last executing test programs: 55.824939641s ago: executing program 0 (id=312): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) getdents(r2, 0x0, 0x58) 55.652692985s ago: executing program 0 (id=316): r0 = socket(0x11, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000003e000100fcff07000400000001000000040000008c0001808800108009000880a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"], 0xb0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141444e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 54.391712407s ago: executing program 0 (id=322): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000300)="3114", 0x2, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 54.10314531s ago: executing program 0 (id=328): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0xe, &(0x7f0000000440)={[{@acl}, {@test_dummy_encryption}, {@dioread_nolock}, {@minixdf}]}, 0x3, 0x458, &(0x7f0000001540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x40) 53.555466415s ago: executing program 0 (id=335): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x142, 0x0) 51.210967934s ago: executing program 0 (id=360): getpid() r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f0000000340), 0x0, 0x5e0, &(0x7f00000011c0)="$eJzs3c1vVFUbAPDnTj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxd3pv6bR3+kU7t3J/v2TouefM5Zzb6dNz5vScOwFU1mD6Ty1if0RMJxH9yfxiWWdkhYMLz3vw50dn00cS9fprvyeRZHn585Psa192ck9E/PhDEvs6VtY7M3ft4vjU1OTV7Hh49tL08MzctcMXLo2fnzw/eXn0hdETx48dPzFyZFPXdb0g7/TNd9/v/2TszW+++isZ+faXsSROxsvZE5dex1YZjMHG9yRZWdR3YqsrK0lH9nOy9CVOOoue2dW+RrFu+euXvjpPRH90xMMXrz8+fqXUxgHbqp5E1IGKSsQ/VFQ+Dsjf2y9/H1wrZVQCtMP9UwsTACvjv3NhbjB6GnMDux8ksXRaJ4mIzc3MNdsTEXfvjN08d2fsZmzTPBxQbP5GRDxZFP9JI/4HoicGGvFfa4r/dFxwJvua5r+6yfqXTxWLf2ifhfjvWTX+o0X8v7Uk/t/eZP2DD5Pv9DbFf+9mLwkAAAAAAAAq6/apiHi+6O//tcX1P1Gw/qcvIk5uQf2Dy45X/v2/dm8LqgEK3D8V8VLh+t9avvp3oCNL/aexHqArOXdhavJIRPw3Ig5F1670eGSVOg5/uu/LVmWD2fq//JHWfzdbC5i1417nruZzJsZnxx/1uoGI+zcinipc/5ss9v9JQf+f/j6YXmcd+569daZV2drxD2yX+tcRBwv7/4d3rUhWvz/HcGM8MJyPClZ6+sPPvmtV/2bjv/AWE8CGpP3/7tXjfyBZer+emY3XcXSus96qbLPj/+7k9cYtZ7qzvA/GZ2evjkR0J6c70tym/NGNtxkeR3k85PGSxv+hZ1af/ysa//dGxPyy/zv5o3lPce7/f/f92qo9xv9QnjT+JzbU/288MXpr4PtW9a+v/z/W6OsPZTnm/2DBF3mYdjfnF4RjZ1FRu9sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+DWkTsiaQ2tJiu1YaGIvoi4n+xuzZ1ZWb2uXNX3rs8kZY1Pv+/ln/Sb//CcZJ//v/AkuPRZcdHI2JvRHze0ds4Hjp7ZWqi7IsHAAAAAAAAAAAAAAAAAACAHaKvxf7/1G8dZbcO2HadZTcAKE1B/P9URjuA9tP/Q3WJf6gu8Q/VJf6husQ/VJf4h+oS/1Bd4h8AAAAAAB4rew/c/jmJiPkXexuPVHdW1lVqy4DtViu7AUBp3OIHqsvSH6gu7/GBZI3ynpYnrXXmaqbPPsLJAAAAAAAAAAAAAFA5B/fb/w9VZf8/VJf9/1Bd+f7/AyW3A2g/7/GBWGMnf+H+/zXPAgAAAAAAAAAAAAC20szctYvjU1OTVyXe2BnNaGeiXq9fT38Kdkp7/uWJfCn8TmnPskS+1299Z5X3OwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj2TwAAAP//+Ekkyg==") syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 50.751072171s ago: executing program 32 (id=360): getpid() r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f0000000340), 0x0, 0x5e0, &(0x7f00000011c0)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 12.975740282s ago: executing program 4 (id=602): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) 10.427349548s ago: executing program 4 (id=629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x2, 0x1, 0x0, 0xff, 0x3}]}}}}}}}, 0x0) 10.183239188s ago: executing program 4 (id=630): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) r1 = syz_open_dev$vim2m(0x0, 0xff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) 8.940940268s ago: executing program 4 (id=639): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8.102642056s ago: executing program 4 (id=644): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x200) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006) pwrite64(r2, &(0x7f0000000000)="11", 0x1, 0x4) 6.288446182s ago: executing program 4 (id=655): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) 5.808766111s ago: executing program 33 (id=655): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) 5.790252062s ago: executing program 1 (id=658): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17d) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) 5.382475006s ago: executing program 2 (id=662): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000540)="6e46c0", 0x3}, {&(0x7f0000000080)="0f38", 0x2}], 0x2) 4.961790519s ago: executing program 2 (id=664): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1ac40000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000091d82020002000000000000000002000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) 4.355719308s ago: executing program 1 (id=669): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44000840) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x2) 3.84318824s ago: executing program 3 (id=670): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000300)={{0x2, 0x4e24, @empty}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x8, {0x2, 0x4e21, @private=0xa010102}, 'lo\x00'}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.513046977s ago: executing program 3 (id=671): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40481c0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) 3.09137319s ago: executing program 3 (id=672): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000001c0)='fdinfo/4\x00') 2.713447151s ago: executing program 1 (id=673): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 2.362708859s ago: executing program 2 (id=674): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x200}, 0x8) 2.032882566s ago: executing program 2 (id=676): syz_usb_connect(0x5, 0x36, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x2, 0xf0, 0x1}, 0x2}, 0x18) 1.646500927s ago: executing program 5 (id=679): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x10, r1) setregid(0x0, 0x0) ptrace(0x11, r1) 1.48220615s ago: executing program 3 (id=680): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) r1 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) 1.319150974s ago: executing program 5 (id=681): prlimit64(0x0, 0xa, &(0x7f0000000080)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000183000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 1.169581336s ago: executing program 3 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.127233869s ago: executing program 1 (id=683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.043928656s ago: executing program 3 (id=684): r0 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8\x82\x99\xb8\x8d\x9a/\xa1\x80\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r0, 0x80079a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) writev(r2, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5) setsockopt(r2, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) 739.141901ms ago: executing program 1 (id=685): bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 698.429584ms ago: executing program 5 (id=686): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 595.248432ms ago: executing program 1 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x7, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x4040004) 513.287299ms ago: executing program 5 (id=688): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) 376.27824ms ago: executing program 5 (id=689): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 139.234569ms ago: executing program 5 (id=690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xd, 0xffe0}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_virt_wifi\x00'}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044078}, 0x0) 96.040203ms ago: executing program 2 (id=691): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) r1 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) 0s ago: executing program 2 (id=692): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xdb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0xf7) kernel console output (not intermixed with test programs): TDEV_CHANGE): team0: link becomes ready [ 73.764169][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.791612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.800830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.811701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.822395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.831984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.858480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.869955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.881207][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.888472][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.897461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.907091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.916393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.929344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.939246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.948430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.962699][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.974009][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.984990][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 73.995324][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.007703][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.021802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.032290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.040935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.048884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.057238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.066119][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 74.066171][ T4271] Bluetooth: hci4: command 0x041b tx timeout [ 74.072281][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 74.072321][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 74.073191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.100842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.110380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.119694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.128738][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.135965][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.155324][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.191537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.215734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.247942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.274889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.318900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.339896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.357515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.382550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.395599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.407835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.417490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.444812][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.463123][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.489977][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.517586][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.526221][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.564445][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.586976][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.610256][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.645431][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.669941][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.706979][ T4270] device veth0_vlan entered promiscuous mode [ 74.753217][ T4270] device veth1_vlan entered promiscuous mode [ 74.772498][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.788955][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.812478][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.825125][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.832455][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.841022][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.850263][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.860299][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.867379][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.875287][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.913906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.924019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.934439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.967270][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.980512][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.987763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.001077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.012022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.020218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.027841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.037622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.065624][ T4270] device veth0_macvtap entered promiscuous mode [ 75.078596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.099242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.120668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.130627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.140869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.158901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.178790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.198797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.218971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.228719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.242114][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.280145][ T4270] device veth1_macvtap entered promiscuous mode [ 75.309059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.323529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.334311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.351939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.363492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.386385][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.416143][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.446699][ T4266] device veth0_vlan entered promiscuous mode [ 75.489275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.520831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.542659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.552522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.565097][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.593936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.610700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.629358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.649719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.673229][ T4266] device veth1_vlan entered promiscuous mode [ 75.692701][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.719952][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.735449][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.747532][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.787909][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.797764][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.843301][ T4277] device veth0_vlan entered promiscuous mode [ 75.851248][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.861659][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.885264][ T4277] device veth1_vlan entered promiscuous mode [ 75.915624][ T4266] device veth0_macvtap entered promiscuous mode [ 75.924526][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.933257][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.942405][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.950555][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.960984][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.999495][ T4266] device veth1_macvtap entered promiscuous mode [ 76.009838][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.020319][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.029055][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.036962][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.046048][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.058793][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 76.112144][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.124127][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.136953][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.144874][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 76.144916][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 76.144943][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 76.158085][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 76.164686][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.178814][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.187716][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.196628][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.216709][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.233687][ T4274] device veth0_vlan entered promiscuous mode [ 76.243439][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.255002][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.266461][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.281017][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.289938][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.297648][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.305982][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.314157][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.324185][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.333272][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.342146][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.363960][ T4274] device veth1_vlan entered promiscuous mode [ 76.375163][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.387931][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.388778][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.406908][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.416035][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.424913][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.453902][ T4277] device veth0_macvtap entered promiscuous mode [ 76.470562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.479880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.487943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.496937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.525801][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.531959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.542865][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.547796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.577836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.586315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.601150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.619069][ T4277] device veth1_macvtap entered promiscuous mode [ 76.637472][ T4275] device veth0_vlan entered promiscuous mode [ 76.694347][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.724795][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.765093][ T4275] device veth1_vlan entered promiscuous mode [ 76.794666][ T4274] device veth0_macvtap entered promiscuous mode [ 76.813233][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.827174][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.849803][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.865592][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.899798][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.927135][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.939907][ T4385] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 76.945897][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.965273][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.983831][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.034604][ T4274] device veth1_macvtap entered promiscuous mode [ 77.061411][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.080865][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.106781][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.161959][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.179755][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.187734][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.204414][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.215689][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.229495][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.241264][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.256646][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.275851][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.293708][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.305772][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.328231][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.336214][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.356220][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.365693][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.375252][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.386474][ T4275] device veth0_macvtap entered promiscuous mode [ 77.416924][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.430143][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.440438][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.451283][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.463100][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.487032][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.501253][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.524757][ T4392] loop2: detected capacity change from 0 to 512 [ 77.535435][ T4275] device veth1_macvtap entered promiscuous mode [ 77.551609][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.560495][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.568938][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.577738][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.602228][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.628865][ T4392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.637859][ T4392] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.649485][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.680035][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.715755][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.730734][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.747157][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.766791][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.799644][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.803988][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.807683][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.823902][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.834069][ T4392] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 77.856510][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.880054][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.892408][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.903997][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.915724][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.929353][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.939939][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.950993][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.963679][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 77.963721][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.982577][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.993848][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.005949][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.014915][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.039210][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.054378][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.084241][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.111580][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.130208][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.140483][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 78.148414][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.159280][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.169237][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.180163][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.190724][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.203128][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.215397][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.223061][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 78.229522][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 78.229541][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 78.235550][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 78.255240][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.284588][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.295065][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.315689][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.350813][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.369610][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.754847][ T4401] loop2: detected capacity change from 0 to 40427 [ 78.782699][ T4401] F2FS-fs (loop2): invalid crc value [ 78.806297][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.807938][ T4401] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.851981][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.879278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.895750][ T4401] F2FS-fs (loop2): Start checkpoint disabled! [ 78.933393][ T4401] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 79.009762][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.017808][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.085710][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.165812][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.184177][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.189250][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.222498][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.229569][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.313685][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.314068][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.340637][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.367059][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.383003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.388768][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.442287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.524458][ T4415] input: syz1 as /devices/virtual/input/input5 [ 79.666826][ T4260] udevd[4260]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 79.799125][ T48] kworker/u4:3: attempt to access beyond end of device [ 79.799125][ T48] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 80.249799][ T4431] loop3: detected capacity change from 0 to 1024 [ 81.202340][ T4446] loop1: detected capacity change from 0 to 32768 [ 81.218582][ T4446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.25 (4446) [ 81.244645][ T4446] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.255805][ T4446] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 81.264728][ T4446] BTRFS info (device loop1): turning on sync discard [ 81.271492][ T4446] BTRFS info (device loop1): use zlib compression, level 3 [ 81.278811][ T4446] BTRFS info (device loop1): turning off barriers [ 81.285409][ T4446] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 81.296132][ T4446] BTRFS info (device loop1): trying to use backup root at mount time [ 81.298226][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.304281][ T4446] BTRFS info (device loop1): enabling auto defrag [ 81.318614][ T4446] BTRFS info (device loop1): max_inline at 0 [ 81.324636][ T4446] BTRFS info (device loop1): using free space tree [ 81.481871][ T4468] loop3: detected capacity change from 0 to 128 [ 81.493596][ T9] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 81.511068][ T4468] ======================================================= [ 81.511068][ T4468] WARNING: The mand mount option has been deprecated and [ 81.511068][ T4468] and is ignored by this kernel. Remove the mand [ 81.511068][ T4468] option from the mount to silence this warning. [ 81.511068][ T4468] ======================================================= [ 81.554375][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 81.572016][ T4468] EXT4-fs (loop3): Test dummy encryption mode enabled [ 81.587293][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.600447][ T4446] BTRFS error (device loop1): failed to load root extent [ 81.607560][ T4446] BTRFS warning (device loop1): try to load backup roots slot 1 [ 81.615612][ T65] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 81.624948][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.635907][ T4438] loop2: detected capacity change from 0 to 32768 [ 81.646237][ T4446] BTRFS warning (device loop1): couldn't read tree root [ 81.654097][ T4446] BTRFS warning (device loop1): try to load backup roots slot 2 [ 81.658957][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.664872][ T126] cfg80211: failed to load regulatory.db [ 81.681978][ T4446] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 81.693779][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.702228][ T4446] BTRFS warning (device loop1): couldn't read tree root [ 81.709380][ T4446] BTRFS warning (device loop1): try to load backup roots slot 3 [ 81.742637][ T14] usb 1-1: config 0 descriptor?? [ 81.757656][ T14] hub 1-1:0.0: USB hub found [ 81.759954][ T4468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.774012][ T4446] BTRFS info (device loop1): enabling ssd optimizations [ 81.781902][ T4446] BTRFS info (device loop1): rebuilding free space tree [ 81.817358][ T4446] BTRFS info (device loop1): checking UUID tree [ 81.838813][ T4468] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.884686][ T4438] XFS (loop2): Mounting V5 Filesystem [ 81.961036][ T14] hub 1-1:0.0: 1 port detected [ 82.242297][ T4277] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.251972][ T4438] XFS (loop2): Ending clean mount [ 82.291794][ T4438] XFS (loop2): Quotacheck needed: Please wait. [ 82.332093][ T4487] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 82.538983][ T4438] XFS (loop2): Quotacheck: Done. [ 82.622247][ T4284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (4284) [ 82.739637][ T14] hub 1-1:0.0: activate --> -90 [ 82.809933][ T4501] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.992139][ T4270] XFS (loop2): Unmounting Filesystem [ 83.157913][ T4468] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 83.184902][ T4257] usb 1-1: USB disconnect, device number 2 [ 83.398169][ T14] usb 1-1-port1: config error [ 83.457492][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 83.719458][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.927050][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.065455][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.185265][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.386361][ T4533] loop0: detected capacity change from 0 to 512 [ 84.459688][ T4533] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.564955][ T4533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.699986][ T4533] EXT4-fs (loop0): 1 truncate cleaned up [ 84.705715][ T4533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.910725][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.926440][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.935139][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.942152][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 84.959037][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.967156][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.974720][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.135971][ T4557] loop2: detected capacity change from 0 to 256 [ 85.256047][ T4557] exfat: Deprecated parameter 'namecase' [ 85.328105][ T4557] exfat: Deprecated parameter 'namecase' [ 85.333852][ T4557] exfat: Deprecated parameter 'utf8' [ 85.386241][ T4557] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 85.762211][ T4545] chnl_net:caif_netlink_parms(): no params data found [ 85.817753][ T4574] loop2: detected capacity change from 0 to 64 [ 86.214505][ T4579] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 86.268515][ T4579] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 86.455753][ T4545] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.477554][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.520436][ T4545] device bridge_slave_0 entered promiscuous mode [ 86.583630][ T4545] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.606680][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.620084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.631756][ T4589] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.648848][ T4545] device bridge_slave_1 entered promiscuous mode [ 86.656046][ T4589] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.675966][ T4589] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 86.731359][ T4589] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.754336][ T4589] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.769405][ T4589] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 86.779318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.807422][ T4589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.824991][ T4589] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.836409][ T4589] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 86.889139][ T4589] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 86.921548][ T4589] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 86.948706][ T4589] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 86.979581][ T4545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.004897][ T4589] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.022827][ T4589] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.031568][ T9] device hsr_slave_0 left promiscuous mode [ 87.046806][ T4589] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 87.054528][ T9] device hsr_slave_1 left promiscuous mode [ 87.080611][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.126861][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.145847][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.172789][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.219323][ T9] device bridge_slave_1 left promiscuous mode [ 87.227376][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.294346][ T9] device bridge_slave_0 left promiscuous mode [ 87.305931][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.332744][ T9] device veth1_macvtap left promiscuous mode [ 87.340650][ T9] device veth0_macvtap left promiscuous mode [ 87.346943][ T9] device veth1_vlan left promiscuous mode [ 87.353334][ T9] device veth0_vlan left promiscuous mode [ 87.388421][ T4324] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.591709][ T4324] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 87.610978][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.635113][ T4324] usb 1-1: config 0 descriptor?? [ 87.654079][ T4324] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 87.870400][ T9] team0 (unregistering): Port device team_slave_1 removed [ 87.917037][ T9] team0 (unregistering): Port device team_slave_0 removed [ 87.956515][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.004153][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.608879][ T9] bond0 (unregistering): Released all slaves [ 88.699577][ T4271] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.746747][ T4545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.778205][ T4271] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.780102][ T4608] netlink: 96 bytes leftover after parsing attributes in process `syz.2.58'. [ 88.858061][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.870122][ T4324] usb 1-1: USB disconnect, device number 3 [ 88.938383][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.963736][ T4545] team0: Port device team_slave_0 added [ 88.999736][ T4621] Zero length message leads to an empty skb [ 89.010340][ T4545] team0: Port device team_slave_1 added [ 89.018099][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 89.140319][ T4545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.162389][ T4545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.208879][ T4545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.273230][ T4545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.284899][ T4545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.367815][ T4545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.604262][ T4545] device hsr_slave_0 entered promiscuous mode [ 89.625648][ T4545] device hsr_slave_1 entered promiscuous mode [ 89.645013][ T4545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.647421][ T4639] loop2: detected capacity change from 0 to 512 [ 89.702486][ T4545] Cannot create hsr debugfs directory [ 89.733372][ T4639] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.795886][ T4639] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.835271][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 89.876743][ T4648] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.886054][ T4648] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.894926][ T4648] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.896621][ T4639] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.70: corrupted inode contents [ 89.903756][ T4648] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.999493][ T4639] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.70: mark_inode_dirty error [ 90.045686][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 90.064848][ T4639] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.70: corrupted inode contents [ 90.095221][ T4639] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.70: mark_inode_dirty error [ 90.415724][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 90.778192][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 90.779398][ T4676] loop2: detected capacity change from 0 to 128 [ 90.851792][ T4676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.868276][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 90.905341][ T4676] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.938098][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 91.018248][ T4271] Bluetooth: hci4: command 0x0406 tx timeout [ 91.086284][ T4545] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.095507][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 91.101426][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 91.159379][ T4545] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.170618][ T4684] syz.3.81 uses obsolete (PF_INET,SOCK_PACKET) [ 91.257298][ T4545] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.331465][ T4545] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.724280][ T4702] device ip6gre1 entered promiscuous mode [ 91.886309][ T4545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.002166][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.010458][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.073541][ T4545] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.112134][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.149700][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.204641][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.211880][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.239029][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.275288][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.293545][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.333694][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.340927][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.366244][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.406931][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.469442][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.486722][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.564099][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.592851][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.650617][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.708837][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.759284][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.820367][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.869587][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.879967][ T26] audit: type=1326 audit(1755196055.298:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091ed8ebe9 code=0x7ffc0000 [ 92.906584][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.956015][ T26] audit: type=1326 audit(1755196055.298:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091ed8ebe9 code=0x7ffc0000 [ 93.006683][ T26] audit: type=1326 audit(1755196055.298:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f091ed8ebe9 code=0x7ffc0000 [ 93.107705][ T26] audit: type=1326 audit(1755196055.398:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091ed8ebe9 code=0x7ffc0000 [ 93.178604][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 93.197043][ T26] audit: type=1326 audit(1755196055.448:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f091ed2add9 code=0x7ffc0000 [ 93.317038][ T26] audit: type=1326 audit(1755196055.448:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f091ed2add9 code=0x7ffc0000 [ 93.379831][ T26] audit: type=1326 audit(1755196055.448:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091ed8ebe9 code=0x7ffc0000 [ 93.480996][ T26] audit: type=1326 audit(1755196055.448:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091ed8ebe9 code=0x7ffc0000 [ 93.553181][ T26] audit: type=1326 audit(1755196055.448:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f091ed2add9 code=0x7ffc0000 [ 93.578843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 93.588888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 93.619521][ T26] audit: type=1326 audit(1755196055.448:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4740 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091ed8ebe9 code=0x7ffc0000 [ 94.032952][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.048126][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.072038][ T4545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.130577][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.157767][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.188451][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.212973][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.255246][ T4545] device veth0_vlan entered promiscuous mode [ 94.263911][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.281589][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.319082][ T4545] device veth1_vlan entered promiscuous mode [ 94.385965][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.399136][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.440867][ T4545] device veth0_macvtap entered promiscuous mode [ 94.470938][ T4545] device veth1_macvtap entered promiscuous mode [ 94.515980][ T4545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.557018][ T4545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.602935][ T4545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.662510][ T4545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.707070][ T4545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.750598][ T4545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.791507][ T4545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.833309][ T4545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.884954][ T4545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.943323][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.972611][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.023828][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.091707][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.124038][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 95.133923][ T4282] CPU: 1 PID: 4282 Comm: kworker/u5:7 Not tainted 6.1.147-syzkaller #0 [ 95.142291][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.152399][ T4282] Workqueue: hci0 hci_rx_work [ 95.157099][ T4282] Call Trace: [ 95.160391][ T4282] [ 95.163338][ T4282] dump_stack_lvl+0x168/0x22e [ 95.168051][ T4282] ? show_regs_print_info+0x12/0x12 [ 95.173289][ T4282] ? load_image+0x3b0/0x3b0 [ 95.177811][ T4282] sysfs_create_dir_ns+0x252/0x280 [ 95.182922][ T4282] ? hci_rx_work+0x3eb/0xd40 [ 95.187531][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 95.192318][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 95.197561][ T4282] kobject_add_internal+0x6b8/0xc80 [ 95.202790][ T4282] kobject_add+0x152/0x210 [ 95.207229][ T4282] ? kobject_init+0x1d0/0x1d0 [ 95.211926][ T4282] ? klist_children_get+0x50/0x50 [ 95.216959][ T4282] ? get_device_parent+0x121/0x3f0 [ 95.222088][ T4282] device_add+0x483/0xfb0 [ 95.226429][ T4282] ? kmem_cache_free+0xf7/0x290 [ 95.231293][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 95.236245][ T4282] le_conn_complete_evt+0xd1d/0x1320 [ 95.241670][ T4282] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 95.248017][ T4282] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 95.253662][ T4282] ? skb_pull_data+0xf7/0x200 [ 95.258440][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 95.264000][ T4282] ? hci_remote_host_features_evt+0x270/0x270 [ 95.270084][ T4282] hci_event_packet+0x791/0x1210 [ 95.275070][ T4282] ? bis_list+0x280/0x280 [ 95.279413][ T4282] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 95.285328][ T4282] ? kcov_remote_start+0x4c7/0x7e0 [ 95.290479][ T4282] ? default_do_nmi+0xf0/0x150 [ 95.295256][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 95.300475][ T4282] hci_rx_work+0x3eb/0xd40 [ 95.304930][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 95.309977][ T4282] ? process_one_work+0x7a1/0x1160 [ 95.315094][ T4282] process_one_work+0x898/0x1160 [ 95.320058][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 95.325710][ T4282] ? _raw_spin_lock_irq+0xab/0xe0 [ 95.330746][ T4282] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 95.336215][ T4282] ? kthread_data+0x4b/0xc0 [ 95.340738][ T4282] worker_thread+0xaa2/0x1250 [ 95.345453][ T4282] ? __kthread_parkme+0x162/0x1c0 [ 95.350493][ T4282] kthread+0x29d/0x330 [ 95.354573][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 95.359604][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 95.364229][ T4282] ret_from_fork+0x1f/0x30 [ 95.368670][ T4282] [ 95.373923][ T4271] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.384181][ T4282] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.397445][ T4282] Bluetooth: hci0: failed to register connection device [ 95.425889][ T4545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.437166][ T4545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.447581][ T4545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.458669][ T4545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.469739][ T4545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.481663][ T4545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.491972][ T4545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.509508][ T4545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.532877][ T4545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.559822][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.585153][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.650569][ T4545] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.674452][ T4545] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.707307][ T4545] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.746020][ T4545] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.755786][ T4781] loop2: detected capacity change from 0 to 8192 [ 95.959414][ T4788] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.965491][ T4788] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.018369][ T4788] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 96.039850][ T4788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.058489][ T4788] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.064984][ T4788] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 96.101184][ T4781] loop2: p1 p2 p4 < > [ 96.104828][ T4788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.105603][ T4781] loop2: partition table partially beyond EOD, [ 96.114963][ T4788] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.156486][ T4788] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 96.179988][ T4788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.187359][ T4781] truncated [ 96.198205][ T4788] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.213673][ T4788] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 96.221849][ T4781] loop2: p1 start 16777216 is beyond EOD, truncated [ 96.243393][ T4788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.262396][ T4781] loop2: p2 size 515840 extends beyond EOD, truncated [ 96.266126][ T4788] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.275692][ T4788] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 96.389478][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.399404][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.409649][ T4781] loop2: p4 start 16777216 is beyond EOD, truncated [ 96.486504][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.529360][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.537529][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.614836][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.911890][ T4810] netlink: 96 bytes leftover after parsing attributes in process `syz.1.37'. [ 97.367505][ T4819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.459014][ T4819] team0: Port device bond1 added [ 97.562479][ T4822] loop3: detected capacity change from 0 to 2048 [ 97.600188][ T4822] EXT4-fs: Ignoring removed oldalloc option [ 97.659511][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.667547][ T4822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 97.732159][ T4822] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 97.840790][ T4829] loop1: detected capacity change from 0 to 512 [ 97.915102][ T4829] EXT4-fs: Ignoring removed oldalloc option [ 97.981730][ T41] Trying to write to read-only block-device loop3 [ 97.989004][ T4829] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.989316][ T4275] Trying to write to read-only block-device loop3 [ 98.015706][ T41] Trying to write to read-only block-device loop3 [ 98.037777][ T41] Trying to write to read-only block-device loop3 [ 98.042926][ T4806] loop0: detected capacity change from 0 to 32768 [ 98.058447][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.079072][ T41] Trying to write to read-only block-device loop3 [ 98.080548][ T4829] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 98.089151][ T4275] Trying to write to read-only block-device loop3 [ 98.099697][ T4806] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 98.138483][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.163260][ T41] Trying to write to read-only block-device loop3 [ 98.170125][ T4829] EXT4-fs (loop1): 1 truncate cleaned up [ 98.178550][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 98.188785][ T4829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.220162][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.226665][ T4275] Trying to write to read-only block-device loop3 [ 98.249985][ T4825] Trying to write to read-only block-device loop3 [ 98.298398][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.418524][ T4482] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 98.599893][ T4844] loop3: detected capacity change from 0 to 2048 [ 98.671574][ T4545] EXT4-fs (loop1): unmounting filesystem. [ 98.891076][ T4851] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 99.413403][ T4869] loop2: detected capacity change from 0 to 2048 [ 99.458761][ T4869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 99.643963][ T4869] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.709148][ T4869] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 134 with error 28 [ 99.722900][ T4869] EXT4-fs (loop2): This should not happen!! Data will be lost [ 99.722900][ T4869] [ 99.742652][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 99.749736][ T4869] EXT4-fs (loop2): Total free blocks count 0 [ 99.763624][ T4869] EXT4-fs (loop2): Free/Dirty block details [ 99.770993][ T4869] EXT4-fs (loop2): free_blocks=2415919104 [ 99.776898][ T4869] EXT4-fs (loop2): dirty_blocks=144 [ 99.791284][ T4869] EXT4-fs (loop2): Block reservation details [ 99.800333][ T4869] EXT4-fs (loop2): i_reserved_data_blocks=9 [ 99.824573][ T4877] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 100.075092][ T4888] loop3: detected capacity change from 0 to 4096 [ 100.091331][ T4888] /dev/loop3: Can't open blockdev [ 100.138798][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 100.221000][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 100.228506][ T4893] loop2: detected capacity change from 0 to 1024 [ 100.298304][ T4271] Bluetooth: hci4: command 0x0406 tx timeout [ 100.378061][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 100.555795][ T4893] EXT4-fs (loop2): Test dummy encryption mode enabled [ 100.580937][ T4893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.751791][ T4912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 100.963293][ T4893] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 101.077630][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 101.222032][ T26] kauditd_printk_skb: 516 callbacks suppressed [ 101.222048][ T26] audit: type=1326 audit(1755196063.618:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4922 comm="syz.0.148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85c9f8ebe9 code=0x0 [ 102.059119][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 103.127973][ C1] sched: RT throttling activated [ 103.238455][ T4942] loop0: detected capacity change from 0 to 131072 [ 103.258187][ T4942] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 103.266994][ T4942] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 103.300866][ T4942] F2FS-fs (loop0): invalid crc value [ 103.390191][ T4942] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.470789][ T4942] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 103.478157][ T4942] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 103.498598][ T4975] netlink: 300 bytes leftover after parsing attributes in process `syz.4.162'. [ 103.559779][ T4974] overlayfs: invalid redirect ((null)) [ 103.625298][ T26] audit: type=1800 audit(1755196066.038:529): pid=4942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.155" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 103.748273][ T26] audit: type=1800 audit(1755196066.068:530): pid=4942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.155" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 104.142091][ T4991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.172'. [ 104.627549][ T5004] loop4: detected capacity change from 0 to 8 [ 104.768124][ T4284] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.253974][ T5016] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 105.925046][ T26] audit: type=1804 audit(1755196068.338:531): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.193" name="/newroot/37/file0/file1" dev="overlay" ino=220 res=1 errno=0 [ 106.329534][ T5024] loop3: detected capacity change from 0 to 32768 [ 106.356203][ T5024] /dev/loop3: Can't open blockdev [ 106.758131][ T4341] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.961527][ T5069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.974769][ T4341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.001401][ T4341] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 107.035803][ T4341] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.077115][ T4341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.103244][ T4341] usb 3-1: config 0 descriptor?? [ 107.131032][ T4341] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 107.176068][ T5053] loop0: detected capacity change from 0 to 32768 [ 107.221391][ T5053] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 107.411120][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 107.455425][ T5077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 107.467163][ T4310] usb 3-1: USB disconnect, device number 2 [ 107.583234][ T4284] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 108.492266][ T5086] loop4: detected capacity change from 0 to 32768 [ 108.634506][ T5086] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 108.693764][ T5086] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 108.733933][ T5108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.221'. [ 108.774961][ T5086] ocfs2: Unmounting device (7,4) on (node local) [ 109.021112][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 109.035557][ T5114] overlayfs: failed to clone upperpath [ 109.062452][ T5113] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.071315][ T5113] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.080183][ T5113] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.088955][ T5113] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.260880][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 109.282693][ T4365] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 109.490087][ T4365] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.505165][ T4365] usb 5-1: not running at top speed; connect to a high speed hub [ 109.525480][ T4365] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 109.563689][ T4365] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 109.577674][ T4365] usb 5-1: config 8 has no interface number 0 [ 109.642049][ T4365] usb 5-1: config 8 interface 24 has no altsetting 0 [ 109.656647][ T4365] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 109.678780][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.686826][ T4365] usb 5-1: Product: syz [ 109.708044][ T4365] usb 5-1: Manufacturer: syz [ 109.712760][ T4365] usb 5-1: SerialNumber: syz [ 109.965353][ T4365] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 109.997619][ T5126] loop3: detected capacity change from 0 to 8192 [ 110.005911][ T4365] usb 5-1: USB disconnect, device number 2 [ 110.196639][ T5143] overlayfs: failed to verify upper (48/file0, ino=277, err=-116) [ 110.215056][ T5143] overlayfs: failed to verify index dir 'upper' xattr [ 110.231210][ T5143] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 110.488451][ T5151] netlink: 'syz.0.239': attribute type 4 has an invalid length. [ 110.573886][ T5151] netlink: 'syz.0.239': attribute type 4 has an invalid length. [ 111.773258][ T5187] syz.2.253 sent an empty control message without MSG_MORE. [ 112.502767][ T5177] loop3: detected capacity change from 0 to 40427 [ 112.530821][ T5213] loop6: detected capacity change from 0 to 7 [ 112.559890][ T5213] Dev loop6: unable to read RDB block 7 [ 112.565547][ T5213] loop6: unable to read partition table [ 112.576494][ T5216] loop4: detected capacity change from 0 to 256 [ 112.591944][ T5213] loop6: partition table beyond EOD, truncated [ 112.600525][ T4284] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.626058][ T5213] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 112.678060][ T5216] exfat: Unknown parameter '' [ 112.700408][ T5215] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 113.215944][ T5192] loop0: detected capacity change from 0 to 32768 [ 113.376085][ T5234] loop2: detected capacity change from 0 to 1024 [ 113.411065][ T5192] XFS (loop0): Mounting V5 Filesystem [ 113.522019][ T5245] netlink: 156 bytes leftover after parsing attributes in process `syz.4.269'. [ 113.536752][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 113.608994][ T5234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.617594][ T5234] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.666534][ T5192] XFS (loop0): Ending clean mount [ 113.684852][ T5249] loop3: detected capacity change from 0 to 1024 [ 113.702882][ T5192] XFS (loop0): Quotacheck needed: Please wait. [ 113.762850][ T5249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.802670][ T5192] XFS (loop0): Quotacheck: Done. [ 113.823045][ T5249] /dev/loop3: Can't open blockdev [ 113.919912][ T5192] XFS (loop0): User initiated shutdown received. [ 113.956222][ T5192] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 114.017545][ T5249] loop3: detected capacity change from 1024 to 0 [ 114.029259][ T5192] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 114.030501][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 114.263682][ T4266] XFS (loop0): Unmounting Filesystem [ 114.622307][ T5267] ceph: No mds server is up or the cluster is laggy [ 114.670002][ T4257] libceph: connect (1)[c::]:6789 error -101 [ 114.688086][ T4365] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.718247][ T4257] libceph: mon0 (1)[c::]:6789 connect error [ 114.776195][ T5277] Disabled LAPIC found during irq injection [ 114.888922][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.930505][ T4365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.971928][ T4365] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.044395][ T4365] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.098082][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.137030][ T4365] usb 4-1: config 0 descriptor?? [ 115.418159][ T4257] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.580263][ T4365] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 115.611992][ T4257] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.642166][ T4257] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.693465][ T4257] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.721280][ T4365] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 115.783023][ T4257] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 115.834943][ T4257] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 115.878665][ T4257] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.944159][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.954307][ T4257] usb 1-1: Product: syz [ 115.959281][ T4257] usb 1-1: Manufacturer: syz [ 115.996196][ T4257] cdc_wdm 1-1:1.0: skipping garbage [ 116.005148][ T4257] cdc_wdm 1-1:1.0: skipping garbage [ 116.034819][ T4257] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 116.072287][ T4257] cdc_wdm 1-1:1.0: Unknown control protocol [ 116.776475][ T5312] loop2: detected capacity change from 0 to 32768 [ 116.808628][ T5312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.287 (5312) [ 116.857890][ T5326] loop4: detected capacity change from 0 to 8192 [ 116.877468][ T5312] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.888167][ T5312] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 116.897271][ T5312] BTRFS info (device loop2): using free space tree [ 116.921776][ T4365] usb 1-1: USB disconnect, device number 4 [ 116.921900][ T5326] loop4: p1 p2 p4 < > [ 116.981960][ T5326] loop4: partition table partially beyond EOD, truncated [ 116.996837][ T5326] loop4: p1 start 16777216 is beyond EOD, truncated [ 117.011864][ T5326] loop4: p2 size 515840 extends beyond EOD, truncated [ 117.030201][ T5326] loop4: p4 start 16777216 is beyond EOD, truncated [ 117.114971][ T5312] BTRFS info (device loop2): enabling ssd optimizations [ 117.332566][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 117.354749][ T4270] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.695836][ T126] usb 4-1: USB disconnect, device number 2 [ 118.063477][ T5379] binder: 5378:5379 ioctl c0306201 2000000003c0 returned -22 [ 118.385556][ T5391] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 118.467331][ T5391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.748858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.850876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.878213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.978280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 120.061196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.069823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.103090][ T5450] loop0: detected capacity change from 0 to 128 [ 121.210577][ T5450] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.244459][ T5450] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.351200][ T5457] overlayfs: failed to clone upperpath [ 121.355675][ T4482] udevd[4482]: incorrect ext4 checksum on /dev/loop0 [ 121.404627][ T5450] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:427: inode #2: comm syz.0.328: No space for directory leaf checksum. Please run e2fsck -D. [ 121.556461][ T4266] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 121.605118][ T5466] tipc: Started in network mode [ 121.626579][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 0 [ 121.638070][ T5466] tipc: Node identity ac14140f, cluster identity 4711 [ 121.679381][ T5466] tipc: New replicast peer: 255.255.255.255 [ 121.686361][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 1024 [ 121.729525][ T5466] tipc: Enabled bearer , priority 10 [ 121.742466][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 2048 [ 121.795742][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 3072 [ 121.820858][ T5471] bridge_slave_0: default FDB implementation only supports local addresses [ 121.842407][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 4096 [ 121.850907][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 121.884510][ T5473] loop6: detected capacity change from 0 to 524287999 [ 121.892587][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 5120 [ 121.910212][ T5471] bridge_slave_0: default FDB implementation only supports local addresses [ 121.944932][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 6144 [ 121.975418][ T5469] loop3: detected capacity change from 0 to 8192 [ 121.993405][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 7168 [ 122.027226][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 8192 [ 122.043721][ T4284] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.078723][ T4266] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /57/file0/lost+found: directory fails checksum at offset 9216 [ 122.150765][ T4266] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 122.220138][ T4266] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 122.260499][ T4266] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 122.319757][ T4266] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 122.388679][ T4266] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 122.444145][ T4266] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 122.506182][ T4266] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 122.542546][ T4266] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 122.860093][ T27] tipc: Node number set to 2886997007 [ 123.659409][ T5507] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004 [ 123.789521][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 123.924349][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.974629][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.252170][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.286249][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.407825][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.440178][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.575828][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.638614][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.788833][ T5521] loop3: detected capacity change from 0 to 40427 [ 124.816222][ T5529] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 124.830659][ T5521] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 124.880246][ T5521] F2FS-fs (loop3): invalid crc value [ 124.908409][ T5521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.094285][ T5521] F2FS-fs (loop3): recover fsync data on readonly fs [ 125.143675][ T5521] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 125.178314][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.183126][ T5521] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 125.194820][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.210380][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.219440][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.238311][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 125.245652][ T5521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.254181][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.109841][ T5568] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 126.138053][ T5568] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 126.176506][ T5568] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.374'. [ 126.431466][ T5538] chnl_net:caif_netlink_parms(): no params data found [ 126.495875][ T5580] loop2: detected capacity change from 0 to 64 [ 126.721802][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 126.759371][ T5584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.020436][ T5584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.293943][ T5588] loop3: detected capacity change from 0 to 32768 [ 127.348502][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 127.430698][ T5600] netlink: 300 bytes leftover after parsing attributes in process `syz.4.384'. [ 127.608674][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.615940][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.668708][ T5538] device bridge_slave_0 entered promiscuous mode [ 127.689571][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.697516][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.729201][ T5538] device bridge_slave_1 entered promiscuous mode [ 127.795705][ T4482] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 128.101334][ T5608] loop4: detected capacity change from 0 to 8192 [ 128.114846][ T5538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.216366][ T5608] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.230184][ T48] device hsr_slave_0 left promiscuous mode [ 128.236740][ T48] device hsr_slave_1 left promiscuous mode [ 128.253628][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.261564][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.268972][ T5608] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 128.278987][ T5608] REISERFS (device loop4): using ordered data mode [ 128.286232][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.293763][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.301702][ T48] device bridge_slave_1 left promiscuous mode [ 128.307993][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.318768][ T48] device bridge_slave_0 left promiscuous mode [ 128.325022][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.409974][ T5608] reiserfs: using flush barriers [ 128.425176][ T48] device veth1_macvtap left promiscuous mode [ 128.441609][ T48] device veth0_macvtap left promiscuous mode [ 128.447766][ T48] device veth1_vlan left promiscuous mode [ 128.478777][ T48] device veth0_vlan left promiscuous mode [ 128.498510][ T5608] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.573822][ T5608] REISERFS (device loop4): checking transaction log (loop4) [ 128.652270][ T5608] REISERFS (device loop4): Using r5 hash to sort names [ 128.689762][ T5608] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 128.779321][ T5608] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 129.041585][ T5608] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 129.160618][ T5630] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 129.418186][ T4271] Bluetooth: hci0: command 0x041b tx timeout [ 130.612488][ T48] team0 (unregistering): Port device team_slave_1 removed [ 130.678185][ T48] team0 (unregistering): Port device team_slave_0 removed [ 130.766620][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.867719][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.037822][ T5649] loop3: detected capacity change from 0 to 2048 [ 131.070494][ T5649] /dev/loop3: Can't open blockdev [ 131.344208][ T5656] loop3: detected capacity change from 0 to 128 [ 131.365609][ T5656] /dev/loop3: Can't open blockdev [ 131.508150][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 131.837494][ T48] bond0 (unregistering): Released all slaves [ 131.937872][ T5538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.996658][ T5640] netlink: 96 bytes leftover after parsing attributes in process `syz.4.394'. [ 132.067360][ T5538] team0: Port device team_slave_0 added [ 132.129509][ T5538] team0: Port device team_slave_1 added [ 132.303644][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.339320][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.452164][ T5538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.493387][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.508712][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.628299][ T5538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.702146][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 132.860836][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867203][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.961886][ T5538] device hsr_slave_0 entered promiscuous mode [ 133.014245][ T5538] device hsr_slave_1 entered promiscuous mode [ 133.116310][ T5701] Bluetooth: MGMT ver 1.22 [ 133.584887][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 133.616364][ T5538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.643516][ T5538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.668559][ T5538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.692688][ T5538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.917079][ T5732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 134.013867][ T5538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.051021][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.077854][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.098967][ T4282] Bluetooth: hci3: link tx timeout [ 134.104582][ T5741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.426'. [ 134.114856][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.126790][ T4282] Bluetooth: hci3: link tx timeout [ 134.133170][ T4282] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.148849][ T5538] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.170939][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.206929][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.255685][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.262888][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.278534][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.293335][ T4324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.322233][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.334246][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.353104][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.360330][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.392731][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.402048][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.428736][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.440612][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.452330][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.462412][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.471985][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.480989][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.483514][ T4324] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 134.496708][ T5538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.518180][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.530368][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 134.539659][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.548990][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.558859][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.617112][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.668506][ T4324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.721176][ T4324] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.741765][ T4324] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.753954][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 134.772644][ T5759] netlink: 'syz.1.430': attribute type 15 has an invalid length. [ 134.788109][ T4324] usb 3-1: Manufacturer: syz [ 134.799911][ T4324] usb 3-1: config 0 descriptor?? [ 134.820606][ T26] audit: type=1326 audit(1755196097.238:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091ed8ebe9 code=0x7ffc0000 [ 134.868102][ T5759] netlink: 'syz.1.430': attribute type 18 has an invalid length. [ 134.912312][ T26] audit: type=1326 audit(1755196097.268:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f091ed8ebe9 code=0x7ffc0000 [ 134.951779][ T5759] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.961245][ T5759] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.970203][ T5759] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.979001][ T5759] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.086294][ T5759] device vxlan0 entered promiscuous mode [ 135.125135][ T5764] loop4: detected capacity change from 0 to 512 [ 135.157376][ T5767] loop2: detected capacity change from 0 to 7 [ 135.195427][ T5764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.211469][ T4475] Dev loop2: unable to read RDB block 7 [ 135.217187][ T4475] loop2: unable to read partition table [ 135.232677][ T4324] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 135.242417][ T4475] loop2: partition table beyond EOD, truncated [ 135.253301][ T4324] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 135.284736][ T5767] Dev loop2: unable to read RDB block 7 [ 135.292102][ T5767] loop2: unable to read partition table [ 135.302896][ T4324] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 135.308526][ T5767] loop2: partition table beyond EOD, truncated [ 135.322770][ T5767] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 135.366691][ T5764] EXT4-fs (loop4): 1 orphan inode deleted [ 135.388036][ T5764] EXT4-fs (loop4): 1 truncate cleaned up [ 135.394094][ T5764] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.494559][ T5764] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.433: iget: bad extra_isize 46 (inode size 256) [ 135.608093][ T5764] EXT4-fs (loop4): Remounting filesystem read-only [ 135.630477][ T4324] usb 3-1: USB disconnect, device number 3 [ 135.649474][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.665627][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.706983][ T5538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.827352][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 135.830501][ T5777] fido_id[5777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 136.218145][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 136.709416][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.908165][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 136.923069][ T27] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 136.953352][ T27] usb 3-1: config 0 has no interface number 0 [ 136.994665][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 137.022912][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.045156][ T27] usb 3-1: Product: syz [ 137.062721][ T27] usb 3-1: Manufacturer: syz [ 137.067426][ T27] usb 3-1: SerialNumber: syz [ 137.103335][ T27] usb 3-1: config 0 descriptor?? [ 137.148504][ T27] smsc95xx v2.0.0 [ 137.173951][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.196371][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.295308][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.344230][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.379663][ T5538] device veth0_vlan entered promiscuous mode [ 137.389657][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.419890][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.454599][ T5538] device veth1_vlan entered promiscuous mode [ 137.536243][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.559864][ T27] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 137.573227][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.586544][ T27] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 137.625766][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.654696][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.691634][ T5538] device veth0_macvtap entered promiscuous mode [ 137.715313][ T5538] device veth1_macvtap entered promiscuous mode [ 137.795612][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.816822][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.854943][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.875779][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.896104][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.927455][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.958060][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.038800][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.084042][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.129278][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.145228][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.218574][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.249321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.290248][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.338313][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.379049][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.429440][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.439642][ T27] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 138.464061][ T5538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.466635][ T27] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 138.517431][ T5538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.522609][ T27] usb 3-1: USB disconnect, device number 4 [ 138.585439][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.614819][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.636910][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.675631][ T5538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.708334][ T5538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.736530][ T5538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.765764][ T5538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.207359][ T5425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.237897][ T5425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.319552][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.362271][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.386290][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.437040][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 139.578340][ T4383] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.778122][ T4383] usb 3-1: Using ep0 maxpacket: 16 [ 139.785295][ T4383] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 139.825988][ T4383] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.868206][ T4383] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.925494][ T4383] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.955216][ T4383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.985585][ T4383] usb 3-1: Product: syz [ 140.005059][ T4383] usb 3-1: Manufacturer: syz [ 140.028229][ T4383] usb 3-1: SerialNumber: syz [ 140.353948][ T5860] loop3: detected capacity change from 0 to 32768 [ 140.467585][ T4383] usb 3-1: 0:2 : does not exist [ 140.678071][ T126] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 140.892038][ T126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.928739][ T126] usb 4-1: not running at top speed; connect to a high speed hub [ 140.978701][ T126] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 140.987007][ T126] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 141.038332][ T126] usb 4-1: config 8 has no interface number 0 [ 141.045162][ T126] usb 4-1: config 8 interface 24 has no altsetting 0 [ 141.080867][ T126] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 141.118065][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.146543][ T126] usb 4-1: Product: syz [ 141.156626][ T126] usb 4-1: Manufacturer: syz [ 141.176879][ T126] usb 4-1: SerialNumber: syz [ 141.390706][ T5886] loop4: detected capacity change from 0 to 32768 [ 141.415274][ T126] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 141.442100][ T5886] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 141.468675][ T126] usb 4-1: USB disconnect, device number 3 [ 141.610878][ T4383] usb 3-1: USB disconnect, device number 5 [ 141.641564][ T4482] udevd[4482]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.839746][ T4475] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 142.158661][ T126] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.312672][ T5921] overlayfs: failed to clone upperpath [ 142.324917][ T5921] overlayfs: failed to clone upperpath [ 142.348206][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 142.355718][ T126] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 142.372437][ T126] usb 5-1: config 0 has no interface number 0 [ 142.387788][ T126] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 142.422797][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.449311][ T126] usb 5-1: Product: syz [ 142.455864][ T126] usb 5-1: Manufacturer: syz [ 142.472446][ T126] usb 5-1: SerialNumber: syz [ 142.489976][ T126] usb 5-1: config 0 descriptor?? [ 142.502380][ T126] smsc95xx v2.0.0 [ 142.648454][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.838225][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 142.845884][ T27] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.868074][ T27] usb 3-1: config 0 has no interface number 0 [ 142.874282][ T27] usb 3-1: config 0 interface 184 has no altsetting 0 [ 142.904668][ T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.915853][ T126] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 142.936451][ T126] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 142.948067][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.958236][ T27] usb 3-1: Product: syz [ 142.968433][ T27] usb 3-1: Manufacturer: syz [ 142.973118][ T27] usb 3-1: SerialNumber: syz [ 142.998983][ T27] usb 3-1: config 0 descriptor?? [ 143.023894][ T27] smsc75xx v1.0.0 [ 143.788225][ T126] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 143.813063][ T126] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 143.845588][ T126] usb 5-1: USB disconnect, device number 3 [ 144.124045][ T5944] loop5: detected capacity change from 0 to 32768 [ 144.153898][ T5944] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 144.428379][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 144.458407][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 144.488467][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 144.545442][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 144.589134][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 144.619060][ T4482] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 144.643128][ T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 144.673836][ T27] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 144.712889][ T27] usb 3-1: USB disconnect, device number 6 [ 145.214481][ T5987] loop5: detected capacity change from 0 to 1024 [ 145.686813][ T5966] loop3: detected capacity change from 0 to 32768 [ 146.014735][ T26] audit: type=1326 audit(1755196108.428:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.3.496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f091ed8ebe9 code=0x0 [ 146.143371][ T4482] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 147.182833][ T6028] netlink: 300 bytes leftover after parsing attributes in process `syz.3.499'. [ 147.580793][ T6033] loop3: detected capacity change from 0 to 1024 [ 147.610031][ T6033] /dev/loop3: Can't open blockdev [ 147.671613][ T6018] loop5: detected capacity change from 0 to 32768 [ 147.706320][ T6018] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.497 (6018) [ 147.738086][ T6018] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.754048][ T6018] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 147.785171][ T6018] BTRFS info (device loop5): using free space tree [ 147.798164][ T4341] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.947073][ T6018] BTRFS info (device loop5): enabling ssd optimizations [ 147.998113][ T4341] usb 3-1: Using ep0 maxpacket: 16 [ 148.005334][ T4341] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 148.071952][ T4341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.132907][ T4341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.172572][ T4341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.209661][ T4341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.273596][ T4341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.339534][ T4341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.431019][ T4341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.501314][ T4341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.543854][ T4341] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 148.574535][ T4341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 148.625864][ T4341] usb 3-1: SerialNumber: syz [ 148.654778][ T5538] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.672341][ T4341] usb 3-1: config 0 descriptor?? [ 148.707172][ T4341] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 148.739871][ T6068] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 148.911477][ T6034] input: syz1 as /devices/virtual/input/input7 [ 149.003197][ T3623] bcm5974 3-1:0.0: could not read from device [ 149.093155][ T6080] loop4: detected capacity change from 0 to 1024 [ 149.232316][ T4341] usb 3-1: USB disconnect, device number 7 [ 149.966535][ T4271] Bluetooth: hci3: link tx timeout [ 149.971929][ T4271] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.596076][ T6120] binder: 6119:6120 ioctl c0306201 2000000003c0 returned -22 [ 151.845027][ T6128] loop5: detected capacity change from 0 to 2048 [ 151.909219][ T6128] EXT4-fs: Ignoring removed oldalloc option [ 151.989176][ T6128] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 152.057109][ T26] audit: type=1800 audit(1755196114.468:535): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.521" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 152.110895][ T6128] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 152.316098][ T6140] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 152.326534][ T48] Trying to write to read-only block-device loop5 [ 152.328922][ T5538] Trying to write to read-only block-device loop5 [ 152.339767][ T6142] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004 [ 152.350254][ T48] Trying to write to read-only block-device loop5 [ 152.368084][ T5538] Trying to write to read-only block-device loop5 [ 152.387140][ T5538] Trying to write to read-only block-device loop5 [ 152.393952][ T48] Trying to write to read-only block-device loop5 [ 152.400755][ T48] Trying to write to read-only block-device loop5 [ 152.409663][ T5538] EXT4-fs (loop5): unmounting filesystem. [ 152.411659][ T6140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.429774][ T5538] Trying to write to read-only block-device loop5 [ 152.447221][ T6110] loop2: detected capacity change from 0 to 32768 [ 152.478261][ T6134] Trying to write to read-only block-device loop5 [ 152.486122][ T6110] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 152.842216][ T6160] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 152.881946][ T6160] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 152.894146][ T6160] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.534'. [ 152.939699][ T4482] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 153.481106][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 153.520582][ T6182] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.529624][ T6182] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.538454][ T6182] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.547827][ T6182] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.709952][ T6182] device vxlan0 entered promiscuous mode [ 153.755425][ T6191] netlink: 'syz.5.545': attribute type 1 has an invalid length. [ 153.918111][ T6199] netlink: 'syz.5.548': attribute type 1 has an invalid length. [ 153.925890][ T6199] netlink: 'syz.5.548': attribute type 4 has an invalid length. [ 153.934306][ T6199] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.548'. [ 154.064591][ T6178] loop2: detected capacity change from 0 to 32768 [ 154.098015][ T6178] XFS (loop2): Mounting V5 Filesystem [ 154.203795][ T6178] XFS (loop2): Ending clean mount [ 154.235886][ T6178] XFS (loop2): Quotacheck needed: Please wait. [ 154.377795][ T6178] XFS (loop2): Quotacheck: Done. [ 154.454944][ T6178] XFS (loop2): User initiated shutdown received. [ 154.479086][ T6178] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 154.535134][ T6178] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 154.718388][ T4270] XFS (loop2): Unmounting Filesystem [ 156.088267][ T6267] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 156.190833][ T6268] netlink: 'syz.3.566': attribute type 4 has an invalid length. [ 156.536439][ T6259] loop2: detected capacity change from 0 to 8192 [ 156.814717][ T6254] loop4: detected capacity change from 0 to 32768 [ 156.872530][ T6254] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 157.994708][ T4284] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 158.341363][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.579'. [ 158.370996][ T6310] netlink: 'syz.5.579': attribute type 29 has an invalid length. [ 158.391361][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.579'. [ 158.456919][ T6304] loop4: detected capacity change from 0 to 4096 [ 158.519773][ T6304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.822487][ T6323] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 158.856511][ T6282] loop3: detected capacity change from 0 to 32768 [ 158.868727][ T6323] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 158.924175][ T6282] /dev/loop3: Can't open blockdev [ 159.298914][ T6328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.321015][ T6328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 159.332105][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 159.348313][ T6328] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 159.368234][ T4341] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.395977][ T6328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.434885][ T6328] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 159.485124][ T6328] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 159.546772][ T6328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.558197][ T4341] usb 6-1: Using ep0 maxpacket: 8 [ 159.567676][ T4341] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 159.578348][ T6328] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 159.630344][ T6328] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 159.957787][ T6328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.270119][ T6328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 160.378209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.542156][ T6328] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 160.568605][ T4341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.576680][ T4341] usb 6-1: Product: syz [ 160.581275][ T4341] usb 6-1: Manufacturer: syz [ 160.585902][ T4341] usb 6-1: SerialNumber: syz [ 160.607429][ T4341] usb 6-1: config 0 descriptor?? [ 160.618102][ T4341] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 160.624702][ T6328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.630960][ T6328] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 160.638074][ T6328] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 160.862017][ T6357] loop4: detected capacity change from 0 to 4096 [ 160.935466][ T6357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.999062][ T4338] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.188252][ T4338] usb 4-1: Using ep0 maxpacket: 8 [ 161.196271][ T4338] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 161.225274][ T6370] loop2: detected capacity change from 0 to 16 [ 161.238527][ T4338] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 161.259877][ T4271] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.290683][ T4338] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 161.310923][ T6370] erofs: (device loop2): mounted with root inode @ nid 36. [ 161.343990][ T4338] usb 4-1: Product: syz [ 161.368094][ T4338] usb 4-1: Manufacturer: syz [ 161.373233][ T4338] usb 4-1: SerialNumber: syz [ 161.406993][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 161.418222][ T4271] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.435728][ T4338] usb 4-1: config 0 descriptor?? [ 161.588417][ T4271] Bluetooth: hci4: command 0x0c1a tx timeout [ 161.695115][ T4338] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 161.708414][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 161.757263][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 161.848899][ T4341] input: sonixj as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 161.978202][ T4271] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.094393][ T4341] usb 6-1: USB disconnect, device number 2 [ 162.148917][ T6381] loop2: detected capacity change from 0 to 512 [ 162.226964][ T6381] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.601: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 162.425117][ T6381] EXT4-fs error (device loop2): ext4_quota_enable:7025: comm syz.2.601: Bad quota inode: 3, type: 0 [ 162.479193][ T6381] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 162.504883][ T6381] EXT4-fs (loop2): mount failed [ 162.598137][ T4324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.698368][ T4271] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.788044][ T4324] usb 5-1: Using ep0 maxpacket: 16 [ 162.810302][ T4324] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.831977][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.846644][ T4324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.867459][ T4324] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.886316][ T4324] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.906518][ T4338] gspca_sunplus: reg_w_riv err -71 [ 162.916199][ T4338] sunplus: probe of 4-1:0.0 failed with error -71 [ 162.926400][ T4324] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 162.947269][ T4338] usb 4-1: USB disconnect, device number 4 [ 162.955592][ T4324] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 162.975953][ T4324] usb 5-1: Manufacturer: syz [ 162.986557][ T4324] usb 5-1: config 0 descriptor?? [ 163.338303][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 163.348179][ T4324] rc_core: IR keymap rc-hauppauge not found [ 163.354239][ T4324] Registered IR keymap rc-empty [ 163.360153][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.398200][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.430598][ T4324] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 163.459549][ T4324] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 163.498262][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 163.517327][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.551271][ T6419] KVM: debugfs: duplicate directory 6419-5 [ 163.608123][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.650065][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.658509][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 163.698230][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.733573][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.770877][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.828104][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.878109][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.918185][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.951556][ T4324] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 164.003379][ T4324] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 164.016402][ T4324] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 164.055709][ T4324] usb 5-1: USB disconnect, device number 4 [ 164.068234][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 164.331102][ T6447] device ip6gre1 entered promiscuous mode [ 164.778371][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 164.871284][ T6463] loop5: detected capacity change from 0 to 4096 [ 164.895391][ T6463] /dev/loop5: Can't open blockdev [ 165.046760][ T6466] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 165.084808][ T6466] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 165.462612][ T6472] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.500122][ T6472] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 165.513489][ T6472] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 165.533150][ T6472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 165.567626][ T6472] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 165.640509][ T6472] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 165.673230][ T6472] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 165.691356][ T6472] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 165.715061][ T6472] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 165.738219][ T6472] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.760072][ T6472] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 165.798317][ T6472] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 165.811710][ T6472] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.813400][ T6486] loop3: detected capacity change from 0 to 512 [ 165.817907][ T6472] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 165.836330][ T6472] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 165.859155][ T6486] /dev/loop3: Can't open blockdev [ 166.239898][ T6479] loop5: detected capacity change from 0 to 32768 [ 166.313960][ T4482] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.318548][ T6502] loop4: detected capacity change from 0 to 512 [ 166.395965][ T6502] EXT4-fs: Ignoring removed orlov option [ 166.428342][ T6502] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 166.493101][ T6502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 166.609963][ T6502] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.639: corrupted in-inode xattr [ 166.697642][ T6502] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.639: couldn't read orphan inode 15 (err -117) [ 166.734644][ T6514] loop3: detected capacity change from 0 to 512 [ 166.747342][ T6502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.808656][ T6514] /dev/loop3: Can't open blockdev [ 167.099067][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 167.158647][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 167.212277][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 167.253384][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 167.304760][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 167.350930][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.362162][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 167.449418][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 167.490988][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 167.545638][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 167.578151][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.599120][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 167.738247][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.818058][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.824180][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.675040][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 168.841479][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.040313][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.211816][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.419038][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 169.429664][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.506688][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.667'. [ 169.554578][ T6567] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.563738][ T6567] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.573013][ T6567] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.581909][ T6567] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.658286][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 169.721973][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.667'. [ 169.908433][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 169.914526][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 170.220872][ T4271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.232242][ T4271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.245827][ T4271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.254832][ T4271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.262615][ T4271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.271315][ T4271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.578218][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.784468][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.803823][ T14] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.817501][ T14] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.866207][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=aca1, bcdDevice= 0.40 [ 170.866243][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.866264][ T14] usb 3-1: Product: syz [ 170.866279][ T14] usb 3-1: Manufacturer: syz [ 170.866296][ T14] usb 3-1: SerialNumber: syz [ 171.895697][ T14] cdc_ncm 3-1:1.0: bind() failure [ 171.907587][ T14] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 171.940458][ T14] cdc_ncm 3-1:1.1: bind() failure [ 172.024147][ T6583] chnl_net:caif_netlink_parms(): no params data found [ 172.099817][ T14] usb 3-1: USB disconnect, device number 8 [ 172.308220][ T4271] Bluetooth: hci4: command 0x0409 tx timeout [ 172.440536][ T41] device hsr_slave_0 left promiscuous mode [ 172.464570][ T41] device hsr_slave_1 left promiscuous mode [ 172.508528][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.553642][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.595047][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.611815][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.640384][ T41] device bridge_slave_1 left promiscuous mode [ 172.655943][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.733083][ T41] device bridge_slave_0 left promiscuous mode [ 172.745350][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.883879][ T41] device veth1_macvtap left promiscuous mode [ 172.917041][ T41] device veth0_macvtap left promiscuous mode [ 172.950810][ T41] device veth1_vlan left promiscuous mode [ 172.994090][ T41] device veth0_vlan left promiscuous mode [ 173.992738][ T41] bond1 (unregistering): Released all slaves [ 174.378252][ T4271] Bluetooth: hci4: command 0x041b tx timeout [ 174.427530][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801bb25000: rx timeout, send abort [ 174.441813][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801bb25000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.229882][ T6679] general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] PREEMPT SMP KASAN [ 175.241672][ T6679] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 175.250125][ T6679] CPU: 0 PID: 6679 Comm: syz.2.692 Not tainted 6.1.147-syzkaller #0 [ 175.258221][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.268311][ T6679] RIP: 0010:h5_recv+0x149/0x8c0 [ 175.273213][ T6679] Code: 89 54 24 70 48 89 4c 24 28 48 c1 e9 03 48 89 4c 24 30 48 89 44 24 38 48 c1 e8 03 48 89 44 24 68 4c 89 74 24 18 48 8b 44 24 40 <80> 3c 18 00 74 08 4c 89 f7 e8 99 dd 88 fa 4d 8b 36 31 ff 4c 89 f6 [ 175.292868][ T6679] RSP: 0018:ffffc9000506fc40 EFLAGS: 00010202 [ 175.298941][ T6679] RAX: 000000000000005f RBX: dffffc0000000000 RCX: 000000000000005e [ 175.306905][ T6679] RDX: 1ffff1100aefa582 RSI: 000000000000005f RDI: 0000000000000000 [ 175.314893][ T6679] RBP: ffffc9000506fd80 R08: dffffc0000000000 R09: ffffed100aefa584 [ 175.322878][ T6679] R10: ffffed100aefa584 R11: 1ffff1100aefa583 R12: 0000000000000001 [ 175.330868][ T6679] R13: ffff8880577d2c00 R14: 00000000000002f8 R15: 0000000000000061 [ 175.338885][ T6679] FS: 00007fb8d94276c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 175.347816][ T6679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.354395][ T6679] CR2: 00007fb8d9426f98 CR3: 0000000061fe7000 CR4: 00000000003506f0 [ 175.362369][ T6679] Call Trace: [ 175.365645][ T6679] [ 175.368583][ T6679] ? trace_contention_end+0x5f/0x170 [ 175.373875][ T6679] ? h5_setup+0xb0/0xb0 [ 175.378038][ T6679] ? rcu_read_lock_any_held+0xb0/0x120 [ 175.383526][ T6679] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 175.388830][ T6679] ? mutex_lock_nested+0x10/0x10 [ 175.393780][ T6679] hci_uart_tty_receive+0x188/0x210 [ 175.398974][ T6679] ? hci_uart_tty_poll+0x10/0x10 [ 175.403910][ T6679] tiocsti+0x1f6/0x280 [ 175.407975][ T6679] ? signal_pending+0xa0/0xa0 [ 175.412649][ T6679] tty_ioctl+0x34e/0xba0 [ 175.416979][ T6679] ? security_file_ioctl+0x7c/0xa0 [ 175.422094][ T6679] ? tty_get_icount+0xa0/0xa0 [ 175.426763][ T6679] __se_sys_ioctl+0xfa/0x170 [ 175.431349][ T6679] do_syscall_64+0x4c/0xa0 [ 175.435761][ T6679] ? clear_bhb_loop+0x60/0xb0 [ 175.440434][ T6679] ? clear_bhb_loop+0x60/0xb0 [ 175.445122][ T6679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.451019][ T6679] RIP: 0033:0x7fb8d858ebe9 [ 175.455452][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.475068][ T6679] RSP: 002b:00007fb8d9427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.483479][ T6679] RAX: ffffffffffffffda RBX: 00007fb8d87b6090 RCX: 00007fb8d858ebe9 [ 175.491460][ T6679] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 175.499454][ T6679] RBP: 00007fb8d8611e19 R08: 0000000000000000 R09: 0000000000000000 [ 175.507540][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.515520][ T6679] R13: 00007fb8d87b6128 R14: 00007fb8d87b6090 R15: 00007ffd3b6be808 [ 175.523502][ T6679] [ 175.526602][ T6679] Modules linked in: [ 175.576221][ T6679] ---[ end trace 0000000000000000 ]--- [ 175.606971][ T6679] RIP: 0010:h5_recv+0x149/0x8c0 [ 175.612021][ T6679] Code: 89 54 24 70 48 89 4c 24 28 48 c1 e9 03 48 89 4c 24 30 48 89 44 24 38 48 c1 e8 03 48 89 44 24 68 4c 89 74 24 18 48 8b 44 24 40 <80> 3c 18 00 74 08 4c 89 f7 e8 99 dd 88 fa 4d 8b 36 31 ff 4c 89 f6 [ 175.645048][ T6679] RSP: 0018:ffffc9000506fc40 EFLAGS: 00010202 [ 175.660771][ T6679] RAX: 000000000000005f RBX: dffffc0000000000 RCX: 000000000000005e [ 175.669798][ T6679] RDX: 1ffff1100aefa582 RSI: 000000000000005f RDI: 0000000000000000 [ 175.678605][ T41] team0 (unregistering): Port device team_slave_1 removed [ 175.698155][ T6679] RBP: ffffc9000506fd80 R08: dffffc0000000000 R09: ffffed100aefa584 [ 175.706346][ T6679] R10: ffffed100aefa584 R11: 1ffff1100aefa583 R12: 0000000000000001 [ 175.724922][ T6679] R13: ffff8880577d2c00 R14: 00000000000002f8 R15: 0000000000000061 [ 175.746189][ T6679] FS: 00007fb8d94276c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 175.757515][ T6679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.781740][ T41] team0 (unregistering): Port device team_slave_0 removed [ 175.789113][ T6679] CR2: 00007fd1777f1ff8 CR3: 0000000061fe7000 CR4: 00000000003506f0 [ 175.811449][ T6679] Kernel panic - not syncing: Fatal exception [ 175.817844][ T6679] Kernel Offset: disabled [ 175.822170][ T6679] Rebooting in 86400 seconds..