscuous mode [ 206.591903][T10365] device hsr_slave_1 left promiscuous mode [ 206.736198][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.840911][T10375] device bridge0 entered promiscuous mode [ 207.371395][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.571647][ T4432] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.578222][T10404] No such timeout policy "syz1" [ 207.680761][T10406] device hsr_slave_0 left promiscuous mode [ 207.722872][T10406] device hsr_slave_1 left promiscuous mode [ 207.811728][ T4432] usb 1-1: Using ep0 maxpacket: 16 [ 207.814689][T10344] loop1: detected capacity change from 0 to 131072 [ 207.869755][T10344] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.906620][T10344] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 207.932618][ T4432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.937223][ T4432] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.947517][ T4432] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.961795][ T4432] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.964184][ T4432] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.975876][ T4432] usb 1-1: config 0 descriptor?? [ 208.510842][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.711855][ T4432] usbhid 1-1:0.0: can't add hid device: -71 [ 208.713675][ T4432] usbhid: probe of 1-1:0.0 failed with error -71 [ 208.723893][ T4432] usb 1-1: USB disconnect, device number 15 [ 208.825381][T10447] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 209.218676][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.311898][T10436] loop2: detected capacity change from 0 to 32768 [ 209.367769][T10436] XFS (loop2): Mounting V5 Filesystem [ 209.479855][T10436] XFS (loop2): Ending clean mount [ 209.494074][T10436] XFS (loop2): Quotacheck needed: Please wait. [ 209.553352][T10436] XFS (loop2): Quotacheck: Done. [ 209.612490][ T7548] XFS (loop2): Unmounting Filesystem [ 209.941707][ T4253] Bluetooth: hci5: command 0x0406 tx timeout [ 209.985507][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.074823][ T9379] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.311704][ T9379] usb 1-1: Using ep0 maxpacket: 16 [ 210.452311][ T9379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.455705][ T9379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.458193][ T9379] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.461408][ T9379] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.477495][ T9379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.494802][ T9379] usb 1-1: config 0 descriptor?? [ 211.035077][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.089151][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.190320][T10438] loop1: detected capacity change from 0 to 131072 [ 211.213003][T10438] F2FS-fs (loop1): Found nat_bits in checkpoint [ 211.236257][T10438] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.303267][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.561748][ T9379] usbhid 1-1:0.0: can't add hid device: -71 [ 211.563394][ T9379] usbhid: probe of 1-1:0.0 failed with error -71 [ 211.576060][ T9379] usb 1-1: USB disconnect, device number 16 [ 211.621836][ T47] Bluetooth: hci4: command tx timeout [ 211.646689][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.654225][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.657222][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.682478][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.686623][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.688811][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.836503][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.734714][ T4253] Bluetooth: hci1: command tx timeout [ 212.906277][T10565] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.909763][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.958945][T10538] chnl_net:caif_netlink_parms(): no params data found [ 213.176890][T10538] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.186849][T10538] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.202741][T10538] device bridge_slave_0 entered promiscuous mode [ 213.229635][T10538] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.248903][T10538] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.269239][T10538] device bridge_slave_1 entered promiscuous mode [ 213.340721][T10538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.360220][T10538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.451184][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.466999][T10538] team0: Port device team_slave_0 added [ 213.470355][T10538] team0: Port device team_slave_1 added [ 213.507817][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.510904][T10538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.513273][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.529387][T10538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.545011][T10538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.550305][T10538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.566852][T10538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.721775][ T47] Bluetooth: hci3: command tx timeout [ 213.731715][T10538] device hsr_slave_0 entered promiscuous mode [ 213.806451][T10538] device hsr_slave_1 entered promiscuous mode [ 214.688489][T10611] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.836801][T10538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.963583][T10538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.972859][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.065733][T10538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.124393][T10538] bond0: (slave netdevsim0): Releasing backup interface [ 215.166372][T10538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.174900][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.202113][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.596531][T10538] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.673468][T10538] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.398894][ T4253] Bluetooth: hci3: command tx timeout [ 216.409452][T10538] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.602358][T10538] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.845803][T10538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.859544][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.863585][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.877193][T10538] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.885768][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.916028][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.918822][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.921212][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.923172][ T5017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.934376][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.940683][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.945800][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.947776][ T5017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.953735][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.983869][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.986634][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.989710][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.004496][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.011490][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.018353][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.023371][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.026332][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.033829][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.041194][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.045895][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.053477][T10538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.059437][T10538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.067950][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.070823][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.387029][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.389076][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.401475][T10538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.431777][ T47] Bluetooth: hci3: command tx timeout [ 218.451773][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.454457][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.464451][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.467011][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.470350][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.473380][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.477152][T10538] device veth0_vlan entered promiscuous mode [ 218.485693][T10538] device veth1_vlan entered promiscuous mode [ 218.499455][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.502110][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.504525][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.507032][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.512369][T10538] device veth0_macvtap entered promiscuous mode [ 218.517732][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.543018][T10538] device veth1_macvtap entered promiscuous mode [ 218.566210][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.570258][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.614403][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.617175][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.619636][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.623965][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.628278][T10538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.630695][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.635017][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.637608][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.640320][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.644922][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.648161][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.650745][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.657676][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.660541][T10538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.673941][T10538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.677873][T10538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.679974][T10695] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 218.683336][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.687950][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.704912][T10538] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.707283][T10538] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.709464][T10538] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.735851][T10538] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.946667][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.952807][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.958132][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.964308][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 219.005931][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.049988][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.161027][T10713] input: syz1 as /devices/virtual/input/input3 [ 220.647459][ T4253] Bluetooth: hci2: command tx timeout [ 220.649062][ T4253] Bluetooth: hci3: command tx timeout [ 221.112108][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.147556][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.154664][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.684394][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.743192][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.780718][ T47] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 222.019764][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.751959][T10768] loop0: detected capacity change from 0 to 32768 [ 222.761892][T10768] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (10768) [ 222.767596][T10768] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.770398][T10768] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 222.773031][T10768] BTRFS info (device loop0): using free space tree [ 222.820604][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.899212][T10768] BTRFS info (device loop0): enabling ssd optimizations [ 222.978793][ T9291] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 223.151942][ T47] Bluetooth: hci5: command 0x0406 tx timeout [ 223.186801][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.052085][T10818] loop2: detected capacity change from 0 to 32768 [ 224.058718][T10818] XFS: attr2 mount option is deprecated. [ 224.069348][T10818] XFS: ikeep mount option is deprecated. [ 224.075059][T10818] XFS: noikeep mount option is deprecated. [ 224.118803][T10818] XFS (loop2): Mounting V5 Filesystem [ 224.204048][T10818] XFS (loop2): Ending clean mount [ 224.218460][T10818] XFS (loop2): Quotacheck needed: Please wait. [ 224.276724][T10818] XFS (loop2): Quotacheck: Done. [ 224.363185][ T7548] XFS (loop2): Unmounting Filesystem [ 224.461276][T10832] loop3: detected capacity change from 0 to 32768 [ 224.472898][T10832] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (10832) [ 224.485838][T10832] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.492041][T10832] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 224.497857][T10832] BTRFS info (device loop3): using free space tree [ 224.672012][T10832] BTRFS info (device loop3): enabling ssd optimizations [ 224.756549][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.759571][ T5795] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 225.389881][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.664018][T10874] loop0: detected capacity change from 0 to 32768 [ 225.675934][T10874] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (10874) [ 225.687785][T10874] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.697738][T10874] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 225.703812][T10874] BTRFS info (device loop0): using free space tree [ 225.855112][T10874] BTRFS info (device loop0): enabling ssd optimizations [ 225.961399][ T9291] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.198151][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.284480][ T27] kauditd_printk_skb: 81 callbacks suppressed [ 226.284496][ T27] audit: type=1326 audit(226.260:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8385df28 code=0x0 [ 226.492006][T10959] loop3: detected capacity change from 0 to 256 [ 226.737143][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.004008][T10981] block nbd3: shutting down sockets [ 227.443762][T11009] block nbd3: shutting down sockets [ 227.546551][T11024] team0: Caught tx_queue_len zero misconfig [ 227.844321][T11046] block nbd4: shutting down sockets [ 228.383050][ T4253] block nbd4: Receive control failed (result -107) [ 228.389730][T11078] block nbd4: shutting down sockets [ 228.496197][T11082] loop3: detected capacity change from 0 to 2048 [ 228.544265][T11082] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 228.602963][T11056] loop1: detected capacity change from 0 to 32768 [ 228.606106][T11056] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (11056) [ 228.648630][T11056] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 228.665901][T11056] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 228.679991][T11056] BTRFS info (device loop1): enabling auto defrag [ 228.710399][T11056] BTRFS info (device loop1): doing ref verification [ 228.718196][T11056] BTRFS info (device loop1): max_inline at 0 [ 228.722325][T11056] BTRFS info (device loop1): force clearing of disk cache [ 228.725716][ T27] audit: type=1326 audit(228.700:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11081 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec5df28 code=0x0 [ 228.738431][T11056] BTRFS info (device loop1): turning on sync discard [ 228.743653][T11056] BTRFS info (device loop1): disabling free space tree [ 228.926812][T11094] loop4: detected capacity change from 0 to 32768 [ 228.930647][T11094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11094) [ 228.932385][T11056] BTRFS info (device loop1): enabling ssd optimizations [ 228.937171][T11056] BTRFS info (device loop1): rebuilding free space tree [ 228.947707][T11094] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.950500][T11094] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 228.954330][T11094] BTRFS info (device loop4): using free space tree [ 228.976696][T11056] BTRFS info (device loop1): disabling free space tree [ 228.980865][T11056] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 228.991947][T11056] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 229.107789][T10538] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 229.127643][T11094] BTRFS info (device loop4): enabling ssd optimizations [ 229.381466][ T5795] EXT4-fs (loop3): unmounting filesystem. [ 229.396575][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.441527][ T6511] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.973079][T11169] loop3: detected capacity change from 0 to 2048 [ 230.132282][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.142172][T11169] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 230.416111][ T27] audit: type=1326 audit(230.390:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11168 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec5df28 code=0x0 [ 230.633202][ T5795] EXT4-fs (loop3): unmounting filesystem. [ 230.816863][T11209] loop1: detected capacity change from 0 to 512 [ 230.824005][T11209] EXT4-fs: Ignoring sb option on remount [ 230.827105][T11209] EXT4-fs: Ignoring removed orlov option [ 230.889365][T11209] EXT4-fs (nvme0n1p2): can't enable nombcache during remount [ 231.036496][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.475634][T11236] loop2: detected capacity change from 0 to 512 [ 231.525018][T11236] EXT4-fs (loop2): orphan cleanup on readonly fs [ 231.563139][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.575176][T11236] EXT4-fs error (device loop2): ext4_find_extent:936: inode #4: comm syz-executor.2: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 231.590203][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.617179][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.646728][T11236] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 231.663831][T11236] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 231.686923][T11236] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 231.690503][T11236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.739619][ T7548] EXT4-fs (loop2): unmounting filesystem. [ 231.886553][T11248] loop2: detected capacity change from 0 to 2048 [ 231.916661][T11248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 232.075578][ T27] audit: type=1326 audit(232.050:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffadc5df28 code=0x0 [ 233.403007][ T47] Bluetooth: hci3: command tx timeout [ 233.467784][ T47] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 233.529940][ T7548] EXT4-fs (loop2): unmounting filesystem. [ 233.565532][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.574760][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.669551][T11266] loop3: detected capacity change from 0 to 512 [ 233.806767][T11271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.816729][T11273] loop4: detected capacity change from 0 to 16 [ 233.858682][T11273] erofs: (device loop4): mounted with root inode @ nid 36. [ 235.225504][T11284] loop4: detected capacity change from 0 to 8 [ 235.234418][T11284] squashfs image failed sanity check [ 235.274399][T11284] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 235.307133][T11285] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.358545][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.075728][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 238.690447][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.727408][ T4253] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 240.277654][T11320] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.447024][T11331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.449590][T11331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.545844][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.582793][T11337] loop4: detected capacity change from 0 to 512 [ 240.638513][ T4258] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 243.804651][T11353] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.988681][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.080275][ T4258] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 244.099563][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.241131][T11373] team0: Port device team_slave_0 removed [ 244.245106][T11373] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 244.251398][T11375] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.258179][T11377] device bridge_slave_0 entered promiscuous mode [ 244.385957][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.399704][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.490760][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.887323][T11395] loop1: detected capacity change from 0 to 512 [ 246.034760][ T4408] blk_print_req_error: 40 callbacks suppressed [ 246.034777][ T4408] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.077564][T11403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.198639][ T4253] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 246.808131][T11434] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.974456][T11434] team0: Port device team_slave_0 removed [ 246.985532][T11434] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 247.043677][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.690035][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.775723][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.891184][T11446] loop3: detected capacity change from 0 to 32768 [ 247.904386][T11446] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (11446) [ 247.931926][T11446] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 247.954575][T11446] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 247.956797][T11446] BTRFS info (device loop3): using free space tree [ 248.061009][T11486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.086454][T11486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.115869][T11489] loop0: detected capacity change from 0 to 8 [ 248.148434][T11489] squashfs image failed sanity check [ 248.190248][T11489] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 248.219958][T11446] BTRFS info (device loop3): enabling ssd optimizations [ 248.257973][T11497] loop4: detected capacity change from 0 to 512 [ 248.322176][ T5795] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 248.832854][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.834678][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.928182][T11524] team0: Port device team_slave_0 removed [ 248.940963][T11524] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 249.084299][T11533] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 249.108882][T11533] syz-executor.2 sent an empty control message without MSG_MORE. [ 249.871127][T11563] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 250.100066][T11542] loop1: detected capacity change from 0 to 32768 [ 250.132175][T11542] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (11542) [ 250.155469][T11542] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.165717][T11542] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 250.172981][T11542] BTRFS info (device loop1): using free space tree [ 250.195256][T11573] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 250.360277][T11542] BTRFS info (device loop1): enabling ssd optimizations [ 250.428694][T10538] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.987692][T11606] Bluetooth: MGMT ver 1.22 [ 251.442440][T11624] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 252.096317][T11617] loop4: detected capacity change from 0 to 32768 [ 252.110077][T11617] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (11617) [ 252.117939][ T4258] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 252.131638][T11617] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.139467][T11617] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 252.143865][T11617] BTRFS info (device loop4): using free space tree [ 252.374175][T11686] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 252.400741][T11617] BTRFS info (device loop4): enabling ssd optimizations [ 252.480616][ T6511] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.747217][ T4253] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 253.097547][T11729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.156193][T11737] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 253.827023][T11786] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 253.854522][T11724] loop1: detected capacity change from 0 to 32768 [ 253.875302][T11724] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (11724) [ 253.890457][T11724] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 253.898408][T11724] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 253.908523][T11724] BTRFS info (device loop1): using free space tree [ 254.236567][T11724] BTRFS info (device loop1): enabling ssd optimizations [ 254.320074][T10538] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 254.358477][T11828] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 254.385019][T11828] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 254.423142][ T6223] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (6223) [ 254.462896][T11831] bridge13: port 1(gretap1) entered blocking state [ 254.505871][T11831] bridge13: port 1(gretap1) entered disabled state [ 254.519491][T11831] device gretap1 entered promiscuous mode [ 254.563090][T11828] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 254.569144][T11828] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 254.833011][T11848] team0: Port device team_slave_0 removed [ 254.843059][T11848] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 255.638078][T11887] team0: Port device team_slave_0 removed [ 255.643426][T11887] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 257.117426][T11982] loop1: detected capacity change from 0 to 8 [ 257.129139][T11982] squashfs image failed sanity check [ 257.131200][T11980] team0: Device batadv0 is up. Set it down before adding it as a team port [ 257.187574][ T6223] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.188853][T11982] __nla_validate_parse: 2 callbacks suppressed [ 257.188868][T11982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.289199][T11991] team0: Device batadv0 is up. Set it down before adding it as a team port [ 258.110054][T12018] loop0: detected capacity change from 0 to 8 [ 258.130262][T12018] squashfs image failed sanity check [ 258.190577][ T6223] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.212939][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.477791][T12036] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 258.628897][T12043] team0: Device batadv0 is up. Set it down before adding it as a team port [ 258.892824][T12056] team0: Device batadv0 is up. Set it down before adding it as a team port [ 258.899980][T12057] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 259.030310][T12060] loop0: detected capacity change from 0 to 8 [ 259.037531][T12060] squashfs image failed sanity check [ 259.075713][ T6223] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.085164][T12060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.603595][T12085] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 259.650793][T12089] loop1: detected capacity change from 0 to 8 [ 259.670351][T12089] squashfs image failed sanity check [ 259.720672][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.769295][T12093] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.190365][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.203796][T12113] device vlan3 entered promiscuous mode [ 260.205668][T12113] device team0 entered promiscuous mode [ 260.208396][T12113] device team_slave_1 entered promiscuous mode [ 260.223078][T12113] device team0 left promiscuous mode [ 260.225780][T12113] device team_slave_1 left promiscuous mode [ 260.496221][T12125] loop1: detected capacity change from 0 to 8 [ 260.518457][T12126] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 260.523997][T12125] squashfs image failed sanity check [ 260.548092][T12125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.091325][ T4258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.097503][ T4258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.100455][ T4258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.110506][ T4258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.113043][ T4258] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 261.116607][ T4258] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.560249][T12159] loop0: detected capacity change from 0 to 8 [ 261.605828][T12159] squashfs image failed sanity check [ 261.861167][T11296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.904373][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.968858][T11296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.060720][T12147] chnl_net:caif_netlink_parms(): no params data found [ 262.168699][T11296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.271059][T11296] bond0: (slave netdevsim0): Releasing backup interface [ 262.311453][T11296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.319246][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.321345][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.329877][T12147] device bridge_slave_0 entered promiscuous mode [ 262.336017][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.355985][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.357858][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.375874][T12147] device bridge_slave_1 entered promiscuous mode [ 262.419240][T12147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.443972][T12147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.493798][T12147] team0: Port device team_slave_0 added [ 262.504316][T12147] team0: Port device team_slave_1 added [ 262.512584][ T5014] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 262.586600][T12147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.588961][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.605325][T12147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.623954][T12147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.630605][T12147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.668599][T12147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.761955][ T5014] usb 1-1: Using ep0 maxpacket: 16 [ 262.803577][T12147] device hsr_slave_0 entered promiscuous mode [ 262.862939][T12147] device hsr_slave_1 entered promiscuous mode [ 262.891743][T12147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.893870][T12147] Cannot create hsr debugfs directory [ 262.911912][ T5014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.914748][ T5014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.917521][ T5014] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.929052][ T5014] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.937209][ T5014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.951390][ T5014] usb 1-1: config 0 descriptor?? [ 263.141742][ T4253] Bluetooth: hci0: command tx timeout [ 263.270678][T12206] loop2: detected capacity change from 0 to 8 [ 263.278388][T12206] squashfs image failed sanity check [ 263.373235][T12206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.414706][ T5014] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 263.416857][ T5014] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 263.420597][ T5014] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 263.433022][ T5014] microsoft 0003:045E:07DA.0004: no inputs found [ 263.438204][ T5014] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 263.501882][T11296] device gretap1 left promiscuous mode [ 263.504855][T11296] bridge13: port 1(gretap1) entered disabled state [ 263.617148][ T8138] usb 1-1: USB disconnect, device number 17 [ 263.918225][T11296] bond0: (slave wlan1): Releasing backup interface [ 263.956568][T12228] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.959319][T12228] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.176776][T12243] loop2: detected capacity change from 0 to 8 [ 264.190604][T12243] squashfs image failed sanity check [ 264.253837][T12240] device batadv_slave_0 entered promiscuous mode [ 264.256887][ T6223] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.259865][T12147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.273936][T12239] device batadv_slave_0 left promiscuous mode [ 264.277167][T12243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.311894][T12147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.497382][T11296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.501215][T11296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.525026][T11296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.534298][T11296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.564246][T11296] device bridge_slave_1 left promiscuous mode [ 264.572329][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.624488][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.901962][T11296] device veth1_macvtap left promiscuous mode [ 264.903704][T11296] device veth0_macvtap left promiscuous mode [ 264.905328][T11296] device veth1_vlan left promiscuous mode [ 264.906788][T11296] device veth0_vlan left promiscuous mode [ 265.221675][ T4253] Bluetooth: hci0: command tx timeout [ 266.164868][T11296] team0 (unregistering): Port device team_slave_1 removed [ 266.177701][T11296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.206471][T11296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.333932][T11296] bond0 (unregistering): Released all slaves [ 266.416843][T12147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.455237][T12147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.579457][T12288] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.812677][T12147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.854039][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.856612][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.867091][T12147] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.885253][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.888187][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.891974][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.893927][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.978005][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.981164][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.984297][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.998217][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.000221][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.017272][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.029466][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.040340][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.059311][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.067202][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.080007][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.098457][T12147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.101148][T12147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.129178][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.132174][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.136806][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.143918][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.150202][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.161005][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.292472][T12320] EXT4-fs warning (device nvme0n1p2): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 267.302090][ T4258] Bluetooth: hci0: command tx timeout [ 267.316239][T12320] EXT4-fs warning (device nvme0n1p2): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 267.337474][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.340126][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.364303][T12325] device ip6gretap0 entered promiscuous mode [ 267.403123][T12325] device batadv_slave_0 entered promiscuous mode [ 267.667858][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 267.689975][T12331] device syzkaller0 entered promiscuous mode [ 267.724901][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.727552][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.732489][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.735223][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.750565][T12341] loop0: detected capacity change from 0 to 8 [ 267.755725][T12147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.784966][T12341] squashfs image failed sanity check [ 267.837461][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.900320][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.906483][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.933769][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.936735][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.939709][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.944815][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.957820][T12147] device veth0_vlan entered promiscuous mode [ 267.981199][T12147] device veth1_vlan entered promiscuous mode [ 268.071980][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.074532][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.077034][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.079621][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.095496][T12147] device veth0_macvtap entered promiscuous mode [ 268.111238][T12147] device veth1_macvtap entered promiscuous mode [ 268.156486][T12147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.166474][T12147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.172010][T12147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.178745][T12147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.188280][T12147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.195384][T12147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.207657][T12147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.214241][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.226574][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.229542][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.267352][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.289609][T12147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.293048][T12147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.295840][T12147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.298531][T12147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.301177][T12147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.341831][T12147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.353638][T12147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.361404][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.364582][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.388906][T12147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.391418][T12147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.420209][T12147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.426804][T12147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.476361][T12368] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.698056][T11400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.704474][T11400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.718462][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.726202][T12377] loop2: detected capacity change from 0 to 8 [ 268.730335][T12377] squashfs image failed sanity check [ 268.762093][T11400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.774134][T11400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.789703][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 268.804093][T12377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.324243][T12413] loop2: detected capacity change from 0 to 8 [ 269.341372][T12413] squashfs image failed sanity check [ 269.381681][ T4253] Bluetooth: hci0: command tx timeout [ 269.534926][T12413] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.875761][T12434] EXT4-fs warning (device nvme0n1p2): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 269.909431][T12434] EXT4-fs warning (device nvme0n1p2): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 270.065450][T12448] loop4: detected capacity change from 0 to 8 [ 270.081022][T12448] squashfs image failed sanity check [ 270.184678][T12451] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.290527][T12448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.290909][ T6223] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.637033][T12477] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.680701][T12484] loop1: detected capacity change from 0 to 8 [ 270.685542][T12484] squashfs image failed sanity check [ 270.812465][ T4450] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.856791][T12484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.369367][T12519] loop1: detected capacity change from 0 to 8 [ 271.388709][T12519] squashfs image failed sanity check [ 271.520676][ T6223] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.930720][T12556] loop1: detected capacity change from 0 to 8 [ 271.956767][T12556] squashfs image failed sanity check [ 272.479342][T12599] loop0: detected capacity change from 0 to 8 [ 272.493264][T12599] squashfs image failed sanity check [ 272.550442][ T6223] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.919877][T12638] __nla_validate_parse: 6 callbacks suppressed [ 272.919893][T12638] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.947902][T12640] loop4: detected capacity change from 0 to 8 [ 272.962538][T12640] squashfs image failed sanity check [ 273.022700][ T4408] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.036516][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.218313][T12657] EXT4-fs warning (device nvme0n1p2): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 273.365254][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.474574][T12672] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.515642][T12676] loop2: detected capacity change from 0 to 8 [ 273.522957][T12676] squashfs image failed sanity check [ 273.557361][T12676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.842912][T12704] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.103734][ T4444] wlan1: Trigger new scan to find an IBSS to join [ 274.136008][T12720] device ip6tnl0 entered promiscuous mode [ 274.140756][T12718] device ip6tnl0 left promiscuous mode [ 274.149081][T12721] loop4: detected capacity change from 0 to 8 [ 274.163769][T12721] squashfs image failed sanity check [ 274.187602][T12721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.628028][T12760] loop3: detected capacity change from 0 to 8 [ 274.646785][T12760] squashfs image failed sanity check [ 274.674970][T12764] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 274.677844][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.705271][ T4408] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 274.719527][T12760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.801287][T12772] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.824120][T12775] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 275.107028][T12804] loop0: detected capacity change from 0 to 8 [ 275.123496][T12804] squashfs image failed sanity check [ 275.184869][T12808] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 275.401291][T12825] Bluetooth: hci3: invalid length 0, exp 2 for type 5 [ 275.526601][T12839] loop3: detected capacity change from 0 to 8 [ 275.539889][T12839] squashfs image failed sanity check [ 275.540533][T12840] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 275.966799][T12873] loop1: detected capacity change from 0 to 8 [ 275.994087][T12873] squashfs image failed sanity check [ 275.997915][T12872] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 276.375290][T12899] device gretap0 entered promiscuous mode [ 276.461287][T12908] loop1: detected capacity change from 0 to 8 [ 276.468565][T12908] squashfs image failed sanity check [ 276.486913][T12904] team0: Port device team_slave_0 removed [ 276.497574][T12904] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 276.511836][ T4253] Bluetooth: hci2: command 0x0406 tx timeout [ 276.844911][T12942] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 277.142724][ T5228] wlan1: Trigger new scan to find an IBSS to join [ 277.257678][T12977] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 277.609677][T13013] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 277.636861][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 278.161139][T13054] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 278.265882][T13063] loop0: detected capacity change from 0 to 8 [ 278.274811][T13063] squashfs image failed sanity check [ 278.284131][T13061] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 278.317951][T13066] __nla_validate_parse: 17 callbacks suppressed [ 278.317968][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.346504][T13061] bond1: (slave bridge10): Enslaving as a backup interface with an up link [ 278.351490][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.370204][T13061] bridge0: port 3(bond1) entered blocking state [ 278.380294][T13061] bridge0: port 3(bond1) entered disabled state [ 278.385767][T13061] device bond1 entered promiscuous mode [ 278.393810][T13061] device bridge10 entered promiscuous mode [ 278.832374][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.838298][T13101] loop4: detected capacity change from 0 to 8 [ 278.852366][T13101] squashfs image failed sanity check [ 278.917839][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.238382][T13131] IPVS: Error connecting to the multicast addr [ 279.368156][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.449195][T13144] loop0: detected capacity change from 0 to 8 [ 279.461350][T13144] squashfs image failed sanity check [ 279.504441][T13144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.791858][ T47] Bluetooth: hci0: command tx timeout [ 279.929209][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.977134][T13189] net_ratelimit: 3 callbacks suppressed [ 279.977148][T13189] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 280.103558][T11296] wlan1: Creating new IBSS network, BSSID ca:3c:fd:3c:93:fb [ 280.520050][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.009598][T13273] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 281.047218][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.112148][T13273] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 281.126398][T13273] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 281.192766][T11400] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 281.193653][T13273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.201055][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 281.314843][ T4310] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 281.485438][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.861786][ T47] Bluetooth: hci0: command tx timeout [ 282.637142][T13400] loop0: detected capacity change from 0 to 8 [ 282.658399][T13400] squashfs image failed sanity check [ 283.036830][T13432] loop4: detected capacity change from 0 to 8 [ 283.050235][T13432] squashfs image failed sanity check [ 283.302535][T13454] syz-executor.2 (13454) used obsolete PPPIOCDETACH ioctl [ 283.432462][T13468] loop1: detected capacity change from 0 to 8 [ 283.441129][T13468] squashfs image failed sanity check [ 283.509214][T13468] __nla_validate_parse: 7 callbacks suppressed [ 283.509230][T13468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.810719][T13503] loop3: detected capacity change from 0 to 8 [ 283.828632][T13503] squashfs image failed sanity check [ 283.892908][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.163257][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.288861][T13542] loop3: detected capacity change from 0 to 8 [ 284.298406][T13542] squashfs image failed sanity check [ 284.358910][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.700636][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.833863][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.895670][T13583] EXT4-fs warning (device nvme0n1p2): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 284.938891][T13579] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 284.970591][T13579] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 285.031133][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.038239][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.087620][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.095298][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.112417][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.116728][ T4253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.390319][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.599727][ T5228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.606431][T13612] EXT4-fs warning (device nvme0n1p2): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 285.782775][ T5228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.842589][ T5228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.877122][ T5228] bond0: (slave netdevsim0): Releasing backup interface [ 285.908531][ T5228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.059551][T13640] EXT4-fs warning (device nvme0n1p2): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 286.186227][T13586] chnl_net:caif_netlink_parms(): no params data found [ 286.434810][T13586] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.441777][T13586] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.452223][T13586] device bridge_slave_0 entered promiscuous mode [ 286.482355][T13586] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.492152][T13586] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.495282][T13586] device bridge_slave_1 entered promiscuous mode [ 286.547227][ T5228] device ip6gretap0 left promiscuous mode [ 286.654162][T13586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.658963][T13586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.760077][T13586] team0: Port device team_slave_0 added [ 287.143431][ T4253] Bluetooth: hci5: command tx timeout [ 287.611944][T13586] team0: Port device team_slave_1 added [ 287.805020][T13586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.807077][T13586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.812686][T13707] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 287.831718][T13586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.841155][T13586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.853592][T13586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.891006][T13586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.660437][T13586] device hsr_slave_0 entered promiscuous mode [ 288.732057][T13586] device hsr_slave_1 entered promiscuous mode [ 288.771889][T13586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.774347][T13586] Cannot create hsr debugfs directory [ 289.002459][T13739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.221771][ T4253] Bluetooth: hci5: command tx timeout [ 289.837525][ T5228] device batadv_slave_0 left promiscuous mode [ 290.032316][ T5228] device hsr_slave_0 left promiscuous mode [ 290.871982][ T5228] device hsr_slave_1 left promiscuous mode [ 290.967954][ T5228] device dummy0 left promiscuous mode [ 290.993404][ T5228] device veth1_macvtap left promiscuous mode [ 290.995128][ T5228] device veth0_macvtap left promiscuous mode [ 290.996864][ T5228] device veth1_vlan left promiscuous mode [ 290.998415][ T5228] device veth0_vlan left promiscuous mode [ 291.301625][ T4258] Bluetooth: hci5: command tx timeout [ 292.821972][T13814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.824712][T13814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.381672][ T4253] Bluetooth: hci5: command tx timeout [ 293.759433][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 293.772582][ T5228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.809065][ T5228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.928543][ T5228] bond0 (unregistering): Released all slaves [ 294.281163][T13586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.324624][T13586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.364163][T13586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.511731][T13586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.672452][T13586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.686796][T13873] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.703381][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 295.706083][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.727922][T13586] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.830232][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 295.833529][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.836078][ T5014] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.838200][ T5014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.847763][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.872356][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.878452][ T5014] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.880499][ T5014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.888743][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.919052][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.922301][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.925285][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.934825][T13880] loop2: detected capacity change from 0 to 512 [ 295.940259][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.952901][T13880] EXT4-fs: Ignoring removed oldalloc option [ 295.956616][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.971361][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.986704][T13586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.989623][T13586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.997532][ T27] audit: type=1326 audit(295.970:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8a5df28 code=0x0 [ 296.014631][ T27] audit: type=1326 audit(295.990:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8a5df28 code=0x0 [ 296.039511][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.043049][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.055432][ T27] audit: type=1326 audit(296.020:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13844 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=57 compat=0 ip=0xffffb8a5cbcc code=0x0 [ 296.062403][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.081015][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.109634][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.123471][T13880] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz-executor.2: Parent and EA inode have the same ino 15 [ 296.950201][T13880] EXT4-fs (loop2): Remounting filesystem read-only [ 296.952201][T13880] EXT4-fs error (device loop2): ext4_evict_inode:290: comm syz-executor.2: couldn't truncate inode 15 (err -30) [ 296.965641][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.006489][T13880] EXT4-fs (loop2): 1 orphan inode deleted [ 297.008572][T13880] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 297.023939][T13880] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor.2: deleted inode referenced: 15 [ 297.035965][T13880] EXT4-fs (loop2): Remounting filesystem read-only [ 297.109299][ T7548] EXT4-fs (loop2): unmounting filesystem. [ 297.265766][T13912] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.320289][T13917] tmpfs: Unknown parameter 'context' [ 297.419415][T13586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.423437][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.425576][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.439590][T13924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.492122][T13924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.986198][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 298.989019][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 299.051181][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 299.055082][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 299.058118][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 299.062279][T13956] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.065720][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 299.069799][T13586] device veth0_vlan entered promiscuous mode [ 299.111406][T13586] device veth1_vlan entered promiscuous mode [ 299.194996][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 299.197625][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 299.200267][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.206070][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 299.210530][T13586] device veth0_macvtap entered promiscuous mode [ 299.218005][T13586] device veth1_macvtap entered promiscuous mode [ 299.267356][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.270243][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.292389][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.304991][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.310116][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.319971][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.330677][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.343848][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.360453][T13964] loop0: detected capacity change from 0 to 512 [ 299.363605][T13964] EXT4-fs: Ignoring removed oldalloc option [ 299.390338][T13586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.411141][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 299.418577][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 299.421954][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 299.430533][T13964] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 299.447557][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.202965][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.209395][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.212183][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.255856][T13964] EXT4-fs (loop0): Remounting filesystem read-only [ 300.257867][T13964] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz-executor.0: couldn't truncate inode 15 (err -30) [ 300.277401][T13964] EXT4-fs (loop0): 1 orphan inode deleted [ 300.281858][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.289250][T13964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 300.309667][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.357388][T13964] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor.0: deleted inode referenced: 15 [ 300.357612][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.357641][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.357654][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.358891][T13586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.362086][T13964] EXT4-fs (loop0): Remounting filesystem read-only [ 300.364275][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.364889][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 300.366402][T13586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.366432][T13586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.366454][T13586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.366476][T13586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.417985][ T9291] EXT4-fs (loop0): unmounting filesystem. [ 300.705743][T11296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.705804][T11296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.709858][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.710730][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.710772][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.716441][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 301.006529][T13998] loop4: detected capacity change from 0 to 8 [ 301.024413][T13998] squashfs image failed sanity check [ 301.067661][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.306616][T14005] loop1: detected capacity change from 0 to 512 [ 302.331813][T14005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.334406][T14005] EXT4-fs: old and new quota format mixing [ 302.342482][ T4258] Bluetooth: hci4: command 0x0406 tx timeout [ 302.414911][ T6223] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.584336][T14007] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.813825][T14012] loop1: detected capacity change from 0 to 256 [ 302.920182][T14012] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 304.697305][T14023] loop0: detected capacity change from 0 to 512 [ 304.700169][T14023] EXT4-fs: Ignoring removed oldalloc option [ 304.751420][T14023] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 304.772123][T14023] EXT4-fs (loop0): Remounting filesystem read-only [ 304.781884][T14023] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz-executor.0: couldn't truncate inode 15 (err -30) [ 304.801703][T14023] EXT4-fs (loop0): 1 orphan inode deleted [ 304.803376][T14023] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 304.814491][T14023] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor.0: deleted inode referenced: 15 [ 304.818473][T14023] EXT4-fs (loop0): Remounting filesystem read-only [ 304.857668][ T9291] EXT4-fs (loop0): unmounting filesystem. [ 304.927922][T14031] loop0: detected capacity change from 0 to 8 [ 304.946362][T14031] squashfs image failed sanity check [ 304.978873][T14031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.280658][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.576219][T14047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.582312][T14047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.926991][T14058] loop4: detected capacity change from 0 to 8 [ 306.929898][T14058] squashfs image failed sanity check [ 306.958995][T14060] Cannot find add_set index 0 as target [ 307.723321][T14058] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.908847][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.948095][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.987738][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.002656][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.007046][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.010767][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.013699][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 308.015936][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.166582][T14063] dccp_close: ABORT with 32 bytes unread [ 309.267132][T14072] chnl_net:caif_netlink_parms(): no params data found [ 309.356349][T14096] Cannot find add_set index 0 as target [ 309.431760][T14101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.441479][T14101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.472916][T14103] loop3: detected capacity change from 0 to 8 [ 309.483411][T14103] squashfs image failed sanity check [ 309.502386][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.504362][T14072] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.507123][T14072] device bridge_slave_0 entered promiscuous mode [ 309.510411][T14072] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.531477][T14072] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.549324][T14072] device bridge_slave_1 entered promiscuous mode [ 309.560019][T14103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.651062][T14072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.666359][T14072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.746249][T14072] team0: Port device team_slave_0 added [ 309.784379][T14072] team0: Port device team_slave_1 added [ 309.854665][T14072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.865912][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.902331][T14072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.906667][T14072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.908564][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.933462][T14123] Cannot find add_set index 0 as target [ 309.945760][T14072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.101791][ T47] Bluetooth: hci1: command tx timeout [ 310.151843][T14072] device hsr_slave_0 entered promiscuous mode [ 310.162666][T14131] loop3: detected capacity change from 0 to 8 [ 310.178623][T14131] squashfs image failed sanity check [ 310.222424][T14072] device hsr_slave_1 entered promiscuous mode [ 311.101983][ T2049] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.112728][ T2049] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.131970][T14072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.134298][T14072] Cannot create hsr debugfs directory [ 311.136134][T14131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.606970][T14149] loop0: detected capacity change from 0 to 7 [ 311.614847][T14149] Dev loop0: unable to read RDB block 7 [ 311.617690][T14149] loop0: unable to read partition table [ 311.623964][T14149] loop0: partition table beyond EOD, truncated [ 311.629271][T14072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.630368][T14149] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 311.630368][T14149] ) failed (rc=-5) [ 312.192359][ T4253] Bluetooth: hci1: command tx timeout [ 313.162349][T14072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.278762][T14166] loop0: detected capacity change from 0 to 8 [ 313.295472][T14072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.310316][T14166] squashfs image failed sanity check [ 313.330134][T14166] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.390033][T14072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.522288][T14169] loop4: detected capacity change from 0 to 8192 [ 313.731493][T14072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 313.803632][T14072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.833521][T14072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.884666][T14072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.271746][ T47] Bluetooth: hci1: command tx timeout [ 314.329475][T14072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.351009][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.353708][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.548644][T14160] loop3: detected capacity change from 0 to 32768 [ 315.785564][T14072] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.802057][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.843543][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.265355][ T5014] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.267496][ T5014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.342646][ T4253] Bluetooth: hci1: command tx timeout [ 316.633772][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.636499][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.638988][ T5014] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.640836][ T5014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.663486][ T6017] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.665492][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.668726][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.672082][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.674866][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.678024][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.680619][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.700617][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.703420][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.706055][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.708667][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.711524][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.754626][T14072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.798610][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.186806][T14211] loop3: detected capacity change from 0 to 8192 [ 317.198118][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.200502][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.211803][T14072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.240893][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.252182][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.328592][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.331463][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.335534][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.347420][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.364533][T14072] device veth0_vlan entered promiscuous mode [ 317.371344][T14072] device veth1_vlan entered promiscuous mode [ 317.490531][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 317.493513][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 317.496415][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.508018][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.522287][T14072] device veth0_macvtap entered promiscuous mode [ 317.539726][T14072] device veth1_macvtap entered promiscuous mode [ 317.605156][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.616440][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.624515][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.630504][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.656937][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.671820][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.680950][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.693804][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.711504][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.722008][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.736392][T14072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.746333][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 317.749141][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.752208][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 317.762023][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 317.773785][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.781035][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.791418][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.794038][T14209] loop4: detected capacity change from 0 to 32768 [ 317.862640][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.865948][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.869054][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.897533][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.906972][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.916623][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.923089][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.948608][T14072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.959709][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 317.962977][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 317.981482][T14072] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.787865][T14209] XFS (loop4): Mounting V5 Filesystem [ 318.800239][T14072] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.804028][T14072] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.810022][T14072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.980304][T14209] XFS (loop4): Ending clean mount [ 319.048124][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.050577][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.069990][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.115680][T11400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.118202][T11400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.136505][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 319.154769][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 319.296326][T14258] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.336065][T13586] XFS (loop4): Unmounting Filesystem [ 319.436003][T14252] loop2: detected capacity change from 0 to 8192 [ 320.910198][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 320.913366][T14270] loop0: detected capacity change from 0 to 4096 [ 321.118493][T14278] loop0: detected capacity change from 0 to 2048 [ 321.134188][T14278] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 321.140241][T14276] loop4: detected capacity change from 0 to 4096 [ 321.155796][T14278] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.206492][T14279] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.889775][T14303] loop3: detected capacity change from 0 to 512 [ 321.900713][T14303] EXT4-fs (nvme0n1p2): changing journal_checksum during remount not supported; ignoring [ 321.904232][T14303] EXT4-fs (nvme0n1p2): re-mounted. Quota mode: journalled. [ 322.722290][ T6223] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.871154][T14308] loop2: detected capacity change from 0 to 512 [ 322.922197][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 322.938931][ T6223] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.309984][T14316] loop0: detected capacity change from 0 to 4096 [ 323.413181][T14325] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.479515][T14327] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 323.727289][ T5228] device hsr_slave_0 left promiscuous mode [ 323.885929][ T5228] device hsr_slave_1 left promiscuous mode [ 323.970571][ T5228] device hsr_slave_0 left promiscuous mode [ 324.012168][ T5228] device hsr_slave_1 left promiscuous mode [ 325.036355][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.038400][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.078901][ T5228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.081138][ T5228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.085952][ T5228] device bridge_slave_1 left promiscuous mode [ 325.087729][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.153130][ T5228] device bridge_slave_0 left promiscuous mode [ 325.154946][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.188658][T14348] tipc: Can't bind to reserved service type 0 [ 325.207699][ T5228] device dummy0 left promiscuous mode [ 325.302299][ T5228] device veth1_macvtap left promiscuous mode [ 325.303974][ T5228] device veth0_macvtap left promiscuous mode [ 325.305559][ T5228] device veth1_vlan left promiscuous mode [ 325.307061][ T5228] device veth0_vlan left promiscuous mode [ 325.371967][ T5228] device veth1_macvtap left promiscuous mode [ 325.373680][ T5228] device veth0_macvtap left promiscuous mode [ 325.375341][ T5228] device veth1_vlan left promiscuous mode [ 325.376876][ T5228] device veth0_vlan left promiscuous mode [ 325.428756][T14354] loop2: detected capacity change from 0 to 2048 [ 325.432644][T14354] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 325.440121][T14354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.579524][T14356] loop4: detected capacity change from 0 to 4096 [ 325.593662][T14356] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 325.769101][T14360] loop2: detected capacity change from 0 to 512 [ 325.842769][ T6223] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 326.555747][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 326.585770][ T5228] team0 (unregistering): Port device team_slave_0 removed [ 326.620762][ T5228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.669060][ T5228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.867788][ T5228] bond0 (unregistering): Released all slaves [ 326.911201][ T5228] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 326.914393][ T5228] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 326.966845][ T5228] bond1 (unregistering): Released all slaves [ 327.243803][ T5228] team0 (unregistering): Port device team_slave_1 removed [ 327.354534][ T5228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.408404][ T5228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.557579][ T5228] bond0 (unregistering): Released all slaves [ 327.683080][T14371] device dummy0 entered promiscuous mode [ 327.686454][T14371] batman_adv: batadv0: Adding interface: macsec1 [ 327.689051][T14371] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.696483][T14371] batman_adv: batadv0: Interface activated: macsec1 [ 327.703243][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.706399][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.708891][T14372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.716916][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.718931][T14372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.733389][T14372] batman_adv: batadv0: Interface deactivated: macsec1 [ 327.735252][T14372] batman_adv: batadv0: Removing interface: macsec1 [ 329.449072][T14392] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.468888][T14396] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 329.476074][T14396] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 329.493235][T14390] dccp_close: ABORT with 20 bytes unread [ 329.554231][T14396] bridge1: port 1(gretap1) entered blocking state [ 329.557410][T14396] bridge1: port 1(gretap1) entered disabled state [ 329.568039][T14396] device gretap1 entered promiscuous mode [ 329.604433][T14396] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 329.613221][T14396] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 329.667527][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.697934][T14393] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.180260][T14399] loop0: detected capacity change from 0 to 32768 [ 330.281828][T14399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (14399) [ 330.358028][T14399] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.360996][T14399] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 330.377146][T14399] BTRFS info (device loop0): using free space tree [ 330.395694][T14423] loop3: detected capacity change from 0 to 512 [ 332.311426][T14449] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 332.330907][T14399] BTRFS info (device loop0): enabling ssd optimizations [ 332.559066][ T9291] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 332.580657][T14455] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 332.585792][T14455] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 332.721527][T14458] bridge1: port 1(gretap1) entered blocking state [ 332.733978][T14458] bridge1: port 1(gretap1) entered disabled state [ 332.759063][T14458] device gretap1 entered promiscuous mode [ 332.772147][T14455] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 332.779505][T14455] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 332.972572][T14461] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 333.621805][T14486] loop0: detected capacity change from 0 to 4096 [ 333.680843][T14488] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.112335][T14496] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.338014][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 335.169784][T14543] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.146523][T14578] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 336.211177][T14580] loop2: detected capacity change from 0 to 2048 [ 336.218967][T14580] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 336.227312][T14580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.889934][T14609] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.987858][T14611] loop0: detected capacity change from 0 to 2048 [ 337.016953][T14611] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 337.041264][T14611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 339.168381][T13586] [ 339.169116][T13586] ====================================================== [ 339.171022][T13586] WARNING: possible circular locking dependency detected [ 339.172860][T13586] 6.1.92-syzkaller #0 Not tainted [ 339.174183][T13586] ------------------------------------------------------ [ 339.176030][T13586] syz-executor.4/13586 is trying to acquire lock: [ 339.177728][T13586] ffff0000d7edc3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x1a4/0x5cc [ 339.180765][T13586] [ 339.180765][T13586] but task is already holding lock: [ 339.182682][T13586] ffff0000f2853628 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xd8/0x508 [ 339.185249][T13586] [ 339.185249][T13586] which lock already depends on the new lock. [ 339.185249][T13586] [ 339.188045][T13586] [ 339.188045][T13586] the existing dependency chain (in reverse order) is: [ 339.190478][T13586] [ 339.190478][T13586] -> #1 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 339.192729][T13586] down_read+0x64/0x308 [ 339.193941][T13586] ext4_bmap+0x58/0x35c [ 339.195187][T13586] bmap+0xa8/0xe8 [ 339.196332][T13586] jbd2_journal_flush+0x4bc/0xa5c [ 339.197811][T13586] ext4_ioctl+0x3834/0x6afc [ 339.199162][T13586] __arm64_sys_ioctl+0x14c/0x1c8 [ 339.200552][T13586] invoke_syscall+0x98/0x2c0 [ 339.201958][T13586] el0_svc_common+0x138/0x258 [ 339.203312][T13586] do_el0_svc+0x64/0x218 [ 339.204581][T13586] el0_svc+0x58/0x168 [ 339.205838][T13586] el0t_64_sync_handler+0x84/0xf0 [ 339.207356][T13586] el0t_64_sync+0x18c/0x190 [ 339.208699][T13586] [ 339.208699][T13586] -> #0 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 339.211085][T13586] __lock_acquire+0x3338/0x7680 [ 339.212502][T13586] lock_acquire+0x26c/0x7cc [ 339.213833][T13586] __mutex_lock_common+0x190/0x21a0 [ 339.215412][T13586] mutex_lock_io_nested+0x6c/0x88 [ 339.216883][T13586] __jbd2_log_wait_for_space+0x1a4/0x5cc [ 339.218542][T13586] add_transaction_credits+0x7dc/0xafc [ 339.220151][T13586] start_this_handle+0x5c4/0x13ac [ 339.221554][T13586] jbd2__journal_start+0x298/0x544 [ 339.223101][T13586] __ext4_journal_start_sb+0x304/0x6f4 [ 339.224687][T13586] __ext4_unlink+0x360/0x988 [ 339.226175][T13586] ext4_unlink+0x1d8/0x7d0 [ 339.227548][T13586] vfs_unlink+0x2f0/0x508 [ 339.228886][T13586] do_unlinkat+0x4cc/0x70c [ 339.230313][T13586] __arm64_sys_unlinkat+0xcc/0xfc [ 339.231746][T13586] invoke_syscall+0x98/0x2c0 [ 339.233194][T13586] el0_svc_common+0x138/0x258 [ 339.234575][T13586] do_el0_svc+0x64/0x218 [ 339.235867][T13586] el0_svc+0x58/0x168 [ 339.237072][T13586] el0t_64_sync_handler+0x84/0xf0 [ 339.238676][T13586] el0t_64_sync+0x18c/0x190 [ 339.240057][T13586] [ 339.240057][T13586] other info that might help us debug this: [ 339.240057][T13586] [ 339.242944][T13586] Possible unsafe locking scenario: [ 339.242944][T13586] [ 339.244942][T13586] CPU0 CPU1 [ 339.246411][T13586] ---- ---- [ 339.247882][T13586] lock(&sb->s_type->i_mutex_key#9); [ 339.249364][T13586] lock(&journal->j_checkpoint_mutex); [ 339.251564][T13586] lock(&sb->s_type->i_mutex_key#9); [ 339.253713][T13586] lock(&journal->j_checkpoint_mutex); [ 339.255193][T13586] [ 339.255193][T13586] *** DEADLOCK *** [ 339.255193][T13586] [ 339.257420][T13586] 3 locks held by syz-executor.4/13586: [ 339.259021][T13586] #0: ffff0000d7ed6460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 339.261504][T13586] #1: ffff00011b1cac20 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x2d0/0x70c [ 339.264341][T13586] #2: ffff0000f2853628 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xd8/0x508 [ 339.267125][T13586] [ 339.267125][T13586] stack backtrace: [ 339.268696][T13586] CPU: 0 PID: 13586 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0 [ 339.271142][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 339.273932][T13586] Call trace: [ 339.274808][T13586] dump_backtrace+0x1c8/0x1f4 [ 339.276064][T13586] show_stack+0x2c/0x3c [ 339.277270][T13586] dump_stack_lvl+0x108/0x170 [ 339.278567][T13586] dump_stack+0x1c/0x5c [ 339.279788][T13586] print_circular_bug+0x150/0x1b8 [ 339.281196][T13586] check_noncircular+0x2cc/0x378 [ 339.282611][T13586] __lock_acquire+0x3338/0x7680 [ 339.283927][T13586] lock_acquire+0x26c/0x7cc [ 339.285163][T13586] __mutex_lock_common+0x190/0x21a0 [ 339.286608][T13586] mutex_lock_io_nested+0x6c/0x88 [ 339.287940][T13586] __jbd2_log_wait_for_space+0x1a4/0x5cc [ 339.289569][T13586] add_transaction_credits+0x7dc/0xafc [ 339.291067][T13586] start_this_handle+0x5c4/0x13ac [ 339.292488][T13586] jbd2__journal_start+0x298/0x544 [ 339.293860][T13586] __ext4_journal_start_sb+0x304/0x6f4 [ 339.295368][T13586] __ext4_unlink+0x360/0x988 [ 339.296609][T13586] ext4_unlink+0x1d8/0x7d0 [ 339.297852][T13586] vfs_unlink+0x2f0/0x508 [ 339.299058][T13586] do_unlinkat+0x4cc/0x70c [ 339.300243][T13586] __arm64_sys_unlinkat+0xcc/0xfc [ 339.301630][T13586] invoke_syscall+0x98/0x2c0 [ 339.302941][T13586] el0_svc_common+0x138/0x258 1970/01/01 00:05:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 339.304260][T13586] do_el0_svc+0x64/0x218 [ 339.305357][T13586] el0_svc+0x58/0x168 [ 339.306447][T13586] el0t_64_sync_handler+0x84/0xf0 [ 339.307841][T13586] el0t_64_sync+0x18c/0x190