last executing test programs: 39.366509703s ago: executing program 3: msgget$private(0x0, 0x8d) r0 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000000000009f1a88b62de055e31b6fe032b89b86da6a8a8f7933714a080000c067b468cf99abb7edff56dae46addd51600d73fa34ebf785e3579cf9d783b04b0036acc2ee09b3c379d72089bea9c9844dbb7cebd"], 0x9a, 0x0) msgrcv(r0, &(0x7f0000000100)={0x0, ""/17}, 0x19, 0x0, 0x1000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/185) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) msgrcv(0x0, &(0x7f0000000580)={0x0, ""/17}, 0x19, 0x3, 0x2000) msgget$private(0x0, 0xec65cd36ad6bc68d) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/36}, 0x2c, 0x1, 0x1000) msgget$private(0x0, 0x3c2) msgrcv(0x0, &(0x7f0000000280)={0x0, ""/24}, 0x7a, 0x0, 0x0) msgget(0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) 39.285759555s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000001bbc0)={0x0, 0x0, &(0x7f000001bb80)={&(0x7f0000000100)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_xt={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x2a, 0x6, {0x26, 'raw\x00'}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 39.175131003s ago: executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00') 38.982662032s ago: executing program 3: r0 = fsopen(&(0x7f0000000500)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='\'!(\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='%)\x00', &(0x7f0000000080)='][{O', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0) 33.490327691s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/297], 0x1, 0x5519, &(0x7f0000005d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) fallocate(r0, 0x0, 0x0, 0x5) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8) 32.58949754s ago: executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 32.091321827s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 32.040134515s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000079b"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 31.853717943s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 31.707904366s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES64], 0x43, 0x5542, &(0x7f0000007240)="$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") open(&(0x7f0000000080)='./file0\x00', 0x48062, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0x0, 0x0) 31.137235064s ago: executing program 4: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) ftruncate(r0, 0x10000) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) 30.735179696s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/297], 0x1, 0x5519, &(0x7f0000005d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) fallocate(r0, 0x0, 0x0, 0x5) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8) 30.022641236s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 29.948325108s ago: executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 29.899406395s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000104000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x48}}, 0x0) 8.979836463s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 7.718731289s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000400)='./file0/../file0\x00', 0x1818c00, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x8}}, {@map_acorn}, {@map_off}, {@session={'session', 0x3d, 0x11}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@overriderock}, {@nocompress}, {@block={'block', 0x3d, 0x200}}, {@unhide}, {@map_off}, {@overriderock}], [], 0x2c}, 0xff, 0x9d0, &(0x7f00000017c0)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) 0s ago: executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000001100)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) kernel console output (not intermixed with test programs): device team0 [ 102.933469][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.942942][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.958546][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.965699][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.996870][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.017410][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.025990][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.033147][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.048639][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.128997][ T4404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.183163][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.192185][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.204214][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.219688][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.227916][ T26] audit: type=1804 audit(1718550066.999:35): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir937970146/syzkaller.8watuh/48/bus/file0" dev="overlay" ino=1958 res=1 errno=0 [ 103.263725][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.272566][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.281311][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.304461][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.320986][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.407062][ T4404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.512787][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.547282][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.567988][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.595463][ T4404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.627436][ T4568] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 103.639713][ T4568] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.879822][ T4566] team0 (unregistering): Port device team_slave_0 removed [ 103.933987][ T4566] team0 (unregistering): Port device team_slave_1 removed [ 104.086948][ T3579] Bluetooth: hci1: command tx timeout [ 104.254662][ T4404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.559663][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.590338][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.631337][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.731699][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.754276][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.809875][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.820048][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.878135][ T4264] device veth0_vlan entered promiscuous mode [ 104.903001][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.926596][ T4604] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 104.959938][ T4604] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 104.968887][ T4604] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 104.977561][ T4604] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 104.986178][ T4604] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 105.056854][ T4604] device vxlan0 entered promiscuous mode [ 105.063999][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.088922][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.119852][ T4264] device veth1_vlan entered promiscuous mode [ 105.129495][ T4404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.151225][ T4404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.203054][ T4404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.219370][ T4264] device veth0_macvtap entered promiscuous mode [ 105.227883][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.238419][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.256733][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.265920][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.275534][ T4404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.293077][ T4264] device veth1_macvtap entered promiscuous mode [ 105.326898][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.344199][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.388503][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.403410][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.411253][ T4608] loop2: detected capacity change from 0 to 32768 [ 105.415052][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.432367][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.442601][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.455626][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.473679][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.493471][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.527626][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.580095][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.595867][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.637696][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.686820][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.696812][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.707799][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.746542][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.758462][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.806883][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.837448][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.054535][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.244986][ T3579] Bluetooth: hci1: command tx timeout [ 106.342312][ T3897] device hsr_slave_0 left promiscuous mode [ 106.353723][ T3897] device hsr_slave_1 left promiscuous mode [ 106.364735][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.375957][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.395170][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.404193][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.429943][ T3897] device bridge_slave_1 left promiscuous mode [ 106.436331][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.472525][ T3897] device bridge_slave_0 left promiscuous mode [ 106.506739][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.523138][ T3897] device veth1_macvtap left promiscuous mode [ 106.529379][ T3897] device veth0_macvtap left promiscuous mode [ 106.535677][ T3897] device veth1_vlan left promiscuous mode [ 106.541661][ T3897] device veth0_vlan left promiscuous mode [ 106.644690][ T4620] loop3: detected capacity change from 0 to 32768 [ 106.668982][ T4620] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4620) [ 106.727407][ T4620] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 106.746960][ T4620] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 106.772333][ T4620] BTRFS info (device loop3): force zlib compression, level 3 [ 106.794701][ T4620] BTRFS info (device loop3): enabling auto defrag [ 106.814586][ T4620] BTRFS info (device loop3): enabling disk space caching [ 106.825456][ T4620] BTRFS info (device loop3): max_inline at 0 [ 106.842848][ T4620] BTRFS info (device loop3): force clearing of disk cache [ 106.850367][ T4620] BTRFS info (device loop3): turning on sync discard [ 106.860905][ T4620] BTRFS info (device loop3): disk space caching is enabled [ 106.975088][ T3897] team0 (unregistering): Port device team_slave_1 removed [ 107.026576][ T4620] BTRFS info (device loop3): enabling ssd optimizations [ 107.042245][ T3897] team0 (unregistering): Port device team_slave_0 removed [ 107.072452][ T4620] BTRFS info (device loop3): rebuilding free space tree [ 107.073241][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.095385][ T3897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.109352][ T4620] BTRFS info (device loop3): disabling free space tree [ 107.116241][ T4620] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.134031][ T3897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.136524][ T4620] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 107.248379][ T3897] bond0 (unregistering): Released all slaves [ 107.320019][ T3574] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.335759][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.347495][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.364777][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.403672][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.426502][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.446648][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.550712][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 107.550726][ T26] audit: type=1804 audit(1718550071.329:64): pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir937970146/syzkaller.8watuh/56/bus/file0" dev="overlay" ino=1943 res=1 errno=0 [ 107.765217][ T4404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.777681][ T26] audit: type=1326 audit(1718550071.559:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afe87cea9 code=0x7ffc0000 [ 107.838937][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.860768][ T26] audit: type=1326 audit(1718550071.579:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afe87cea9 code=0x7ffc0000 [ 107.883725][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.187202][ T26] audit: type=1326 audit(1718550071.599:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7afe87cea9 code=0x7ffc0000 [ 108.219402][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.235587][ T26] audit: type=1326 audit(1718550071.599:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afe87cea9 code=0x7ffc0000 [ 108.259132][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.262396][ T26] audit: type=1326 audit(1718550071.599:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afe87cea9 code=0x7ffc0000 [ 108.291335][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.291379][ T26] audit: type=1326 audit(1718550071.599:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7afe87cea9 code=0x7ffc0000 [ 108.310196][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.343143][ T26] audit: type=1326 audit(1718550071.599:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afe87cea9 code=0x7ffc0000 [ 108.369625][ T3802] udevd[3802]: failed to send result of seq 11217 to main daemon: Connection refused [ 108.374013][ T26] audit: type=1326 audit(1718550071.599:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7afe87a627 code=0x7ffc0000 [ 108.390219][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.407960][ T26] audit: type=1326 audit(1718550071.599:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4670 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7afe840309 code=0x7ffc0000 [ 108.424860][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.452080][ T4682] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 108.464901][ T4682] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.521460][ T4404] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.584212][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.615588][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.640307][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.647458][ T4661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.737534][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.754241][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.766083][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.774068][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.799549][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.806681][ T3633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.854965][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.873889][ T4690] loop1: detected capacity change from 0 to 8192 [ 108.886291][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.902201][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.933250][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.957101][ T4695] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.969515][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.979260][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.988086][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.006827][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.020703][ T4404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.045210][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.056882][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.065590][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.075263][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.301691][ T4684] loop3: detected capacity change from 0 to 32768 [ 109.349126][ T4684] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4684) [ 109.566593][ T4658] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.593662][ T4684] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.715080][ T4404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.827724][ T4684] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 109.875130][ T4684] BTRFS info (device loop3): force zlib compression, level 3 [ 109.998688][ T4684] BTRFS info (device loop3): enabling auto defrag [ 110.110783][ T4684] BTRFS info (device loop3): enabling disk space caching [ 110.267285][ T4684] BTRFS info (device loop3): max_inline at 0 [ 110.296531][ T4684] BTRFS info (device loop3): force clearing of disk cache [ 110.303698][ T4684] BTRFS info (device loop3): turning on sync discard [ 110.312027][ T4404] device veth0_vlan entered promiscuous mode [ 110.372368][ T4697] loop4: detected capacity change from 0 to 32768 [ 110.373135][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.393107][ T4684] BTRFS info (device loop3): disk space caching is enabled [ 110.400647][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.416905][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.432109][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.441183][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.450181][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.465506][ T4404] device veth1_vlan entered promiscuous mode [ 110.475786][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.484504][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.493178][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.548633][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.557970][ T3633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.678960][ T4404] device veth0_macvtap entered promiscuous mode [ 110.690772][ T4404] device veth1_macvtap entered promiscuous mode [ 110.706905][ T4658] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 110.708052][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.725540][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.726046][ T4658] usb 3-1: config 0 has no interface number 0 [ 110.736141][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.752390][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.763214][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.776164][ T4658] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.789747][ T4684] BTRFS info (device loop3): enabling ssd optimizations [ 110.797130][ T4658] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.797783][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.807421][ T4658] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 110.829263][ T4684] BTRFS info (device loop3): rebuilding free space tree [ 110.846514][ T4658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.856125][ T4658] usb 3-1: config 0 descriptor?? [ 110.909254][ T4684] BTRFS info (device loop3): disabling free space tree [ 110.933916][ T4684] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.947992][ T4684] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.950147][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.994246][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.037401][ T4404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.046726][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.062958][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.081370][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.102081][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.134133][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.167263][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.202082][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.223191][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.253894][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.277533][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.306548][ T4404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.326689][ T4404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.349922][ T4658] magicmouse 0003:05AC:0269.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input4 [ 111.357675][ T4404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.368176][ T3574] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.396619][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.414159][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.437015][ T4404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.485291][ T4404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.515022][ T4404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.535243][ T4404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.568880][ T4740] usb 3-1: USB disconnect, device number 2 [ 111.731613][ T3703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.756508][ T3703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.798295][ T4737] loop1: detected capacity change from 0 to 32768 [ 111.818315][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.832573][ T4737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4737) [ 111.873766][ T3896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.885463][ T3896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.908658][ T4737] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.926293][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.941185][ T4737] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 111.961962][ T4737] BTRFS info (device loop1): using free space tree [ 112.138317][ T4764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.185244][ T4764] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 112.246003][ T4764] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 112.255040][ T4764] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 112.263717][ T4764] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 112.272372][ T4764] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 112.297975][ T4764] device vxlan0 entered promiscuous mode [ 112.304048][ T4737] BTRFS info (device loop1): enabling ssd optimizations [ 112.542564][ T4264] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.178507][ T4795] loop0: detected capacity change from 0 to 256 [ 113.213646][ T4795] FAT-fs (loop0): Directory bread(block 64) failed [ 113.231120][ T4795] FAT-fs (loop0): Directory bread(block 65) failed [ 113.251394][ T4795] FAT-fs (loop0): Directory bread(block 66) failed [ 113.263635][ T4795] FAT-fs (loop0): Directory bread(block 67) failed [ 113.273042][ T4782] loop2: detected capacity change from 0 to 32768 [ 113.285263][ T4795] FAT-fs (loop0): Directory bread(block 68) failed [ 113.293998][ T4795] FAT-fs (loop0): Directory bread(block 69) failed [ 113.305600][ T4795] FAT-fs (loop0): Directory bread(block 70) failed [ 113.314242][ T4795] FAT-fs (loop0): Directory bread(block 71) failed [ 113.325690][ T4795] FAT-fs (loop0): Directory bread(block 72) failed [ 113.332606][ T4795] FAT-fs (loop0): Directory bread(block 73) failed [ 113.355905][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 113.355919][ T26] audit: type=1800 audit(1718550077.129:122): pid=4803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1967 res=0 errno=0 [ 113.563217][ T4525] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.576728][ T4795] FAT-fs (loop0): Filesystem has been set read-only [ 113.595684][ T26] audit: type=1800 audit(1718550077.369:123): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="cpu.stat" dev="loop0" ino=1048635 res=0 errno=0 [ 113.979190][ T4806] tipc: Failed to remove unknown binding: 66,1,1/0:1118129238/1118129240 [ 113.988639][ T4806] tipc: Failed to remove unknown binding: 66,1,1/0:1118129238/1118129240 [ 114.356023][ T4795] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006c61) [ 114.392192][ T4525] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 114.416482][ T4525] usb 5-1: config 0 has no interface number 0 [ 114.432977][ T4525] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.472384][ T4525] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.493341][ T4525] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 114.512783][ T4525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.539476][ T4525] usb 5-1: config 0 descriptor?? [ 114.905626][ T4810] loop3: detected capacity change from 0 to 32768 [ 115.142472][ T4525] magicmouse 0003:05AC:0269.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input4 [ 115.183061][ T4812] loop1: detected capacity change from 0 to 32768 [ 115.192568][ T4812] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4812) [ 115.228023][ T4812] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.253329][ T26] audit: type=1800 audit(1718550079.029:124): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 115.281766][ T4812] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 115.316524][ T4812] BTRFS info (device loop1): using free space tree [ 115.324962][ T26] audit: type=1804 audit(1718550079.029:125): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2962324217/syzkaller.TVIzeI/90/bus" dev="sda1" ino=1968 res=1 errno=0 [ 115.352239][ T4660] usb 5-1: USB disconnect, device number 4 [ 115.404992][ T4837] loop2: detected capacity change from 0 to 16 [ 115.469039][ T4837] erofs: (device loop2): mounted with root inode @ nid 36. [ 115.490613][ T4812] BTRFS info (device loop1): enabling ssd optimizations [ 115.674239][ T4264] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.917990][ T26] audit: type=1326 audit(1718550079.699:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7afe87cea9 code=0x0 [ 116.065941][ T26] audit: type=1800 audit(1718550079.839:127): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1965 res=0 errno=0 [ 116.410947][ T4866] tipc: Failed to remove unknown binding: 66,1,1/0:2171452751/2171452753 [ 116.424999][ T4866] tipc: Failed to remove unknown binding: 66,1,1/0:2171452751/2171452753 [ 117.362054][ T4861] loop4: detected capacity change from 0 to 32768 [ 117.936867][ T3614] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.206212][ T26] audit: type=1800 audit(1718550081.779:128): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1965 res=0 errno=0 [ 118.523474][ T4904] tipc: Failed to remove unknown binding: 66,1,1/0:1459796467/1459796469 [ 118.532878][ T4904] tipc: Failed to remove unknown binding: 66,1,1/0:1459796467/1459796469 [ 118.541558][ T3614] usb 2-1: Using ep0 maxpacket: 32 [ 118.676703][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.701178][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.721286][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 118.752586][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.772557][ T3614] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 118.816489][ T3614] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 118.825613][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.866900][ T3614] usb 2-1: config 0 descriptor?? [ 118.909079][ T4893] loop2: detected capacity change from 0 to 32768 [ 119.369678][ T3614] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 119.501965][ T4925] device wireguard0 entered promiscuous mode [ 120.155162][ T4948] loop0: detected capacity change from 0 to 16 [ 120.182439][ T4948] erofs: (device loop0): mounted with root inode @ nid 36. [ 120.253868][ T26] audit: type=1800 audit(1718550084.029:129): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 120.305396][ T26] audit: type=1804 audit(1718550084.059:130): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir937970146/syzkaller.8watuh/75/bus" dev="sda1" ino=1968 res=1 errno=0 [ 120.393718][ T26] audit: type=1326 audit(1718550084.119:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d8d07cea9 code=0x0 [ 120.523374][ T26] audit: type=1800 audit(1718550084.299:132): pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1966 res=0 errno=0 [ 120.626194][ T4946] loop3: detected capacity change from 0 to 32768 [ 120.666169][ T4946] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4946) [ 120.737346][ T4946] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.754415][ T4946] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 120.763234][ T4946] BTRFS info (device loop3): using free space tree [ 120.766650][ T4740] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 120.867513][ T4971] tipc: Failed to remove unknown binding: 66,1,1/0:1827869126/1827869128 [ 120.882471][ T4971] tipc: Failed to remove unknown binding: 66,1,1/0:1827869126/1827869128 [ 121.544952][ T4960] device wireguard0 entered promiscuous mode [ 121.596070][ T4946] BTRFS info (device loop3): enabling ssd optimizations [ 121.748886][ T3574] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.961397][ T4997] loop1: detected capacity change from 0 to 256 [ 121.970263][ T4997] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.320893][ T2964] usb 2-1: USB disconnect, device number 2 [ 122.448179][ T5010] loop3: detected capacity change from 0 to 16 [ 122.496668][ T5010] erofs: (device loop3): mounted with root inode @ nid 36. [ 122.545231][ T5002] loop1: detected capacity change from 0 to 32768 [ 122.559674][ T5002] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5002) [ 122.603841][ T5002] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.633723][ T5002] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 122.635155][ T4995] loop0: detected capacity change from 0 to 32768 [ 122.648682][ T5002] BTRFS info (device loop1): force zlib compression, level 3 [ 122.653350][ T4995] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4995) [ 122.661969][ T5002] BTRFS info (device loop1): enabling auto defrag [ 122.676041][ T5002] BTRFS info (device loop1): enabling disk space caching [ 122.676878][ T4995] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.683304][ T5002] BTRFS info (device loop1): max_inline at 0 [ 122.699878][ T4995] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 122.711033][ T4995] BTRFS info (device loop0): using free space tree [ 122.719751][ T5002] BTRFS info (device loop1): force clearing of disk cache [ 122.728861][ T5002] BTRFS info (device loop1): turning on sync discard [ 122.735665][ T5002] BTRFS info (device loop1): disk space caching is enabled [ 122.775209][ T26] audit: type=1326 audit(1718550086.549:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09ab67cea9 code=0x0 [ 122.886694][ T4995] BTRFS info (device loop0): enabling ssd optimizations [ 122.956829][ T5002] BTRFS info (device loop1): enabling ssd optimizations [ 122.987765][ T5002] BTRFS info (device loop1): rebuilding free space tree [ 123.027211][ T5002] BTRFS info (device loop1): disabling free space tree [ 123.034160][ T5002] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.072927][ T5002] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.100997][ T4404] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.112096][ T3579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.121874][ T3579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.131864][ T3579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.142757][ T3579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.150620][ T3579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.164137][ T3579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.302441][ T4264] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.324220][ T3897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 123.343523][ T3897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.521725][ T3897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 123.532361][ T3897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.561730][ T5052] device wireguard0 entered promiscuous mode [ 123.603918][ T3897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 123.650118][ T3897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.785555][ T3897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 123.804636][ T3897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.827660][ T5067] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.933803][ T5048] chnl_net:caif_netlink_parms(): no params data found [ 123.997505][ T3614] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.073341][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.087366][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.105139][ T5048] device bridge_slave_0 entered promiscuous mode [ 124.129178][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.146198][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.161360][ T5048] device bridge_slave_1 entered promiscuous mode [ 124.231523][ T5048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.257667][ T3614] usb 2-1: Using ep0 maxpacket: 32 [ 124.265534][ T5048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.334560][ T5048] team0: Port device team_slave_0 added [ 124.342907][ T5048] team0: Port device team_slave_1 added [ 124.376087][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.381360][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.399373][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.412883][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.447451][ T5048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.464330][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 124.475903][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.482496][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.483736][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.493373][ T3614] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 124.534334][ T5048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.541994][ T3614] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 124.548459][ T5100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.581373][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.610939][ T3614] usb 2-1: config 0 descriptor?? [ 124.637109][ T5048] device hsr_slave_0 entered promiscuous mode [ 124.644054][ T5048] device hsr_slave_1 entered promiscuous mode [ 124.704590][ T5107] loop0: detected capacity change from 0 to 1024 [ 124.824769][ T3896] hfsplus: b-tree write err: -5, ino 4 [ 124.897879][ T26] audit: type=1800 audit(1718550088.679:134): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 125.099845][ T5121] loop2: detected capacity change from 0 to 256 [ 125.108415][ T3614] ntrig 0003:1B96:000A.0004: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 125.122715][ T5121] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.223059][ T5124] tipc: Failed to remove unknown binding: 66,1,1/0:2230263924/2230263926 [ 125.237006][ T5124] tipc: Failed to remove unknown binding: 66,1,1/0:2230263924/2230263926 [ 125.269888][ T3567] Bluetooth: hci0: command tx timeout [ 125.884287][ T3897] device hsr_slave_0 left promiscuous mode [ 125.902619][ T3897] device hsr_slave_1 left promiscuous mode [ 125.952869][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.970470][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.980274][ T3897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.987970][ T3897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.998249][ T3897] device bridge_slave_1 left promiscuous mode [ 126.004551][ T3897] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.019522][ T3897] device bridge_slave_0 left promiscuous mode [ 126.027715][ T3897] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.043829][ T3897] device veth1_macvtap left promiscuous mode [ 126.051615][ T3897] device veth0_macvtap left promiscuous mode [ 126.068212][ T3897] device veth1_vlan left promiscuous mode [ 126.082071][ T3897] device veth0_vlan left promiscuous mode [ 126.137597][ T5140] loop0: detected capacity change from 0 to 1024 [ 126.205411][ T3896] hfsplus: b-tree write err: -5, ino 4 [ 126.384471][ T3897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.404069][ T3897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.473692][ T3897] bond0 (unregistering): Released all slaves [ 126.550862][ T5136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.652837][ T5151] loop0: detected capacity change from 0 to 32768 [ 126.682535][ T5151] XFS (loop0): Mounting V5 Filesystem [ 126.695911][ T5158] loop2: detected capacity change from 0 to 256 [ 126.740840][ T5158] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.775769][ T5151] XFS (loop0): Ending clean mount [ 126.824148][ T4404] XFS (loop0): Unmounting Filesystem [ 126.869128][ T26] audit: type=1800 audit(1718550090.649:135): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1953 res=0 errno=0 [ 126.923090][ T5048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.991585][ T5048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.027591][ T5048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.086052][ T5048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.179021][ T5167] tipc: Failed to remove unknown binding: 66,1,1/0:123263388/123263390 [ 127.192226][ T5167] tipc: Failed to remove unknown binding: 66,1,1/0:123263388/123263390 [ 127.251537][ T3614] usb 2-1: USB disconnect, device number 3 [ 127.286804][ T3579] Bluetooth: hci0: command tx timeout [ 127.972922][ T5048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.019170][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.032787][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.059359][ T5048] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.102517][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.121956][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.141728][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.148881][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.219164][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.237482][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.271257][ T5179] loop2: detected capacity change from 0 to 1024 [ 128.273436][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.335070][ T4525] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.342347][ T4525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.366780][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.406847][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.426261][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.428524][ T3896] hfsplus: b-tree write err: -5, ino 4 [ 128.457189][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 128.476757][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.499033][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 128.535010][ T5048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.575847][ T5048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.592247][ T5169] loop1: detected capacity change from 0 to 32768 [ 128.599728][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 128.611039][ T5169] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5169) [ 128.611067][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.678478][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.700583][ T5173] loop0: detected capacity change from 0 to 32768 [ 128.713441][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.723356][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.738187][ T5173] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5173) [ 128.761529][ T5169] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.762399][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.786170][ T5169] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 128.796025][ T5173] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 128.814128][ T5169] BTRFS info (device loop1): using free space tree [ 128.832838][ T5173] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 128.852497][ T5173] BTRFS info (device loop0): force clearing of disk cache [ 128.873605][ T5173] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 128.904247][ T5173] BTRFS info (device loop0): use zstd compression, level 3 [ 128.926500][ T5173] BTRFS info (device loop0): using free space tree [ 129.003570][ T5169] BTRFS info (device loop1): enabling ssd optimizations [ 129.149555][ T4264] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.166657][ T5173] BTRFS info (device loop0): enabling ssd optimizations [ 129.178365][ T5173] BTRFS info (device loop0): rebuilding free space tree [ 129.268200][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.275700][ T5050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.339992][ T5222] loop3: detected capacity change from 0 to 256 [ 129.362080][ T5048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.366748][ T3579] Bluetooth: hci0: command tx timeout [ 129.381989][ T5222] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.471374][ T4404] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 129.810904][ T26] audit: type=1800 audit(1718550093.589:136): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1956 res=0 errno=0 [ 130.158775][ T5250] tipc: Failed to remove unknown binding: 66,1,1/0:638424961/638424963 [ 130.171721][ T5250] tipc: Failed to remove unknown binding: 66,1,1/0:638424961/638424963 [ 131.024396][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.033947][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.072437][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.085664][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.129185][ T5257] loop2: detected capacity change from 0 to 1024 [ 131.129396][ T5048] device veth0_vlan entered promiscuous mode [ 131.144648][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.153511][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.190627][ T5048] device veth1_vlan entered promiscuous mode [ 131.247050][ T56] hfsplus: b-tree write err: -5, ino 4 [ 131.258419][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 131.287234][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 131.296349][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.324349][ T5226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.339506][ T5249] loop0: detected capacity change from 0 to 32768 [ 131.349682][ T5048] device veth0_macvtap entered promiscuous mode [ 131.374698][ T5048] device veth1_macvtap entered promiscuous mode [ 131.433652][ T5249] XFS (loop0): Mounting V5 Filesystem [ 131.443844][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.454708][ T3579] Bluetooth: hci0: command tx timeout [ 131.490895][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.522462][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.549973][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.560319][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.562746][ T5255] loop3: detected capacity change from 0 to 32768 [ 131.578598][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.593464][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.599349][ T5255] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5255) [ 131.604796][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.628593][ T5249] XFS (loop0): Ending clean mount [ 131.645099][ T5255] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.648488][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.675856][ T5255] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 131.685600][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.706485][ T5255] BTRFS info (device loop3): using free space tree [ 131.709060][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.725357][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.736929][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.747174][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.758298][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.769175][ T5048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.781400][ T5048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.793437][ T4404] XFS (loop0): Unmounting Filesystem [ 131.794741][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.811882][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.822290][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.832122][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.842069][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.852643][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.862042][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.878473][ T5048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.888635][ T5048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.899790][ T5048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.908934][ T5048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.004651][ T5273] loop2: detected capacity change from 0 to 32768 [ 132.018706][ T5273] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5273) [ 132.038196][ T5273] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 132.038433][ T5255] BTRFS info (device loop3): enabling ssd optimizations [ 132.056709][ T5273] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 132.065427][ T5273] BTRFS info (device loop2): force clearing of disk cache [ 132.073469][ T3892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.090348][ T3707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.090854][ T5273] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 132.102061][ T3892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.109010][ T5273] BTRFS info (device loop2): use zstd compression, level 3 [ 132.123843][ T3707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.124248][ T5273] BTRFS info (device loop2): using free space tree [ 132.155673][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.170876][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.200136][ T3574] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.471648][ T5273] BTRFS info (device loop2): enabling ssd optimizations [ 132.482561][ T5273] BTRFS info (device loop2): rebuilding free space tree [ 132.660067][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.669345][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.314764][ T3573] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 133.753097][ T5327] loop2: detected capacity change from 0 to 1024 [ 133.769537][ T5327] EXT4-fs: Ignoring removed orlov option [ 133.782166][ T5327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.834366][ T5327] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.051880][ T3573] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 16: comm syz-executor.2: bad entry in directory: directory entry overrun - offset=0, inode=32, rec_len=59832, size=1024 fake=0 [ 134.161166][ T3573] EXT4-fs (loop2): unmounting filesystem. [ 134.471124][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 134.522260][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.642783][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 134.691161][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.804265][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 134.835202][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.924845][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 134.965808][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.061928][ T5343] loop1: detected capacity change from 0 to 32768 [ 135.107933][ T5343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5343) [ 135.139464][ T5343] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.169966][ T5343] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 135.200267][ T5343] BTRFS info (device loop1): using free space tree [ 135.334779][ T3567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.345236][ T3567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.354947][ T3567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.364271][ T3567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.372483][ T3567] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.382961][ T3567] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.411312][ T5343] BTRFS info (device loop1): enabling ssd optimizations [ 135.435984][ T5379] loop4: detected capacity change from 0 to 2048 [ 135.444345][ T5379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.456164][ T5379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.494583][ T5379] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.522637][ T5379] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #12: block 9: comm syz-executor.4: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 135.562851][ T5379] EXT4-fs (loop4): Remounting filesystem read-only [ 135.594752][ T4264] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.703696][ T5048] EXT4-fs (loop4): unmounting filesystem. [ 136.545781][ T5360] chnl_net:caif_netlink_parms(): no params data found [ 136.834933][ T5402] loop1: detected capacity change from 0 to 512 [ 136.897568][ T5402] EXT4-fs: Ignoring removed orlov option [ 136.920691][ T5402] ext4: Unknown parameter 'appraise' [ 136.930181][ T5404] loop0: detected capacity change from 0 to 512 [ 136.979511][ T5404] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 15 [ 137.003517][ T5404] ext4_test_bit(bit=14, block=4) = 1 [ 137.012615][ T5404] is_bad_inode(inode)=0 [ 137.024804][ T5387] loop3: detected capacity change from 0 to 32768 [ 137.029420][ T5404] NEXT_ORPHAN(inode)=0 [ 137.036872][ T5404] max_ino=32 [ 137.040084][ T5404] i_nlink=1 [ 137.047307][ T5404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 137.057412][ T5414] loop4: detected capacity change from 0 to 256 [ 137.066249][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.080121][ T5387] XFS (loop3): Mounting V5 Filesystem [ 137.086375][ T5360] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.094576][ T5360] device bridge_slave_0 entered promiscuous mode [ 137.111429][ T56] device hsr_slave_0 left promiscuous mode [ 137.118739][ T56] device hsr_slave_1 left promiscuous mode [ 137.127614][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.135272][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.144391][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.151936][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.161635][ T56] device bridge_slave_1 left promiscuous mode [ 137.168001][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.178071][ T56] device bridge_slave_0 left promiscuous mode [ 137.185315][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.199711][ T5387] XFS (loop3): Ending clean mount [ 137.205992][ T56] device veth1_macvtap left promiscuous mode [ 137.213007][ T56] device veth0_macvtap left promiscuous mode [ 137.219292][ T56] device veth1_vlan left promiscuous mode [ 137.225313][ T56] device veth0_vlan left promiscuous mode [ 137.259761][ T4404] EXT4-fs (loop0): unmounting filesystem. [ 137.314486][ T3574] XFS (loop3): Unmounting Filesystem [ 137.331344][ T5422] loop4: detected capacity change from 0 to 128 [ 137.368287][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 137.429509][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 137.446867][ T3567] Bluetooth: hci3: command tx timeout [ 137.463788][ T5422] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 137.484085][ T5422] UDF-fs: Scanning with blocksize 512 failed [ 137.505067][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 137.536342][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 137.577960][ T5422] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 137.620110][ T5422] UDF-fs: Scanning with blocksize 1024 failed [ 137.644830][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 137.670749][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 137.677768][ T5432] loop0: detected capacity change from 0 to 2048 [ 137.694345][ T5422] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 137.705932][ T5432] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.722085][ T5422] UDF-fs: Scanning with blocksize 2048 failed [ 137.728070][ T5432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.749301][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 137.760862][ T5432] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.793564][ T5422] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 137.799557][ T5432] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #12: block 9: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 137.826242][ T5422] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 137.834003][ T5422] UDF-fs: Scanning with blocksize 4096 failed [ 137.841373][ T56] team0 (unregistering): Port device team_slave_1 removed [ 137.857057][ T5432] EXT4-fs (loop0): Remounting filesystem read-only [ 137.859481][ T5422] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 137.876243][ T56] team0 (unregistering): Port device team_slave_0 removed [ 137.899749][ T4404] EXT4-fs (loop0): unmounting filesystem. [ 137.905828][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.930973][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.033819][ T56] bond0 (unregistering): Released all slaves [ 138.106022][ T5360] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.118352][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.132983][ T5360] device bridge_slave_1 entered promiscuous mode [ 138.215199][ T5360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.264566][ T5360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.359155][ T5360] team0: Port device team_slave_0 added [ 138.426502][ T5360] team0: Port device team_slave_1 added [ 139.058781][ T5360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.065766][ T5360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.104897][ T5449] loop3: detected capacity change from 0 to 512 [ 139.135108][ T5360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.154797][ T5360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.162011][ T5360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.162909][ T5449] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 15 [ 139.188936][ T5360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.223082][ T5455] loop0: detected capacity change from 0 to 256 [ 139.271500][ T5449] ext4_test_bit(bit=14, block=4) = 1 [ 139.296544][ T5449] is_bad_inode(inode)=0 [ 139.311022][ T5449] NEXT_ORPHAN(inode)=0 [ 139.320403][ T5449] max_ino=32 [ 139.327067][ T5449] i_nlink=1 [ 139.330534][ T5455] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 139.346891][ T5449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.364120][ T5360] device hsr_slave_0 entered promiscuous mode [ 139.401784][ T5360] device hsr_slave_1 entered promiscuous mode [ 139.412367][ T5360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.427756][ T3574] EXT4-fs (loop3): unmounting filesystem. [ 139.428695][ T5360] Cannot create hsr debugfs directory [ 139.439661][ T5463] loop1: detected capacity change from 0 to 2048 [ 139.491418][ T5463] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.520517][ T5463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.531429][ T3567] Bluetooth: hci3: command tx timeout [ 139.554500][ T5463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.634331][ T5474] loop4: detected capacity change from 0 to 512 [ 139.645468][ T5463] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #12: block 9: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 139.668574][ T5474] EXT4-fs: Ignoring removed orlov option [ 139.688561][ T5474] ext4: Unknown parameter 'appraise' [ 139.726501][ T5463] EXT4-fs (loop1): Remounting filesystem read-only [ 139.990604][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 141.140653][ T5499] loop4: detected capacity change from 0 to 1024 [ 141.306966][ T5360] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.333106][ T5360] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 141.363288][ T5360] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 141.387465][ T5360] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 141.486261][ T5516] loop0: detected capacity change from 0 to 512 [ 141.546614][ T5516] EXT4-fs: Ignoring removed orlov option [ 141.562033][ T5516] ext4: Unknown parameter 'appraise' [ 141.582363][ T5360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.609431][ T3567] Bluetooth: hci3: command tx timeout [ 141.620205][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.628774][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.642603][ T5360] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.654897][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.664785][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.673806][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.680960][ T5227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.702726][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.711074][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.728161][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.737440][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.744529][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.752774][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.802240][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.813166][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.819829][ T5524] loop4: detected capacity change from 0 to 512 [ 141.849378][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.869188][ T5524] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 15 [ 141.879853][ T26] audit: type=1326 audit(1718550105.649:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 141.887261][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.921357][ T5524] ext4_test_bit(bit=14, block=4) = 1 [ 141.928556][ T5524] is_bad_inode(inode)=0 [ 141.928600][ T5531] loop3: detected capacity change from 0 to 256 [ 141.940860][ T26] audit: type=1326 audit(1718550105.649:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 141.953081][ T5524] NEXT_ORPHAN(inode)=0 [ 141.977739][ T5524] max_ino=32 [ 141.980966][ T5524] i_nlink=1 [ 141.984145][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.995011][ T26] audit: type=1326 audit(1718550105.649:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 142.018757][ T26] audit: type=1326 audit(1718550105.649:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 142.043890][ T26] audit: type=1326 audit(1718550105.649:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 142.061873][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.075198][ T26] audit: type=1326 audit(1718550105.649:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 142.107073][ T26] audit: type=1326 audit(1718550105.649:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 142.110775][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.131356][ T26] audit: type=1326 audit(1718550105.649:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 142.181075][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.193863][ T26] audit: type=1326 audit(1718550105.649:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 142.200890][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.222766][ T26] audit: type=1326 audit(1718550105.649:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074b07cea9 code=0x7ffc0000 [ 142.232480][ T5533] loop3: detected capacity change from 0 to 128 [ 142.258219][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.272260][ T5533] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 142.274178][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.307481][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.318282][ T5048] EXT4-fs (loop4): unmounting filesystem. [ 142.411874][ T5533] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 142.447262][ T5533] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 142.463601][ T5533] UDF-fs: Scanning with blocksize 512 failed [ 142.501471][ T5537] loop4: detected capacity change from 0 to 1024 [ 142.602341][ T5545] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 142.626729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 142.686691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 142.689934][ T5533] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 142.730110][ T5533] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 142.747207][ T5533] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 142.754983][ T5533] UDF-fs: Scanning with blocksize 1024 failed [ 142.764292][ T5533] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 142.784783][ T5533] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 142.795161][ T5533] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 142.803185][ T5533] UDF-fs: Scanning with blocksize 2048 failed [ 142.932211][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.953621][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.980470][ T5556] loop0: detected capacity change from 0 to 64 [ 142.995199][ T5360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.020435][ T5533] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 143.073805][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.088062][ T5533] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 143.094459][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.145899][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.155087][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.166584][ T5533] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 143.180366][ T5533] UDF-fs: Scanning with blocksize 4096 failed [ 143.189988][ T5533] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 143.202185][ T5360] device veth0_vlan entered promiscuous mode [ 143.225211][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.236230][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.252069][ T5567] loop1: detected capacity change from 0 to 512 [ 143.260303][ T5360] device veth1_vlan entered promiscuous mode [ 143.299964][ T5565] loop4: detected capacity change from 0 to 2048 [ 143.307248][ T5567] EXT4-fs: Ignoring removed orlov option [ 143.313902][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.323480][ T5567] ext4: Unknown parameter 'appraise' [ 143.335875][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.344865][ T5565] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.356796][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.376657][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.406479][ T5360] device veth0_macvtap entered promiscuous mode [ 143.430357][ T5360] device veth1_macvtap entered promiscuous mode [ 143.464710][ T5571] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.471318][ T5565] NILFS (loop4): failed to count free inodes: err=-34 [ 143.519553][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.530786][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.541000][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.552144][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.563871][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.574455][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.599580][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.608560][ T5573] loop0: detected capacity change from 0 to 1024 [ 143.610607][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.638576][ T5360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.648840][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.663023][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.677385][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.688304][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.696456][ T3567] Bluetooth: hci3: command tx timeout [ 143.761372][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.781532][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.815752][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.831888][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.842813][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.856988][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.881492][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.917918][ T5360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.953421][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.967169][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.104611][ T5360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.127126][ T5360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.966148][ T5360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.988831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 145.011693][ T5360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.187883][ T3895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.212060][ T3895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.258622][ T3892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.261102][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.291535][ T3892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.346315][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.668337][ T5603] loop0: detected capacity change from 0 to 512 [ 145.672868][ T5602] loop1: detected capacity change from 0 to 2048 [ 145.696322][ T5575] loop4: detected capacity change from 0 to 32768 [ 145.696721][ T5603] EXT4-fs: Ignoring removed orlov option [ 145.710409][ T5602] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.742039][ T5603] ext4: Unknown parameter 'appraise' [ 145.757178][ T5607] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.790141][ T5575] XFS (loop4): Mounting V5 Filesystem [ 145.801907][ T5602] NILFS (loop1): failed to count free inodes: err=-34 [ 145.867241][ T5575] XFS (loop4): Ending clean mount [ 146.144094][ T5048] XFS (loop4): Unmounting Filesystem [ 147.175629][ T5629] loop3: detected capacity change from 0 to 4096 [ 147.203545][ T5629] __ntfs_error: 103 callbacks suppressed [ 147.203562][ T5629] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 147.242587][ T5629] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 147.246129][ T5633] loop0: detected capacity change from 0 to 64 [ 147.262052][ T5629] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 147.290530][ T5629] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 147.352759][ T5629] ntfs: volume version 3.1. [ 147.589039][ T5638] loop3: detected capacity change from 0 to 1024 [ 147.878074][ T5654] process 'syz-executor.4' launched '/' with NULL argv: empty string added [ 148.074391][ T5662] loop0: detected capacity change from 0 to 512 [ 148.118706][ T5664] sock: sock_set_timeout: `syz-executor.4' (pid 5664) tries to set negative timeout [ 148.151553][ T5662] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 148.232667][ T5662] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.0: casefold flag without casefold feature [ 148.306778][ T5662] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.0: ea_inode with extended attributes [ 148.346611][ T5662] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 12 err=-117 [ 148.396811][ T5662] EXT4-fs (loop0): 1 orphan inode deleted [ 148.402753][ T5662] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 148.569577][ T5676] loop3: detected capacity change from 0 to 2048 [ 148.594192][ T5676] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.644487][ T5682] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.672120][ T5676] NILFS (loop3): failed to count free inodes: err=-34 [ 148.775976][ T5686] syz-executor.2 (pid 5686) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 148.978142][ T5694] loop4: detected capacity change from 0 to 512 [ 149.027519][ T5694] EXT4-fs: Ignoring removed orlov option [ 149.042054][ T5694] ext4: Unknown parameter 'appraise' [ 149.085351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 149.172918][ T5703] loop1: detected capacity change from 0 to 256 [ 149.242597][ T5703] FAT-fs (loop1): Directory bread(block 64) failed [ 149.281540][ T5703] FAT-fs (loop1): Directory bread(block 65) failed [ 149.298594][ T5703] FAT-fs (loop1): Directory bread(block 66) failed [ 149.315473][ T5703] FAT-fs (loop1): Directory bread(block 67) failed [ 149.336360][ T5703] FAT-fs (loop1): Directory bread(block 68) failed [ 149.363493][ T5703] FAT-fs (loop1): Directory bread(block 69) failed [ 149.380549][ T5703] FAT-fs (loop1): Directory bread(block 70) failed [ 149.400748][ T5703] FAT-fs (loop1): Directory bread(block 71) failed [ 149.427171][ T5703] FAT-fs (loop1): Directory bread(block 72) failed [ 149.447181][ T5703] FAT-fs (loop1): Directory bread(block 73) failed [ 149.704550][ T5711] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 149.717975][ T5709] loop4: detected capacity change from 0 to 2048 [ 149.752415][ T5709] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 149.844712][ T5712] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.868266][ T5709] NILFS (loop4): failed to count free inodes: err=-34 [ 150.065902][ T4404] EXT4-fs (loop0): unmounting filesystem. [ 150.184257][ T5701] loop2: detected capacity change from 0 to 32768 [ 150.198147][ T5715] loop1: detected capacity change from 0 to 4096 [ 150.233144][ T5715] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 150.548843][ T5729] sock: sock_set_timeout: `syz-executor.1' (pid 5729) tries to set negative timeout [ 150.687681][ T5736] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 150.914250][ T5747] loop3: detected capacity change from 0 to 512 [ 150.945825][ T5747] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 150.976943][ T5744] loop1: detected capacity change from 0 to 4096 [ 150.989217][ T5747] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: casefold flag without casefold feature [ 151.003285][ T5744] ntfs3: Unknown parameter '0xffffffffffffffff' [ 151.009118][ T5747] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: ea_inode with extended attributes [ 151.053478][ T5747] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 151.125606][ T5747] EXT4-fs (loop3): 1 orphan inode deleted [ 151.144981][ T5747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.188487][ T5732] loop2: detected capacity change from 0 to 32768 [ 151.215771][ T5732] XFS (loop2): Mounting V5 Filesystem [ 151.255062][ T5760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.273014][ T5732] XFS (loop2): Ending clean mount [ 151.381708][ T5360] XFS (loop2): Unmounting Filesystem [ 152.166618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 152.306832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 152.412391][ T5771] loop2: detected capacity change from 0 to 4096 [ 152.425578][ T5771] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 152.439604][ T3574] EXT4-fs (loop3): unmounting filesystem. [ 152.751831][ T5789] loop1: detected capacity change from 0 to 4096 [ 152.850733][ T5787] loop2: detected capacity change from 0 to 4096 [ 152.880999][ T5787] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 152.909739][ T5789] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 152.929036][ T5787] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 152.938530][ T5787] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 152.951726][ T5787] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 152.965647][ T5789] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 153.123864][ T5787] ntfs: volume version 3.1. [ 153.791639][ T5783] loop4: detected capacity change from 0 to 32768 [ 153.869452][ T5783] XFS (loop4): Mounting V5 Filesystem [ 153.880774][ T4264] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 153.993095][ T5783] XFS (loop4): Ending clean mount [ 154.030182][ T5783] XFS (loop4): Quotacheck needed: Please wait. [ 154.035186][ T5813] loop1: detected capacity change from 0 to 2048 [ 154.096348][ T5783] XFS (loop4): Quotacheck: Done. [ 154.102083][ T5816] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.182723][ T5048] XFS (loop4): Unmounting Filesystem [ 154.527549][ T5830] loop2: detected capacity change from 0 to 4096 [ 154.648009][ T5830] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 154.909419][ T5830] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 155.302779][ T5834] netlink: 308 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.409632][ T5360] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 155.480852][ T5826] loop0: detected capacity change from 0 to 32768 [ 155.505114][ T5840] loop4: detected capacity change from 0 to 4096 [ 155.531264][ T5840] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 155.555167][ T5840] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 155.575649][ T5840] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 155.603454][ T5840] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 155.655690][ T5840] ntfs: volume version 3.1. [ 155.660397][ T5844] loop2: detected capacity change from 0 to 8192 [ 155.681237][ T5844] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.706446][ T5844] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 155.706564][ T5844] REISERFS (device loop2): using ordered data mode [ 155.706574][ T5844] reiserfs: using flush barriers [ 155.708229][ T5844] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.708647][ T5844] REISERFS (device loop2): checking transaction log (loop2) [ 155.711954][ T5844] REISERFS (device loop2): Using tea hash to sort names [ 155.712284][ T5844] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 156.147948][ T5856] loop0: detected capacity change from 0 to 32768 [ 156.158385][ T26] audit: type=1804 audit(1718550119.939:250): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1683845029/syzkaller.1zcJks/160/bus" dev="sda1" ino=1963 res=1 errno=0 [ 156.234427][ T5856] XFS (loop0): Mounting V5 Filesystem [ 156.373259][ T5856] XFS (loop0): Ending clean mount [ 156.399047][ T5856] XFS (loop0): Quotacheck needed: Please wait. [ 156.442487][ T5856] XFS (loop0): Quotacheck: Done. [ 156.529865][ T4404] XFS (loop0): Unmounting Filesystem [ 156.594217][ T5858] loop4: detected capacity change from 0 to 40427 [ 156.675142][ T5858] F2FS-fs (loop4): invalid crc value [ 156.744342][ T5858] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.761952][ T5887] loop3: detected capacity change from 0 to 4096 [ 156.793562][ T5887] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 156.841193][ T5858] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 156.851510][ T5887] ntfs: volume version 3.1. [ 156.887062][ T5858] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.935992][ T5880] loop2: detected capacity change from 0 to 32768 [ 157.074144][ T5885] f2fs_ckpt-7:4: attempt to access beyond end of device [ 157.074144][ T5885] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 157.552158][ T5927] Bluetooth: MGMT ver 1.22 [ 157.596637][ T5227] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 157.955075][ T5932] loop0: detected capacity change from 0 to 1024 [ 157.970707][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 157.970721][ T26] audit: type=1400 audit(1718550121.749:252): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=E1355F172F2F26 pid=5943 comm="syz-executor.2" [ 157.993785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 158.026857][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 158.049736][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 158.072465][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.090487][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 4 [ 158.096486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 158.102549][ T5227] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 158.119212][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.134554][ T5227] usb 4-1: config 0 descriptor?? [ 158.156801][ T5912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.406753][ T4528] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 158.419122][ T5227] usb 4-1: USB disconnect, device number 2 [ 158.697093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.705775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.832073][ T4528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.855863][ T4528] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.886213][ T4528] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.896684][ T4528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.906751][ T4528] usb 3-1: config 0 descriptor?? [ 159.037326][ T3707] hfsplus: b-tree write err: -5, ino 4 [ 159.214694][ T5965] device team_slave_0 entered promiscuous mode [ 159.221366][ T5965] device team_slave_1 entered promiscuous mode [ 159.254026][ T5965] device team_slave_0 left promiscuous mode [ 159.260036][ T5965] device team_slave_1 left promiscuous mode [ 159.271084][ T5963] loop4: detected capacity change from 0 to 2048 [ 159.346777][ T5963] loop4: p2 p3 p7 [ 159.392438][ C1] operation not supported error, dev loop4, sector 600 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 159.412616][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.420542][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.435824][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.443448][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.451535][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.476909][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.495719][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.523011][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.533756][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.543392][ T4528] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 159.574279][ T4528] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 159.605316][ T4528] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 159.616584][ T935] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.650652][ T5976] loop3: detected capacity change from 0 to 4096 [ 159.659804][ T5976] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 159.680998][ T5976] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 159.699967][ T4528] usb 3-1: USB disconnect, device number 3 [ 159.774887][ T3574] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 159.833649][ T5984] loop3: detected capacity change from 0 to 256 [ 159.856544][ T935] usb 2-1: Using ep0 maxpacket: 16 [ 160.058071][ T935] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 160.146631][ T935] usb 2-1: language id specifier not provided by device, defaulting to English [ 160.159450][ T5978] loop0: detected capacity change from 0 to 32768 [ 160.282986][ T935] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.40 [ 160.363552][ T935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.394428][ T5978] XFS (loop0): Mounting V5 Filesystem [ 160.422545][ T935] usb 2-1: Product: syz [ 160.439330][ T5993] loop2: detected capacity change from 0 to 256 [ 160.461758][ T935] usb 2-1: Manufacturer: ᩀ醪㣑Ꝓ䁴┥ꯀ⣂ሄ珇옵䡦끼ⵈ嚮哜璟ჯ䠟蝻裄湓묎豋듻퉝䪪㥬侊谅㷮ڄ華דॵᝲ岝捷䭮㥖信㍳䙵膕慓〔勑딕䩦᭩阄ⅎ龹龕껖ᄇ䆤ჼᶌḒ澼쑻០ᙶ룶Ⱔ벙⿇蚭ೂ䞍l妠⡆鯳ⅲ☈铗罰ᱻ駱蒟Ὡ퉩쀊⪶퍝Ɀዊ낇觢࿋谪끦◜髍᯼兰玛ᖲ甼骓湹 [ 160.516073][ T935] usb 2-1: SerialNumber: syz [ 160.569230][ T935] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 160.580982][ T5998] loop2: detected capacity change from 0 to 128 [ 160.596749][ T5998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 160.607682][ T5978] XFS (loop0): Ending clean mount [ 160.614915][ T5998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 160.624720][ T5998] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 160.633050][ T5978] XFS (loop0): Quotacheck needed: Please wait. [ 160.634869][ T5998] UDF-fs: Scanning with blocksize 512 failed [ 160.665157][ T5998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 160.677258][ T5978] XFS (loop0): Quotacheck: Done. [ 160.688344][ T5998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 160.707269][ T5998] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 160.720856][ T5998] UDF-fs: Scanning with blocksize 1024 failed [ 160.744144][ T5998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 160.771699][ T4404] XFS (loop0): Unmounting Filesystem [ 160.782390][ T5998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 160.800572][ T5998] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 160.809477][ T5998] UDF-fs: Scanning with blocksize 2048 failed [ 160.820949][ T935] usb 2-1: USB disconnect, device number 4 [ 160.849400][ T5998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 160.864116][ T5998] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 160.883366][ T5998] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 160.891470][ T5998] UDF-fs: Scanning with blocksize 4096 failed [ 160.898524][ T5998] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 161.995504][ T6017] netlink: 204152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.187780][ T6019] loop3: detected capacity change from 0 to 2048 [ 162.235733][ T6019] loop3: p2 p3 p7 [ 162.274402][ C1] operation not supported error, dev loop3, sector 600 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 162.476680][ T3619] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 162.488897][ T6026] loop2: detected capacity change from 0 to 32768 [ 162.496032][ T6026] XFS: noikeep mount option is deprecated. [ 162.506123][ T6026] XFS (loop2): Mounting V5 Filesystem [ 162.575873][ T6026] XFS (loop2): Ending clean mount [ 162.585797][ T6026] XFS (loop2): Quotacheck needed: Please wait. [ 162.617747][ T4656] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.653908][ T6026] XFS (loop2): Quotacheck: Done. [ 162.735318][ T5360] XFS (loop2): Unmounting Filesystem [ 162.851112][ T3619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.880298][ T4656] usb 2-1: Using ep0 maxpacket: 16 [ 162.993718][ T3619] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.026767][ T3619] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.056218][ T3619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.066578][ T4656] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 163.174800][ T3619] usb 1-1: config 0 descriptor?? [ 163.197001][ T4656] usb 2-1: language id specifier not provided by device, defaulting to English [ 163.636599][ T4656] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.40 [ 163.645673][ T4656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.661077][ T4656] usb 2-1: Product: syz [ 163.665260][ T4656] usb 2-1: Manufacturer: ᩀ醪㣑Ꝓ䁴┥ꯀ⣂ሄ珇옵䡦끼ⵈ嚮哜璟ჯ䠟蝻裄湓묎豋듻퉝䪪㥬侊谅㷮ڄ華דॵᝲ岝捷䭮㥖信㍳䙵膕慓〔勑딕䩦᭩阄ⅎ龹龕껖ᄇ䆤ჼᶌḒ澼쑻០ᙶ룶Ⱔ벙⿇蚭ೂ䞍l妠⡆鯳ⅲ☈铗罰ᱻ駱蒟Ὡ퉩쀊⪶퍝Ɀዊ낇觢࿋谪끦◜髍᯼兰玛ᖲ甼骓湹 [ 163.956022][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 163.976747][ T4656] usb 2-1: SerialNumber: syz [ 164.008898][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 164.098571][ T4656] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 164.110471][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 164.177594][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 164.213591][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 164.256360][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 164.392615][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 164.402450][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 164.431710][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 164.458569][ T4528] usb 2-1: USB disconnect, device number 5 [ 164.469797][ T3619] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 164.488144][ T3619] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 164.515454][ T3619] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 164.530422][ T6070] loop4: detected capacity change from 0 to 512 [ 164.541359][ T3619] usb 1-1: USB disconnect, device number 2 [ 164.703748][ T6081] netlink: 204152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.764094][ T6070] EXT4-fs (loop4): Test dummy encryption mode enabled [ 164.792244][ T6070] EXT4-fs (loop4): can't mount with both data=journal and dax [ 165.158654][ T6101] loop3: detected capacity change from 0 to 2048 [ 165.189131][ T6113] netlink: 204152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.285028][ T6101] loop3: p2 p3 p7 [ 165.336223][ C1] operation not supported error, dev loop3, sector 600 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 165.451276][ T6107] loop1: detected capacity change from 0 to 40427 [ 165.483442][ T6107] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 165.505923][ T6107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 165.523818][ T6107] F2FS-fs (loop1): invalid crc value [ 165.548168][ T6107] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.586651][ T4528] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.651010][ T6107] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 165.666520][ T6107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.989075][ T4528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.011879][ T4528] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.035205][ T4528] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.055450][ T4528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.087608][ T4528] usb 3-1: config 0 descriptor?? [ 166.241387][ T6116] syz-executor.4 (6116) used greatest stack depth: 18968 bytes left [ 166.331181][ T3664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.418724][ T3664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.498849][ T3664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.523430][ T6145] vivid-002: disconnect [ 166.552254][ T6140] vivid-002: reconnect [ 166.566072][ T6147] loop4: detected capacity change from 0 to 256 [ 166.582268][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.588716][ T3664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.596090][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.609611][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.617353][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.624815][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.636302][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.646004][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.656805][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.664221][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.681977][ T4528] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 166.703578][ T4528] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 166.776654][ T4528] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 166.967101][ T4656] usb 3-1: USB disconnect, device number 4 [ 167.020960][ T3579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.033970][ T3579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.043913][ T3579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.087089][ T3579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.100016][ T3579] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.115041][ T3579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.558889][ T6168] loop4: detected capacity change from 0 to 256 [ 167.581693][ T6168] FAT-fs (loop4): Directory bread(block 64) failed [ 167.588510][ T6168] FAT-fs (loop4): Directory bread(block 65) failed [ 167.595175][ T6168] FAT-fs (loop4): Directory bread(block 66) failed [ 167.602047][ T6168] FAT-fs (loop4): Directory bread(block 67) failed [ 167.618962][ T6168] FAT-fs (loop4): Directory bread(block 68) failed [ 167.631690][ T6168] FAT-fs (loop4): Directory bread(block 69) failed [ 167.648764][ T6168] FAT-fs (loop4): Directory bread(block 70) failed [ 167.655631][ T6168] FAT-fs (loop4): Directory bread(block 71) failed [ 167.673047][ T6168] FAT-fs (loop4): Directory bread(block 72) failed [ 167.681132][ T6168] FAT-fs (loop4): Directory bread(block 73) failed [ 167.779503][ T26] audit: type=1326 audit(1718550131.559:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd34307cea9 code=0x0 [ 167.881057][ T6174] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 168.326515][ T4528] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.332056][ T6176] loop2: detected capacity change from 0 to 32768 [ 168.379851][ T6176] XFS (loop2): Mounting V5 Filesystem [ 168.463272][ T6176] XFS (loop2): Ending clean mount [ 168.472980][ T6176] XFS (loop2): Quotacheck needed: Please wait. [ 168.524877][ T6176] XFS (loop2): Quotacheck: Done. [ 168.590370][ T5360] XFS (loop2): Unmounting Filesystem [ 168.606510][ T4528] usb 1-1: Using ep0 maxpacket: 16 [ 168.756809][ T4528] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 168.816744][ T4528] usb 1-1: language id specifier not provided by device, defaulting to English [ 168.936766][ T4528] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.40 [ 168.956233][ T4528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.974564][ T4528] usb 1-1: Product: syz [ 168.984675][ T4528] usb 1-1: Manufacturer: ᩀ醪㣑Ꝓ䁴┥ꯀ⣂ሄ珇옵䡦끼ⵈ嚮哜璟ჯ䠟蝻裄湓묎豋듻퉝䪪㥬侊谅㷮ڄ華דॵᝲ岝捷䭮㥖信㍳䙵膕慓〔勑딕䩦᭩阄ⅎ龹龕껖ᄇ䆤ჼᶌḒ澼쑻០ᙶ룶Ⱔ벙⿇蚭ೂ䞍l妠⡆鯳ⅲ☈铗罰ᱻ駱蒟Ὡ퉩쀊⪶퍝Ɀዊ낇觢࿋谪끦◜髍᯼兰玛ᖲ甼骓湹 [ 169.066344][ T4528] usb 1-1: SerialNumber: syz [ 169.332448][ T3567] Bluetooth: hci4: command tx timeout [ 169.939952][ T4528] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 169.956929][ T4528] usb 1-1: USB disconnect, device number 3 [ 170.151958][ T6210] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 170.167085][ T6211] loop4: detected capacity change from 0 to 512 [ 170.207512][ T6211] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 170.246854][ T6211] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 170.276709][ T6211] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: ea_inode with extended attributes [ 170.309929][ T26] audit: type=1326 audit(1718550134.089:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d8d07cea9 code=0x0 [ 170.334508][ T6211] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 170.362980][ T6211] EXT4-fs (loop4): 1 orphan inode deleted [ 170.373321][ T6211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.454165][ T6226] vivid-004: disconnect [ 170.466309][ T6222] vivid-004: reconnect [ 170.661875][ T6229] loop2: detected capacity change from 0 to 1764 [ 171.366600][ T3567] Bluetooth: hci4: command tx timeout [ 171.479628][ T5048] EXT4-fs (loop4): unmounting filesystem. [ 171.928689][ T6244] loop4: detected capacity change from 0 to 4096 [ 171.955446][ T6244] NILFS (loop4): invalid segment: Checksum error in segment payload [ 171.955570][ T6234] loop0: detected capacity change from 0 to 40427 [ 171.976573][ T6244] NILFS (loop4): trying rollback from an earlier position [ 171.977414][ T6234] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (67108865, 24) [ 171.998983][ T6234] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 172.021610][ T6234] F2FS-fs (loop0): invalid crc value [ 172.030756][ T6244] NILFS (loop4): recovery complete [ 172.044187][ T6246] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.060704][ T6234] F2FS-fs (loop0): Found nat_bits in checkpoint [ 172.126505][ T6244] loop4: detected capacity change from 4096 to 0 [ 172.142466][ T6244] NILFS error (device loop4): nilfs_readdir: zero-length directory entry [ 172.154767][ T4281] loop: Write error at byte offset 9223372036854776831, length 1024. [ 172.170924][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 172.180458][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 172.190424][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 172.198704][ T6244] NILFS (loop4): unable to write superblock: err=-5 [ 172.205632][ T6234] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 172.212830][ T6234] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 172.220819][ T3703] loop: Write error at byte offset 9223372036856868863, length 1024. [ 172.240828][ C0] I/O error, dev loop4, sector 4088 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 172.248470][ T6234] syz-executor.0: attempt to access beyond end of device [ 172.248470][ T6234] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.250518][ C0] I/O error, dev loop4, sector 4088 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 172.274382][ C0] Buffer I/O error on dev loop4, logical block 2044, lost sync page write [ 172.283636][ T6244] NILFS (loop4): unable to write superblock: err=-5 [ 172.296062][ T6244] Remounting filesystem read-only [ 172.343827][ T4404] syz-executor.0: attempt to access beyond end of device [ 172.343827][ T4404] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 172.360807][ T5048] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 172.371346][ T5048] NILFS (loop4): discard dirty page: offset=0, ino=12 [ 172.379105][ T5048] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 172.386313][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.396743][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.406639][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.420447][ T5048] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 172.428370][ T5048] NILFS (loop4): discard dirty block: blocknr=5, size=1024 [ 172.436920][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.445782][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.454878][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.486751][ T5048] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 172.493465][ T5048] NILFS (loop4): discard dirty block: blocknr=6, size=1024 [ 172.526494][ T5048] NILFS (loop4): discard dirty block: blocknr=7, size=1024 [ 172.533728][ T5048] NILFS (loop4): discard dirty block: blocknr=8, size=1024 [ 172.548012][ T5048] NILFS (loop4): discard dirty block: blocknr=9, size=1024 [ 172.558055][ T5048] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 172.564749][ T5048] NILFS (loop4): discard dirty block: blocknr=12, size=1024 [ 172.586549][ T5048] NILFS (loop4): discard dirty block: blocknr=13, size=1024 [ 172.593880][ T5048] NILFS (loop4): discard dirty block: blocknr=14, size=1024 [ 172.615221][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.624188][ T5048] NILFS (loop4): discard dirty page: offset=131072, ino=3 [ 172.631425][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.655429][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 172.676461][ T5048] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 172.683692][ T5048] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 173.176482][ T3576] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.446537][ T3567] Bluetooth: hci4: command tx timeout [ 173.546787][ T3576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.565470][ T6270] loop4: detected capacity change from 0 to 40427 [ 173.573468][ T3576] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.582110][ T6270] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 173.591437][ T3576] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.608635][ T3576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.611865][ T6270] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 173.630881][ T6270] F2FS-fs (loop4): invalid crc value [ 173.631700][ T3576] usb 1-1: config 0 descriptor?? [ 173.649395][ T6270] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.698415][ T6270] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 173.705593][ T6270] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 173.725995][ T26] audit: type=1804 audit(1718550137.499:255): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2758810455/syzkaller.8jL08N/82/file2/file0" dev="loop4" ino=10 res=1 errno=0 [ 173.761121][ T6270] UBIFS error (pid: 6270): cannot open "./file0", error -22 [ 173.794088][ T5048] syz-executor.4: attempt to access beyond end of device [ 173.794088][ T5048] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 174.093153][ T26] audit: type=1804 audit(1718550137.869:256): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2758810455/syzkaller.8jL08N/83/bus" dev="sda1" ino=1957 res=1 errno=0 [ 174.095476][ T6276] Invalid ELF header magic: != ELF [ 174.135496][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.151820][ T26] audit: type=1800 audit(1718550137.869:257): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1957 res=0 errno=0 [ 174.153230][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.212743][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.225253][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.234533][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.248949][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.256581][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.263974][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.278217][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.285773][ T3576] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 174.299348][ T3576] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 174.327729][ T3576] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 174.427666][ T4740] usb 1-1: USB disconnect, device number 4 [ 174.702834][ T6278] loop4: detected capacity change from 0 to 40427 [ 174.716972][ T6278] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24) [ 174.725245][ T6278] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 174.741480][ T6278] F2FS-fs (loop4): invalid crc value [ 174.752279][ T6278] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.804647][ T6278] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 174.822484][ T6278] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.855281][ T6278] syz-executor.4: attempt to access beyond end of device [ 174.855281][ T6278] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.901571][ T5048] syz-executor.4: attempt to access beyond end of device [ 174.901571][ T5048] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 175.527308][ T3567] Bluetooth: hci4: command tx timeout [ 194.090011][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.096330][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.345918][ T3579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.355956][ T3579] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.363973][ T3579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.372739][ T3579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.380315][ T3579] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 196.387670][ T3579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.443155][ T3567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.460386][ T3567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.469093][ T3567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.477577][ T3567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.485102][ T3567] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 197.492415][ T3567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.486574][ T3579] Bluetooth: hci3: command tx timeout [ 199.526563][ T3579] Bluetooth: hci5: command tx timeout [ 200.566563][ T3579] Bluetooth: hci3: command tx timeout [ 201.606500][ T3579] Bluetooth: hci5: command tx timeout [ 202.656526][ T3579] Bluetooth: hci3: command tx timeout [ 203.686894][ T3579] Bluetooth: hci5: command tx timeout [ 204.726788][ T3579] Bluetooth: hci3: command tx timeout [ 205.331924][ T3571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.341190][ T3571] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.352390][ T3571] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.361155][ T3571] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.368806][ T3571] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 205.376046][ T3571] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.446833][ T3579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 205.461957][ T3579] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 205.469889][ T3579] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 205.478418][ T3579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 205.485865][ T3579] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 205.494107][ T3579] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 205.766658][ T3571] Bluetooth: hci5: command tx timeout [ 207.446653][ T3567] Bluetooth: hci6: command tx timeout [ 207.526637][ T3567] Bluetooth: hci7: command tx timeout [ 209.527649][ T3567] Bluetooth: hci6: command tx timeout [ 209.606542][ T3567] Bluetooth: hci7: command tx timeout [ 211.617797][ T3567] Bluetooth: hci6: command tx timeout [ 211.686599][ T3567] Bluetooth: hci7: command tx timeout [ 213.686612][ T3567] Bluetooth: hci6: command tx timeout [ 213.766563][ T3567] Bluetooth: hci7: command tx timeout [ 216.647027][ T3567] Bluetooth: hci2: command 0x0406 tx timeout [ 221.766541][ T3571] Bluetooth: hci1: command 0x0406 tx timeout [ 231.756915][ T3571] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 231.767689][ T3571] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 231.775718][ T3571] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 231.783505][ T3571] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 231.791039][ T3571] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 231.798294][ T3571] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 233.846636][ T3579] Bluetooth: hci8: command tx timeout [ 235.926673][ T3579] Bluetooth: hci8: command tx timeout [ 238.006603][ T3579] Bluetooth: hci8: command tx timeout [ 240.086597][ T3579] Bluetooth: hci8: command tx timeout [ 247.366504][ T3567] Bluetooth: hci0: command 0x0406 tx timeout [ 255.531857][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.538213][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.554733][ T3571] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 261.565783][ T3571] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 261.573860][ T3571] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 261.586181][ T3571] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 261.593909][ T3571] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 261.606722][ T3571] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 262.472410][ T3579] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 262.488231][ T3579] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 262.497216][ T3579] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 262.505169][ T3579] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 262.514136][ T3579] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 262.521542][ T3579] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 263.696649][ T3579] Bluetooth: hci9: command tx timeout [ 264.566654][ T3579] Bluetooth: hci10: command tx timeout [ 265.768892][ T3579] Bluetooth: hci9: command tx timeout [ 266.646628][ T3579] Bluetooth: hci10: command tx timeout [ 267.846661][ T3579] Bluetooth: hci9: command tx timeout [ 268.726566][ T3579] Bluetooth: hci10: command tx timeout [ 269.926557][ T3579] Bluetooth: hci9: command tx timeout [ 270.259614][ T3579] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 270.271688][ T3579] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 270.280005][ T3579] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 270.292295][ T3579] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 270.299877][ T3579] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 270.312104][ T3579] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 270.477941][ T3579] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 270.496780][ T3579] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 270.505177][ T3579] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 270.513054][ T3579] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 270.521900][ T3579] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 270.529273][ T3579] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 270.806603][ T3579] Bluetooth: hci10: command tx timeout [ 272.326617][ T3571] Bluetooth: hci11: command tx timeout [ 272.576679][ T3571] Bluetooth: hci12: command tx timeout [ 274.406723][ T3571] Bluetooth: hci11: command tx timeout [ 274.646986][ T3571] Bluetooth: hci12: command tx timeout [ 276.486566][ T3571] Bluetooth: hci11: command tx timeout [ 276.726811][ T3571] Bluetooth: hci12: command tx timeout [ 278.566685][ T3571] Bluetooth: hci11: command tx timeout [ 278.806861][ T3571] Bluetooth: hci12: command tx timeout [ 293.446543][ T3571] Bluetooth: hci4: command 0x0406 tx timeout [ 296.944905][ T3579] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 296.963280][ T3579] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 296.974326][ T3579] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 296.990831][ T3579] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 296.998642][ T3579] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 297.005946][ T3579] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 299.046713][ T3579] Bluetooth: hci13: command tx timeout [ 301.126516][ T3579] Bluetooth: hci13: command tx timeout [ 303.206576][ T3579] Bluetooth: hci13: command tx timeout [ 305.286617][ T3579] Bluetooth: hci13: command tx timeout [ 316.969681][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.976000][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.606787][ T27] INFO: task kworker/u4:6:3664 blocked for more than 143 seconds. [ 317.615163][ T27] Not tainted 6.1.94-syzkaller #0 [ 317.628052][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.641517][ T27] task:kworker/u4:6 state:D stack:23416 pid:3664 ppid:2 flags:0x00004000 2024/06/16 15:04:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 317.654731][ T27] Workqueue: netns cleanup_net [ 317.676545][ T27] Call Trace: [ 317.679864][ T27] [ 317.682797][ T27] __schedule+0x142d/0x4550 [ 317.706470][ T27] ? __sched_text_start+0x8/0x8 [ 317.711366][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 317.726471][ T27] ? wq_worker_sleeping+0x5f/0x270 [ 317.731620][ T27] schedule+0xbf/0x180 [ 317.735700][ T27] schedule_preempt_disabled+0xf/0x20 [ 317.766442][ T27] __mutex_lock+0x6b9/0xd80 [ 317.771002][ T27] ? ret_from_fork+0x1f/0x30 [ 317.775610][ T27] ? __mutex_lock+0x53c/0xd80 [ 317.796515][ T27] ? devlink_nl_port_fill+0x2b1/0xa00 [ 317.801941][ T27] ? mutex_lock_nested+0x10/0x10 [ 317.816515][ T27] ? skb_put+0x110/0x1f0 [ 317.820796][ T27] ? nla_put+0x12d/0x1e0 [ 317.825071][ T27] ? memcpy+0x3c/0x60 [ 317.846472][ T27] ? nla_put+0x12d/0x1e0 [ 317.850787][ T27] devlink_nl_port_fill+0x2b1/0xa00 [ 317.856008][ T27] ? devlink_nl_cmd_selftests_run+0xba0/0xba0 [ 317.862183][ T27] ? devlink_port_notify+0x7d/0x1d0 [ 317.868790][ T27] ? rcu_is_watching+0x11/0xb0 [ 317.873571][ T27] ? devlink_port_notify+0x7d/0x1d0 [ 317.878887][ T27] ? __kmalloc_node_track_caller+0xe1/0x220 [ 317.884802][ T27] ? __alloc_skb+0x419/0x670 [ 317.889436][ T27] devlink_port_notify+0xa0/0x1d0 [ 317.894478][ T27] devlink_port_type_eth_set+0x286/0x3d0 [ 317.900203][ T27] ? netif_stacked_transfer_operstate+0x240/0x240 [ 317.906660][ T27] ? devlink_port_unregister+0x60/0x60 [ 317.912143][ T27] ? nsim_create+0x3b4/0x3f0 [ 317.916818][ T27] __nsim_dev_port_add+0x861/0xb10 [ 317.921949][ T27] ? nsim_drv_port_add+0x130/0x130 [ 317.927159][ T27] ? delayed_work_timer_fn+0x80/0x80 [ 317.932474][ T27] ? nsim_dev_hwstats_init+0x3ba/0x3d0 [ 317.938102][ T27] nsim_dev_reload_up+0x693/0x8e0 [ 317.944191][ T27] ? nsim_dev_reload_down+0xc0/0xc0 [ 317.949437][ T27] ? nsim_dev_reload_down+0x94/0xc0 [ 317.954661][ T27] devlink_reload+0x2a0/0x6a0 [ 317.964810][ T27] ? devlink_resources_validate+0xd0/0xd0 [ 317.970617][ T27] ? xa_clear_mark+0x2c0/0x2c0 [ 317.975395][ T27] ? devlinks_xa_find_get+0x29/0x2d0 [ 317.987546][ T27] ? devlinks_xa_find_get+0x2a7/0x2d0 [ 317.992953][ T27] ? devlinks_xa_find_get+0x29/0x2d0 [ 318.021771][ T27] devlink_pernet_pre_exit+0x14e/0x2c0 [ 318.027423][ T27] ? devlink_trap_notify+0x1b0/0x1b0 [ 318.032726][ T27] ? nfct_timeout_pernet+0x1ef/0x230 [ 318.061804][ T27] ? cttimeout_net_pre_exit+0x1e0/0x1f0 [ 318.067480][ T27] cleanup_net+0x59c/0xb60 [