last executing test programs: 30.057454168s ago: executing program 3 (id=275): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet6_int(r4, 0x29, 0xd0, 0x0, &(0x7f0000000140)) 27.605554708s ago: executing program 3 (id=283): socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x90, 0x0, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x4c}, {}, {0x0, 0xfd}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 27.276839585s ago: executing program 3 (id=284): r0 = socket$alg(0x26, 0x5, 0x0) ioperm(0x0, 0x5, 0x6) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c00031000", @ANYRESHEX], 0xf) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, 0x0, &(0x7f00000005c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad5684c5820fae9d6d6a3292ea54c7beef915d564c90c200", 0x18) 21.862841516s ago: executing program 3 (id=291): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB='dyn']) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001800190f00003fffffffda060a00000000e8000cdd0000040d000f00ea11c21d00050000", 0x28}], 0x1) 17.747292602s ago: executing program 3 (id=299): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f00000001c0)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2000000000000000840000000200", @ANYRES32, @ANYBLOB="18000000000000008400000000000000040009004b05080018000000000000008400000006000000020000000000000018000000000000008400000000000000060064000b0010001800000000000000840000000000000007003f000700030030000000000000008400000001000000ff010e0008000000010001000c0000000100000007000000b50a0000", @ANYRES32, @ANYBLOB="18000000000000008400000000000000891e00016b0800001800000000000000840000000000000080000e000000acfe18"], 0xf8}, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) 17.273779991s ago: executing program 3 (id=301): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = eventfd(0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 11.508289081s ago: executing program 0 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000640), 0x4) 11.081667036s ago: executing program 2 (id=323): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000180), &(0x7f00000001c0)=0x18) 10.729240544s ago: executing program 2 (id=324): syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x6, 0x10}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x9}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x0, 0x0, [], 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x0, 0x1, 0x8009, 0x8, 0xbc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0xb, 0x81, {0x7, 0x25, 0x1, 0x83, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x2, 0x4, '?R'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1, 0xc0, 0x2, {0x7, 0x25, 0x1, 0x0, 0xd2, 0xc00}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x8, 0x50, 0x8, 0x10, 0xfd}, 0x34, &(0x7f0000000580)={0x5, 0xf, 0x34, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x0, 0xe, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2938817c362b0cbeae5391d35b97bddf"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x9, 0x7, 0x401}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1a, 0xf0, 0x7}]}, 0x5, [{0xbc, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x804}}, {0xea, &(0x7f0000000400)=@string={0xea, 0x3, "1c74b45720c73d860f7b9eafe895c6edf04c237f68fceedacec4fccc1aa49726d4d27f570d49f1918a56c1848a2b4b3b46739d57fec3e18e9faefe2baea0f1cf90395bf98e5cd04933fcf3b72ee46e61d6aef1a80e8e5abf743f33eda770cd2ec07b1b6bd353ca9acffda53c8787587bf164be3f8432cb219d2244c73d4a952f0414c478e3286f2e5405b3e2a745916d466690743d0fbe607a1c17b02c10c66003a152ed2e415c191764c75f14004e0f43037c44c109124fb695ffdbca7d2ef6361fbccb963dfe73b51782fd214abbbdca180f73f4e73e33a80491af9a18a9706da7e08671f10a8b"}}, {0x7c, &(0x7f0000000300)=@string={0x7c, 0x3, "a7507558bc03689a8d23fd8090af9b95a90a5a752b4ef2282bb733eb162795f58b28126ee29c7914374f260d42522f4b910593df7f74358ea01f4436b55858037d5a21a07897e887f61a6867dc42504a03429ad24e64a3f1e78e33f685205aa7dfecb862537c6c19d70449979d10eeaad6d6265f2b7007ce84a0"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x140c}}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4000, &(0x7f00000000c0)={[{@noquota}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@norecovery}, {@abort}, {@minixdf}]}, 0x5, 0x4a8, &(0x7f0000000a40)="$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") r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0xfdef}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e370c0c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240), 0xc) 9.125665606s ago: executing program 0 (id=327): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x2de, &(0x7f00000003c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.24484575s ago: executing program 4 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)={0x1c, r1, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 5.709327224s ago: executing program 4 (id=333): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getpid() ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x14, 0x1, 0x0, "3271bdf0f2f20d55806b26b1d72197edb1439b1c4200"}) 5.177364787s ago: executing program 4 (id=335): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000280)='./file0\x00'}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000500)=""/149, 0x95}], 0x6, &(0x7f0000000700)=""/212, 0xd4}, 0x200}], 0x1, 0x2000, &(0x7f0000000800)) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$sndmidi(&(0x7f0000000080), 0xca, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@mask_fadd={0x58, 0x10c, 0x8, {{}, 0x0, 0x0}}], 0x58}, 0x0) io_setup(0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000001740)={0xa, @sdr}) 4.728898954s ago: executing program 2 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000640), 0x4) 3.965999536s ago: executing program 4 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 3.818200798s ago: executing program 4 (id=338): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0xc400941d, 0x0) 3.725337266s ago: executing program 0 (id=339): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x281) write$binfmt_elf64(r1, 0x0, 0x685) io_setup(0x800, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.497195275s ago: executing program 1 (id=340): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', '', [], 0xa, "4c64c9d12c81ec1a601a691e574a22259925dc8648707ece518c83fc01a4a5aad7b1507405ea15263112dfca76de"}, 0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$read(0x13, 0x0, 0x0, 0x202) 2.837466648s ago: executing program 0 (id=341): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000), 0xe) 2.507008885s ago: executing program 1 (id=342): sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0], 0xd0}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000"], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1}, 0x20) 2.385600325s ago: executing program 0 (id=343): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xae}, {0x7, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x7}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.217278829s ago: executing program 1 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0xa4}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20) recvmmsg(r4, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/170, 0xaa}], 0x1}}], 0x1, 0x0, 0x0) 2.147305255s ago: executing program 0 (id=345): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x66, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r2}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080), 0xc) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '\'%'}], 0xa, "df29f19101d36746a344b4f1101c7fe601af5606e102f25a03bfb0cce5ff01156eeb606ee99f6cecedfb05f245230fff05769b1b7a1c707f8e6b988eb0eea857f4d8f100f40ed1bcf07b16acef973873fcd03096fbafea923dee3878df00000000000000"}, 0x77) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r7, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_mtu=0x3a}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x8, 0x2, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r8}, &(0x7f0000001180), &(0x7f0000001200)}, 0x20) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.571362881s ago: executing program 2 (id=346): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = eventfd(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.508199817s ago: executing program 2 (id=347): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f00000001c0)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2000000000000000840000000200000000800c0008", @ANYRES32, @ANYBLOB="18000000000000008400000000000000040009004b05080018000000000000008400000006000000020000000000000018000000000000008400000000000000060064000b0010001800000000000000840000000000000007003f000700030030000000000000008400000001000000ff010e0008000000010001000c0000000100000007000000b50a0000", @ANYRES32, @ANYBLOB="18000000000000008400000000000000891e00016b0800001800000000000000840000000000000080000e000000acfe18"], 0xf8}, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) 753.840778ms ago: executing program 2 (id=348): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x2de, &(0x7f00000003c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 753.544938ms ago: executing program 1 (id=349): io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="8d5deea6fee55c0e6cadc87aee0e7011ca6e4cf4c17c01c7a8c4508a7330886f33a7e25d082ead6f7ac99aa662b61987570a1171057bcb2888d411fd2a7c869847f830bc98437fffc84873e7d0e65c0cf7014748eb920ba5d50be661aa42b1f3b0229def38997ba0d41d835e54c48d409f68f35737d979ed8dbba9c1adf39482c65c", 0x82}]) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 753.192679ms ago: executing program 1 (id=350): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x281) write$binfmt_elf64(r1, 0x0, 0x685) io_setup(0x800, &(0x7f0000000500)) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 156.648747ms ago: executing program 4 (id=351): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x1c}], 0x1}, 0x0) 0s ago: executing program 1 (id=352): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 5] 9pnet_fd: Insufficient options for proto=fd [ 75.876686][ T3726] team0: Port device team_slave_1 added [ 75.957251][ T3827] ALSA: seq fatal error: cannot create timer (-22) [ 75.996084][ T3726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.003056][ T3726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.161884][ T3726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.204986][ T3726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.232302][ T3726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.323785][ T3554] Bluetooth: hci5: command tx timeout [ 76.341605][ T3726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.405203][ T7] cfg80211: failed to load regulatory.db [ 76.676894][ T3726] device hsr_slave_0 entered promiscuous mode [ 76.700692][ T3726] device hsr_slave_1 entered promiscuous mode [ 76.713937][ T3843] tmpfs: Unknown parameter 'mpo7terlbave:0' [ 76.731030][ T3726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.773387][ T3843] loop4: detected capacity change from 0 to 128 [ 76.790182][ T3726] Cannot create hsr debugfs directory [ 76.811053][ T3843] FAT-fs (loop4): Unrecognized mount option "allow_utime=0000000000000000harset=maccenteuro" or missing value [ 76.997029][ T3850] [U] i [ 77.000177][ T3850] [U] % [ 77.019018][ T3849] [U] VA* [ 77.398627][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.409712][ T2963] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.452141][ T3554] Bluetooth: hci1: command tx timeout [ 77.474426][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.485481][ T26] audit: type=1326 audit(1720242432.511:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3841 comm="syz.4.74" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68bd75bd9 code=0x0 [ 77.515494][ T3739] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.544153][ T3739] device bridge_slave_0 entered promiscuous mode [ 77.616433][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.663959][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.676838][ T3739] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.702817][ T3739] device bridge_slave_1 entered promiscuous mode [ 77.873914][ T2963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.893075][ T2963] usb 4-1: config 1 has no interface number 0 [ 77.927801][ T2963] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.945690][ T3857] 9pnet_fd: Insufficient options for proto=fd [ 77.970373][ T2963] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 78.000249][ T2963] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.036617][ T3739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.129042][ T3739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.184147][ T2963] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.218519][ T3859] loop4: detected capacity change from 0 to 4096 [ 78.233677][ T2963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.274357][ T3645] bio_check_eod: 3016 callbacks suppressed [ 78.274378][ T3645] syz.1.2: attempt to access beyond end of device [ 78.274378][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 78.277814][ T2963] usb 4-1: Product: syz [ 78.281002][ T3645] syz.1.2: attempt to access beyond end of device [ 78.281002][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 78.313986][ T3645] syz.1.2: attempt to access beyond end of device [ 78.313986][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 78.328445][ T3645] syz.1.2: attempt to access beyond end of device [ 78.328445][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 78.344585][ T3645] syz.1.2: attempt to access beyond end of device [ 78.344585][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 78.358999][ T3645] syz.1.2: attempt to access beyond end of device [ 78.358999][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 78.374939][ T3645] syz.1.2: attempt to access beyond end of device [ 78.374939][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 78.392025][ T2963] usb 4-1: Manufacturer: syz [ 78.405920][ T2963] usb 4-1: SerialNumber: syz [ 78.418799][ T3645] syz.1.2: attempt to access beyond end of device [ 78.418799][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 78.434959][ T3645] syz.1.2: attempt to access beyond end of device [ 78.434959][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 78.449459][ T3645] syz.1.2: attempt to access beyond end of device [ 78.449459][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 78.580903][ T3739] team0: Port device team_slave_0 added [ 78.616936][ T3739] team0: Port device team_slave_1 added [ 78.709340][ T3739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.739658][ T3739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.870973][ T3739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.920798][ T3739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.967791][ T3739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.077448][ T3739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.253304][ T3739] device hsr_slave_0 entered promiscuous mode [ 79.292944][ T3739] device hsr_slave_1 entered promiscuous mode [ 79.321864][ T3739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.350220][ T3852] netlink: 224 bytes leftover after parsing attributes in process `syz.3.77'. [ 79.367593][ T3739] Cannot create hsr debugfs directory [ 79.425371][ T2963] cdc_ncm 4-1:1.1: bind() failure [ 79.639133][ T22] usb 4-1: USB disconnect, device number 3 [ 80.317749][ T3739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.439259][ T3883] ALSA: seq fatal error: cannot create timer (-22) [ 80.655838][ T3739] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.852813][ T3739] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.006700][ T3739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.425229][ T3726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.648160][ T3726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.739893][ T3726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.838428][ T3880] loop2: detected capacity change from 0 to 32768 [ 81.915881][ T3880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.84 (3880) [ 81.955768][ T3726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.063241][ T11] device hsr_slave_0 left promiscuous mode [ 82.093803][ T153] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.185258][ T11] device hsr_slave_1 left promiscuous mode [ 82.205452][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.249170][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.291054][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.329515][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.343620][ T153] usb 4-1: Using ep0 maxpacket: 32 [ 82.388698][ T3880] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.401408][ T11] device bridge_slave_1 left promiscuous mode [ 82.426039][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.453811][ T3880] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.473876][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.506421][ T3880] BTRFS info (device loop2): metadata ratio 2 [ 82.512549][ T3880] BTRFS info (device loop2): enabling ssd optimizations [ 82.520293][ T153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.583701][ T153] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.603065][ T3880] BTRFS info (device loop2): force zlib compression, level 3 [ 82.643831][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.654564][ T3880] BTRFS info (device loop2): use zlib compression, level 3 [ 82.661805][ T3880] BTRFS info (device loop2): turning on flush-on-commit [ 82.709242][ T153] usb 4-1: config 0 descriptor?? [ 82.764512][ T3880] BTRFS info (device loop2): max_inline at 0 [ 82.774832][ T11] device bridge_slave_0 left promiscuous mode [ 82.781154][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.792089][ T153] hub 4-1:0.0: USB hub found [ 82.813885][ T3880] BTRFS info (device loop2): using free space tree [ 82.997066][ T3894] netlink: 104 bytes leftover after parsing attributes in process `syz.3.87'. [ 83.074008][ T153] hub 4-1:0.0: 1 port detected [ 83.121601][ T3880] BTRFS error (device loop2): open_ctree failed [ 83.194308][ T11] device veth1_macvtap left promiscuous mode [ 83.224185][ T11] device veth0_macvtap left promiscuous mode [ 83.230319][ T11] device veth1_vlan left promiscuous mode [ 83.283867][ T11] device veth0_vlan left promiscuous mode [ 83.283939][ T3645] bio_check_eod: 2919 callbacks suppressed [ 83.283952][ T3645] syz.1.2: attempt to access beyond end of device [ 83.283952][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 83.311354][ T3645] syz.1.2: attempt to access beyond end of device [ 83.311354][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.326307][ T3645] syz.1.2: attempt to access beyond end of device [ 83.326307][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 83.342104][ T3645] syz.1.2: attempt to access beyond end of device [ 83.342104][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.356651][ T3645] syz.1.2: attempt to access beyond end of device [ 83.356651][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 83.372758][ T3645] syz.1.2: attempt to access beyond end of device [ 83.372758][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.418713][ T3645] syz.1.2: attempt to access beyond end of device [ 83.418713][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 83.435228][ T3645] syz.1.2: attempt to access beyond end of device [ 83.435228][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.451029][ T3645] syz.1.2: attempt to access beyond end of device [ 83.451029][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 83.466871][ T3645] syz.1.2: attempt to access beyond end of device [ 83.466871][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.744730][ T3929] hub 4-1:0.0: activate --> -90 [ 83.779870][ T3932] tmpfs: Unknown parameter 'mpo7terlbave:0' [ 83.841119][ T3932] loop2: detected capacity change from 0 to 128 [ 83.914928][ T3932] FAT-fs (loop2): Unrecognized mount option "allow_utime=0000000000000000harset=maccenteuro" or missing value [ 84.391863][ T153] usb 4-1: USB disconnect, device number 4 [ 84.403805][ T3929] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 84.453091][ T26] audit: type=1326 audit(1720242439.471:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3931 comm="syz.2.88" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x0 [ 84.475363][ T3929] usb 4-1-port1: attempt power cycle [ 85.031267][ T11] team0 (unregistering): Port device team_slave_1 removed [ 85.438826][ T11] team0 (unregistering): Port device team_slave_0 removed [ 85.555090][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.710870][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.853475][ T11] bond0 (unregistering): Released all slaves [ 87.485625][ T3739] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.507440][ T3739] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.547365][ T3739] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.569340][ T3739] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.293754][ T3645] bio_check_eod: 2892 callbacks suppressed [ 88.293771][ T3645] syz.1.2: attempt to access beyond end of device [ 88.293771][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.315462][ T3645] syz.1.2: attempt to access beyond end of device [ 88.315462][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.329850][ T3645] syz.1.2: attempt to access beyond end of device [ 88.329850][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.346200][ T3645] syz.1.2: attempt to access beyond end of device [ 88.346200][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.360726][ T3645] syz.1.2: attempt to access beyond end of device [ 88.360726][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.376554][ T3645] syz.1.2: attempt to access beyond end of device [ 88.376554][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.419687][ T3645] syz.1.2: attempt to access beyond end of device [ 88.419687][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.436121][ T3645] syz.1.2: attempt to access beyond end of device [ 88.436121][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.450559][ T3645] syz.1.2: attempt to access beyond end of device [ 88.450559][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.466302][ T3645] syz.1.2: attempt to access beyond end of device [ 88.466302][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.650157][ T3951] ALSA: seq fatal error: cannot create timer (-22) [ 88.754587][ T3726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.785962][ T3739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.854902][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.864499][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.881571][ T3726] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.928840][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.949887][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.985321][ T3739] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.012485][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.031046][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.094998][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.102837][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.211644][ T3960] tmpfs: Unknown parameter 'mpo7terlbave:0' [ 89.225037][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.242259][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.270817][ T3960] loop2: detected capacity change from 0 to 128 [ 89.282346][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.315163][ T3960] FAT-fs (loop2): Unrecognized mount option "allow_utime=0000000000000000harset=maccenteuro" or missing value [ 89.348683][ T936] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.355855][ T936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.396734][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.432537][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.477567][ T936] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.484753][ T936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.501168][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.510013][ T26] audit: type=1326 audit(1720242444.491:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3959 comm="syz.2.97" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x0 [ 89.548948][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.613616][ T936] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.620783][ T936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.687493][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.892495][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.921603][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.992946][ T3968] netlink: 'syz.3.99': attribute type 11 has an invalid length. [ 90.000717][ T3968] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.99'. [ 90.765824][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.791567][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.814488][ T3559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.845521][ T3559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.854063][ T3559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.862355][ T3546] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.870817][ T3559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.878585][ T3546] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.927208][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.993386][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.034588][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.265952][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.500976][ T3982] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.378731][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.387362][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.397106][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.406591][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.415109][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.963677][ T3559] Bluetooth: hci6: command tx timeout [ 93.305050][ T3645] bio_check_eod: 3009 callbacks suppressed [ 93.305070][ T3645] syz.1.2: attempt to access beyond end of device [ 93.305070][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.325626][ T3645] syz.1.2: attempt to access beyond end of device [ 93.325626][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.341689][ T3645] syz.1.2: attempt to access beyond end of device [ 93.341689][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.356276][ T3645] syz.1.2: attempt to access beyond end of device [ 93.356276][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.371540][ T3645] syz.1.2: attempt to access beyond end of device [ 93.371540][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.386168][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.399169][ T3726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.410623][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.418795][ T3645] syz.1.2: attempt to access beyond end of device [ 93.418795][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.431978][ T3739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.431998][ T3739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.456048][ T3645] syz.1.2: attempt to access beyond end of device [ 93.456048][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.470396][ T3645] syz.1.2: attempt to access beyond end of device [ 93.470396][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.486178][ T3645] syz.1.2: attempt to access beyond end of device [ 93.486178][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.500614][ T3645] syz.1.2: attempt to access beyond end of device [ 93.500614][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.691661][ T3992] ALSA: seq fatal error: cannot create timer (-22) [ 93.988994][ T3739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.049337][ T3739] device veth0_vlan entered promiscuous mode [ 94.072013][ T3739] device veth1_vlan entered promiscuous mode [ 94.121843][ T3739] device veth0_macvtap entered promiscuous mode [ 94.134440][ T3739] device veth1_macvtap entered promiscuous mode [ 94.161854][ T3739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.180183][ T3739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.191831][ T3739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.209411][ T3739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.230411][ T3739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.242565][ T3739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.259358][ T3739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.272375][ T3739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.290840][ T3739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.303200][ T3739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.323254][ T3739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.346356][ T3739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.361805][ T3739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.380756][ T3739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.391302][ T3739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.401264][ T3739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.412348][ T3739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.435752][ T3739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.820957][ T4003] tmpfs: Unknown parameter 'mpo7terlbave:0' [ 94.840153][ T4003] loop2: detected capacity change from 0 to 128 [ 94.871614][ T4003] FAT-fs (loop2): Unrecognized mount option "allow_utime=0000000000000000harset=maccenteuro" or missing value [ 94.988963][ T26] audit: type=1326 audit(1720242449.991:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4002 comm="syz.2.108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x0 [ 95.043658][ T3554] Bluetooth: hci6: command tx timeout [ 95.406089][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.414602][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.874908][ T4014] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 96.384411][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.392923][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.401302][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.409971][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.692302][ T4012] loop2: detected capacity change from 0 to 32768 [ 96.739509][ T4012] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.111 (4012) [ 96.822701][ T4012] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 96.873657][ T4012] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 96.883131][ T4012] BTRFS info (device loop2): using free space tree [ 96.987095][ T4016] loop3: detected capacity change from 0 to 32768 [ 97.133830][ T3554] Bluetooth: hci6: command tx timeout [ 97.169299][ T4016] XFS (loop3): Mounting V5 Filesystem [ 97.264726][ T4016] XFS (loop3): Ending clean mount [ 97.277027][ T4012] BTRFS info (device loop2): enabling ssd optimizations [ 97.376434][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.385211][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.393675][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.401292][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.408843][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.417642][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.535998][ T26] audit: type=1804 audit(1720242452.561:64): pid=4044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.111" name="/newroot/36/bus/file0/file0" dev="loop2" ino=258 res=1 errno=0 [ 97.570716][ T3552] XFS (loop3): Unmounting Filesystem [ 97.795921][ T3553] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 98.315843][ T3645] bio_check_eod: 3070 callbacks suppressed [ 98.315864][ T3645] syz.1.2: attempt to access beyond end of device [ 98.315864][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.336022][ T3645] syz.1.2: attempt to access beyond end of device [ 98.336022][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.352143][ T3645] syz.1.2: attempt to access beyond end of device [ 98.352143][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.366289][ T3645] syz.1.2: attempt to access beyond end of device [ 98.366289][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.382474][ T3645] syz.1.2: attempt to access beyond end of device [ 98.382474][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.396812][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.405391][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.413679][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.421550][ T3645] syz.1.2: attempt to access beyond end of device [ 98.421550][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.436410][ T3645] syz.1.2: attempt to access beyond end of device [ 98.436410][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.450569][ T3645] syz.1.2: attempt to access beyond end of device [ 98.450569][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.465422][ T3645] syz.1.2: attempt to access beyond end of device [ 98.465422][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.480601][ T3645] syz.1.2: attempt to access beyond end of device [ 98.480601][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 99.203572][ T3554] Bluetooth: hci6: command tx timeout [ 99.375424][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.383362][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.392333][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.400819][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.408732][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.417369][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.397272][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.405990][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.417293][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.384384][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.392102][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.400017][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.377235][ T3739] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.392902][ T3739] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.401769][ T3739] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.410859][ T3739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.504313][ T3726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.679985][ T3726] device veth0_vlan entered promiscuous mode [ 102.814116][ T3726] device veth1_vlan entered promiscuous mode [ 102.914827][ T4058] nfs: Unknown parameter '&' [ 102.966576][ T3726] device veth0_macvtap entered promiscuous mode [ 103.019222][ T3726] device veth1_macvtap entered promiscuous mode [ 103.116069][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.145319][ T4062] ALSA: seq fatal error: cannot create timer (-22) [ 103.162165][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.214109][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.272988][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.309014][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.323844][ T3645] bio_check_eod: 3801 callbacks suppressed [ 103.324108][ T3645] syz.1.2: attempt to access beyond end of device [ 103.324108][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 103.329555][ T4064] tmpfs: Unknown parameter 'mpo7terlbave:0' [ 103.332385][ T3645] syz.1.2: attempt to access beyond end of device [ 103.332385][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.356393][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.363872][ T3645] syz.1.2: attempt to access beyond end of device [ 103.363872][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 103.390752][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.401260][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.411140][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.413206][ T4064] loop2: detected capacity change from 0 to 128 [ 103.424076][ T3645] syz.1.2: attempt to access beyond end of device [ 103.424076][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.442458][ T3645] syz.1.2: attempt to access beyond end of device [ 103.442458][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 103.458494][ T3645] syz.1.2: attempt to access beyond end of device [ 103.458494][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.472915][ T3645] syz.1.2: attempt to access beyond end of device [ 103.472915][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 103.488913][ T4064] FAT-fs (loop2): Unrecognized mount option "allow_utime=0000000000000000harset=maccenteuro" or missing value [ 103.489162][ T3645] syz.1.2: attempt to access beyond end of device [ 103.489162][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.515090][ T3645] syz.1.2: attempt to access beyond end of device [ 103.515090][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 103.531045][ T3645] syz.1.2: attempt to access beyond end of device [ 103.531045][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.533772][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.593867][ T3726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.666237][ T26] audit: type=1326 audit(1720242458.691:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4063 comm="syz.2.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x0 [ 104.233681][ T3924] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 104.399417][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.412096][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.424465][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.433456][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.448731][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.474376][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.498779][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.528642][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.536329][ T3924] usb 4-1: Using ep0 maxpacket: 16 [ 104.553236][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.580273][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.607566][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.635070][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.662481][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.685075][ T3924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 104.712368][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.731871][ T3924] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 104.748809][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.768085][ T3924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.789482][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.819928][ T3924] usb 4-1: config 0 descriptor?? [ 104.852576][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.875933][ T3924] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 104.891147][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.938001][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.977398][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.011133][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.041452][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.081663][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.121435][ T4069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.120'. [ 105.152738][ T3726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.207020][ T3726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.216645][ T26] audit: type=1326 audit(1720242460.241:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5026375bd9 code=0x7ffc0000 [ 105.302257][ T3726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.352438][ T26] audit: type=1326 audit(1720242460.271:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5026375bd9 code=0x7ffc0000 [ 105.375018][ T3726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.413883][ T3726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.475726][ T3559] Bluetooth: hci2: sending frame failed (-49) [ 105.482609][ T3554] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 105.495550][ T26] audit: type=1326 audit(1720242460.271:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5026375bd9 code=0x7ffc0000 [ 105.641586][ T26] audit: type=1326 audit(1720242460.271:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5026375bd9 code=0x7ffc0000 [ 105.773587][ T26] audit: type=1326 audit(1720242460.271:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5026375bd9 code=0x7ffc0000 [ 106.012818][ T26] audit: type=1326 audit(1720242460.271:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5026375bd9 code=0x7ffc0000 [ 106.141265][ T4082] loop2: detected capacity change from 0 to 1024 [ 106.148262][ T4082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.716749][ T26] audit: type=1326 audit(1720242460.311:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5026375bd9 code=0x7ffc0000 [ 106.738917][ T26] audit: type=1326 audit(1720242460.311:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5026375bd9 code=0x7ffc0000 [ 106.761067][ T26] audit: type=1326 audit(1720242460.311:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4068 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5026375bd9 code=0x7ffc0000 [ 106.784798][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.793406][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.896544][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.956211][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.985523][ T4082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.036852][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.051329][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.064442][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.080403][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.090503][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.050529][ T3927] usb 4-1: USB disconnect, device number 9 [ 108.333675][ T3645] bio_check_eod: 2861 callbacks suppressed [ 108.333694][ T3645] syz.1.2: attempt to access beyond end of device [ 108.333694][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.353915][ T3645] syz.1.2: attempt to access beyond end of device [ 108.353915][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.368708][ T3645] syz.1.2: attempt to access beyond end of device [ 108.368708][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.419610][ T3645] syz.1.2: attempt to access beyond end of device [ 108.419610][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.435823][ T3645] syz.1.2: attempt to access beyond end of device [ 108.435823][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.450424][ T3645] syz.1.2: attempt to access beyond end of device [ 108.450424][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.466388][ T3645] syz.1.2: attempt to access beyond end of device [ 108.466388][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.480802][ T3645] syz.1.2: attempt to access beyond end of device [ 108.480802][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.497055][ T3645] syz.1.2: attempt to access beyond end of device [ 108.497055][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.512057][ T3645] syz.1.2: attempt to access beyond end of device [ 108.512057][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.528881][ T3553] EXT4-fs (loop2): unmounting filesystem. [ 108.590316][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.627480][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.723200][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.738184][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.406205][ T4094] tmpfs: Unknown parameter 'mpo7terlbave:0' [ 109.483261][ T4094] loop3: detected capacity change from 0 to 128 [ 109.490939][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.507214][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.544882][ T4094] FAT-fs (loop3): Unrecognized mount option "allow_utime=0000000000000000harset=maccenteuro" or missing value [ 109.563442][ T4097] ALSA: seq fatal error: cannot create timer (-22) [ 109.655989][ T3751] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.715794][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 109.715809][ T26] audit: type=1326 audit(1720242464.741:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4093 comm="syz.3.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5026375bd9 code=0x0 [ 109.882858][ T3751] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.000949][ T3751] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.115571][ T3751] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.423774][ T936] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.675008][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 110.803874][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 110.830518][ T936] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 110.870394][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.981266][ T936] usb 3-1: config 0 descriptor?? [ 111.025718][ T936] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 111.258412][ T4103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.131'. [ 111.304152][ T26] audit: type=1326 audit(1720242466.331:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x7ffc0000 [ 111.379328][ T26] audit: type=1326 audit(1720242466.361:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe163775bd9 code=0x7ffc0000 [ 111.441523][ T26] audit: type=1326 audit(1720242466.361:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x7ffc0000 [ 111.501169][ T26] audit: type=1326 audit(1720242466.361:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe163775bd9 code=0x7ffc0000 [ 111.553018][ T26] audit: type=1326 audit(1720242466.361:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x7ffc0000 [ 111.584367][ T26] audit: type=1326 audit(1720242466.361:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x7ffc0000 [ 111.617781][ T26] audit: type=1326 audit(1720242466.371:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe163775bd9 code=0x7ffc0000 [ 111.647047][ T26] audit: type=1326 audit(1720242466.371:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x7ffc0000 [ 111.676223][ T26] audit: type=1326 audit(1720242466.381:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4102 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fe163775bd9 code=0x7ffc0000 [ 111.897988][ T4103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.916147][ T4103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.937253][ T4103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.954293][ T4103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.503513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 112.564249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.572595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.581374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 112.603512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.344857][ T3645] bio_check_eod: 3514 callbacks suppressed [ 113.344871][ T3645] syz.1.2: attempt to access beyond end of device [ 113.344871][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.365041][ T3645] syz.1.2: attempt to access beyond end of device [ 113.365041][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.408351][ T153] usb 3-1: USB disconnect, device number 7 [ 113.421181][ T3645] syz.1.2: attempt to access beyond end of device [ 113.421181][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.435815][ T3645] syz.1.2: attempt to access beyond end of device [ 113.435815][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.452406][ T3645] syz.1.2: attempt to access beyond end of device [ 113.452406][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.466791][ T3645] syz.1.2: attempt to access beyond end of device [ 113.466791][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.482751][ T3645] syz.1.2: attempt to access beyond end of device [ 113.482751][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.497202][ T3645] syz.1.2: attempt to access beyond end of device [ 113.497202][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.513062][ T3645] syz.1.2: attempt to access beyond end of device [ 113.513062][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.530209][ T3645] syz.1.2: attempt to access beyond end of device [ 113.530209][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 114.541312][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.573717][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.593810][ T936] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 114.671923][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.699888][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.721021][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.751881][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.893769][ T936] usb 4-1: Using ep0 maxpacket: 16 [ 114.964830][ T3969] chnl_net:caif_netlink_parms(): no params data found [ 115.173835][ T936] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 115.203257][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.242076][ T936] usb 4-1: Product: syz [ 115.253669][ T936] usb 4-1: Manufacturer: syz [ 115.273568][ T936] usb 4-1: SerialNumber: syz [ 115.400423][ T936] usb 4-1: config 0 descriptor?? [ 115.465685][ T936] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 115.674425][ T936] gspca_sn9c2028: read1 error -32 [ 115.713719][ T936] gspca_sn9c2028: read1 error -32 [ 115.753760][ T936] gspca_sn9c2028: read1 error 0 [ 115.758803][ T936] sn9c2028: probe of 4-1:0.0 failed with error -5 [ 115.796111][ T936] usb 4-1: Found UVC 0.00 device syz (0458:7005) [ 115.830299][ T936] usb 4-1: No valid video chain found. [ 116.089595][ T936] usb 4-1: USB disconnect, device number 10 [ 116.402680][ T4155] tmpfs: Unknown parameter 'mpo7terlbave:0' [ 116.544384][ T3559] Bluetooth: hci2: sending frame failed (-49) [ 116.551513][ T3554] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 116.780227][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 116.780241][ T26] audit: type=1326 audit(1720242471.801:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4154 comm="syz.1.139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0369175bd9 code=0x0 [ 118.032008][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.353660][ T3645] bio_check_eod: 2793 callbacks suppressed [ 118.353679][ T3645] syz.1.2: attempt to access beyond end of device [ 118.353679][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.375652][ T3645] syz.1.2: attempt to access beyond end of device [ 118.375652][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.390094][ T3645] syz.1.2: attempt to access beyond end of device [ 118.390094][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.406199][ T3645] syz.1.2: attempt to access beyond end of device [ 118.406199][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.420630][ T3645] syz.1.2: attempt to access beyond end of device [ 118.420630][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.437945][ T3645] syz.1.2: attempt to access beyond end of device [ 118.437945][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.452362][ T3645] syz.1.2: attempt to access beyond end of device [ 118.452362][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.468289][ T3645] syz.1.2: attempt to access beyond end of device [ 118.468289][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.482662][ T3645] syz.1.2: attempt to access beyond end of device [ 118.482662][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.498580][ T3645] syz.1.2: attempt to access beyond end of device [ 118.498580][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 119.399829][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.389105][ T3969] device bridge_slave_0 entered promiscuous mode [ 120.924506][ T4182] loop0: detected capacity change from 0 to 2048 [ 121.162736][ T4182] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.606776][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.640463][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.673404][ T3969] device bridge_slave_1 entered promiscuous mode [ 121.762626][ T3726] EXT4-fs (loop0): unmounting filesystem. [ 123.367080][ T3645] bio_check_eod: 2719 callbacks suppressed [ 123.367121][ T3645] syz.1.2: attempt to access beyond end of device [ 123.367121][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.421379][ T3645] syz.1.2: attempt to access beyond end of device [ 123.421379][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.446315][ T3645] syz.1.2: attempt to access beyond end of device [ 123.446315][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.463113][ T3645] syz.1.2: attempt to access beyond end of device [ 123.463113][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.488164][ T3645] syz.1.2: attempt to access beyond end of device [ 123.488164][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.504903][ T3645] syz.1.2: attempt to access beyond end of device [ 123.504903][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.528671][ T3645] syz.1.2: attempt to access beyond end of device [ 123.528671][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.545530][ T3645] syz.1.2: attempt to access beyond end of device [ 123.545530][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.569911][ T3645] syz.1.2: attempt to access beyond end of device [ 123.569911][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.586737][ T3645] syz.1.2: attempt to access beyond end of device [ 123.586737][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.889194][ T3969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.952961][ T3969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.417174][ T4211] tmpfs: Unknown parameter 'mpo7terlbave:0' [ 125.301352][ T4211] loop3: detected capacity change from 0 to 128 [ 125.370109][ T4211] FAT-fs (loop3): Unrecognized mount option "allow_utime=0000000000000000harset=maccenteuro" or missing value [ 125.631999][ T3969] team0: Port device team_slave_0 added [ 126.465121][ T26] audit: type=1326 audit(1720242481.491:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4208 comm="syz.3.153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5026375bd9 code=0x0 [ 126.996975][ T4225] loop2: detected capacity change from 0 to 2048 [ 127.192598][ T4225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.677207][ T4239] trusted_key: encrypted_key: master key parameter 'fefault' is invalid [ 128.231032][ T3553] EXT4-fs (loop2): unmounting filesystem. [ 128.374809][ T3645] bio_check_eod: 2114 callbacks suppressed [ 128.374829][ T3645] syz.1.2: attempt to access beyond end of device [ 128.374829][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.395016][ T3645] syz.1.2: attempt to access beyond end of device [ 128.395016][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.402487][ T3969] team0: Port device team_slave_1 added [ 128.420954][ T3645] syz.1.2: attempt to access beyond end of device [ 128.420954][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.436961][ T3645] syz.1.2: attempt to access beyond end of device [ 128.436961][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.452855][ T3645] syz.1.2: attempt to access beyond end of device [ 128.452855][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.467314][ T3645] syz.1.2: attempt to access beyond end of device [ 128.467314][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.483219][ T3645] syz.1.2: attempt to access beyond end of device [ 128.483219][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.497664][ T3645] syz.1.2: attempt to access beyond end of device [ 128.497664][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.514365][ T3645] syz.1.2: attempt to access beyond end of device [ 128.514365][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.528788][ T3645] syz.1.2: attempt to access beyond end of device [ 128.528788][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.840443][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.884809][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.953572][ T936] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.983638][ T3969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.064807][ T3969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.122504][ T3969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.199586][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 130.303860][ T3969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.123802][ T936] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 131.133054][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.259908][ T936] usb 3-1: Product: syz [ 131.417883][ T4276] 9pnet_fd: Insufficient options for proto=fd [ 131.966618][ T4282] tmpfs: Unknown parameter 'mpo7terlbave:0' [ 132.001312][ T4282] loop2: detected capacity change from 0 to 128 [ 132.063210][ T4282] FAT-fs (loop2): Unrecognized mount option "allow_utime=0000000000000000harset=maccenteuro" or missing value [ 132.279750][ T26] audit: type=1326 audit(1720242487.231:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4281 comm="syz.2.168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe163775bd9 code=0x0 [ 132.382741][ T153] libceph: connect (1)[c::]:6789 error -101 [ 132.391501][ T153] libceph: mon0 (1)[c::]:6789 connect error [ 132.393619][ T936] usb 3-1: Manufacturer: syz [ 132.402281][ T936] usb 3-1: SerialNumber: syz [ 132.425239][ T3969] device hsr_slave_0 entered promiscuous mode [ 132.442727][ T3969] device hsr_slave_1 entered promiscuous mode [ 132.499174][ T3751] device hsr_slave_0 left promiscuous mode [ 132.511502][ T4285] ceph: No mds server is up or the cluster is laggy [ 132.585142][ T3751] device hsr_slave_1 left promiscuous mode [ 132.636079][ T3751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.690798][ T3751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.734067][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.740416][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.084315][ T3751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.091359][ T936] usb 3-1: config 0 descriptor?? [ 133.392352][ T3645] bio_check_eod: 2518 callbacks suppressed [ 133.392398][ T3645] syz.1.2: attempt to access beyond end of device [ 133.392398][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.422324][ T3645] syz.1.2: attempt to access beyond end of device [ 133.422324][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.447014][ T3645] syz.1.2: attempt to access beyond end of device [ 133.447014][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.463959][ T3645] syz.1.2: attempt to access beyond end of device [ 133.463959][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.488587][ T3645] syz.1.2: attempt to access beyond end of device [ 133.488587][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.505396][ T3645] syz.1.2: attempt to access beyond end of device [ 133.505396][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.529964][ T3645] syz.1.2: attempt to access beyond end of device [ 133.529964][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.546715][ T3645] syz.1.2: attempt to access beyond end of device [ 133.546715][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.571353][ T3645] syz.1.2: attempt to access beyond end of device [ 133.571353][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.588406][ T3645] syz.1.2: attempt to access beyond end of device [ 133.588406][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.912662][ T4301] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 134.093447][ T3751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.354241][ T3751] device bridge_slave_1 left promiscuous mode [ 134.360494][ T3751] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.383623][ T936] usb 3-1: can't set config #0, error -71 [ 134.394872][ T936] usb 3-1: USB disconnect, device number 8 [ 134.778482][ T3751] device bridge_slave_0 left promiscuous mode [ 134.793835][ T3751] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.132268][ T3751] device veth1_macvtap left promiscuous mode [ 135.142049][ T3751] device veth0_macvtap left promiscuous mode [ 135.367140][ T3751] device veth1_vlan left promiscuous mode [ 135.416828][ T3751] device veth0_vlan left promiscuous mode [ 136.753667][ T3927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.013557][ T3927] usb 3-1: Using ep0 maxpacket: 16 [ 137.333809][ T3927] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 137.363252][ T3927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.405512][ T3927] usb 3-1: Product: syz [ 137.409709][ T3927] usb 3-1: Manufacturer: syz [ 137.463513][ T3927] usb 3-1: SerialNumber: syz [ 137.519969][ T3927] usb 3-1: config 0 descriptor?? [ 137.575576][ T3927] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 137.793746][ T3927] gspca_sn9c2028: read1 error -32 [ 137.853908][ T3927] gspca_sn9c2028: read1 error -32 [ 137.895753][ T3927] gspca_sn9c2028: read1 error 0 [ 137.900869][ T3927] sn9c2028: probe of 3-1:0.0 failed with error -5 [ 137.934239][ T3927] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 137.940627][ T3927] usb 3-1: No valid video chain found. [ 138.269244][ T4341] 9pnet_fd: Insufficient options for proto=fd [ 138.369209][ T3927] usb 3-1: USB disconnect, device number 9 [ 138.420435][ T3645] bio_check_eod: 2764 callbacks suppressed [ 138.420454][ T3645] syz.1.2: attempt to access beyond end of device [ 138.420454][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.440715][ T3645] syz.1.2: attempt to access beyond end of device [ 138.440715][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.456705][ T3645] syz.1.2: attempt to access beyond end of device [ 138.456705][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.471247][ T3645] syz.1.2: attempt to access beyond end of device [ 138.471247][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.487216][ T3645] syz.1.2: attempt to access beyond end of device [ 138.487216][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.502195][ T3645] syz.1.2: attempt to access beyond end of device [ 138.502195][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.518993][ T3645] syz.1.2: attempt to access beyond end of device [ 138.518993][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.533652][ T3645] syz.1.2: attempt to access beyond end of device [ 138.533652][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.549545][ T3645] syz.1.2: attempt to access beyond end of device [ 138.549545][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.563918][ T3645] syz.1.2: attempt to access beyond end of device [ 138.563918][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.691958][ T3751] team0 (unregistering): Port device team_slave_1 removed [ 138.796547][ T3751] team0 (unregistering): Port device team_slave_0 removed [ 138.908378][ T3751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.110630][ T3751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.130947][ T3927] libceph: connect (1)[c::]:6789 error -101 [ 139.145934][ T3927] libceph: mon0 (1)[c::]:6789 connect error [ 139.278245][ T4344] ceph: No mds server is up or the cluster is laggy [ 139.477710][ T3927] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.738345][ T3927] usb 2-1: Using ep0 maxpacket: 8 [ 139.885483][ T3927] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 139.911487][ T3927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.942210][ T3927] usb 2-1: config 0 descriptor?? [ 140.004562][ T3927] hso 2-1:0.0: Can't find BULK IN endpoint [ 140.208766][ T3927] usb 2-1: USB disconnect, device number 2 [ 140.276429][ T3751] bond0 (unregistering): Released all slaves [ 142.812373][ T4372] trusted_key: encrypted_key: master key parameter 'fefault' is invalid [ 143.424068][ T3645] bio_check_eod: 2295 callbacks suppressed [ 143.424085][ T3645] syz.1.2: attempt to access beyond end of device [ 143.424085][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.445925][ T3645] syz.1.2: attempt to access beyond end of device [ 143.445925][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.460358][ T3645] syz.1.2: attempt to access beyond end of device [ 143.460358][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.476093][ T3645] syz.1.2: attempt to access beyond end of device [ 143.476093][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.492169][ T3645] syz.1.2: attempt to access beyond end of device [ 143.492169][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.508313][ T3645] syz.1.2: attempt to access beyond end of device [ 143.508313][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.524198][ T3645] syz.1.2: attempt to access beyond end of device [ 143.524198][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.540070][ T3645] syz.1.2: attempt to access beyond end of device [ 143.540070][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.554506][ T3645] syz.1.2: attempt to access beyond end of device [ 143.554506][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.570390][ T3645] syz.1.2: attempt to access beyond end of device [ 143.570390][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 144.732977][ T4384] netlink: 'syz.3.191': attribute type 142 has an invalid length. [ 145.032042][ T4388] loop3: detected capacity change from 0 to 512 [ 146.065468][ T4397] 9pnet_fd: Insufficient options for proto=fd [ 146.671903][ T3969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.703810][ T3969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.713055][ T3969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.754395][ T3969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.438200][ T3645] bio_check_eod: 2345 callbacks suppressed [ 148.438300][ T3645] syz.1.2: attempt to access beyond end of device [ 148.438300][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.461058][ T3645] syz.1.2: attempt to access beyond end of device [ 148.461058][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.485390][ T3645] syz.1.2: attempt to access beyond end of device [ 148.485390][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.502382][ T3645] syz.1.2: attempt to access beyond end of device [ 148.502382][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.526795][ T3645] syz.1.2: attempt to access beyond end of device [ 148.526795][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.542702][ T3645] syz.1.2: attempt to access beyond end of device [ 148.542702][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.566694][ T3645] syz.1.2: attempt to access beyond end of device [ 148.566694][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.583508][ T3645] syz.1.2: attempt to access beyond end of device [ 148.583508][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.608006][ T3645] syz.1.2: attempt to access beyond end of device [ 148.608006][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.624914][ T3645] syz.1.2: attempt to access beyond end of device [ 148.624914][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.999692][ T3969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.068790][ T4434] loop2: detected capacity change from 0 to 512 [ 149.106383][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.116581][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.178670][ T3969] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.191482][ T4437] loop3: detected capacity change from 0 to 1764 [ 149.541859][ T4437] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 149.573580][ T3929] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.675338][ T4437] ISOFS: unable to read i-node block [ 149.751945][ T4437] isofs_fill_super: get root inode failed [ 149.843657][ T3929] usb 2-1: Using ep0 maxpacket: 16 [ 151.056941][ T3929] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 151.087100][ T3929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.163505][ T3929] usb 2-1: Product: syz [ 151.203672][ T3929] usb 2-1: Manufacturer: syz [ 151.260146][ T3929] usb 2-1: config 0 descriptor?? [ 151.323748][ T3929] usb 2-1: can't set config #0, error -71 [ 151.354432][ T3929] usb 2-1: USB disconnect, device number 3 [ 152.290765][ T3554] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.300213][ T3554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.308519][ T3546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.318557][ T3554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.326975][ T3554] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.338629][ T3554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.489275][ T4462] 9pnet_fd: Insufficient options for proto=fd [ 152.931787][ T4466] syz.1.212 uses obsolete (PF_INET,SOCK_PACKET) [ 153.372317][ T4474] loop3: detected capacity change from 0 to 512 [ 153.444538][ T3645] bio_check_eod: 2456 callbacks suppressed [ 153.444556][ T3645] syz.1.2: attempt to access beyond end of device [ 153.444556][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.465709][ T3645] syz.1.2: attempt to access beyond end of device [ 153.465709][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.481580][ T3645] syz.1.2: attempt to access beyond end of device [ 153.481580][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.496100][ T3645] syz.1.2: attempt to access beyond end of device [ 153.496100][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.511969][ T3645] syz.1.2: attempt to access beyond end of device [ 153.511969][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.526410][ T3645] syz.1.2: attempt to access beyond end of device [ 153.526410][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.542831][ T3645] syz.1.2: attempt to access beyond end of device [ 153.542831][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.557855][ T3645] syz.1.2: attempt to access beyond end of device [ 153.557855][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.562038][ T4474] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.213: casefold flag without casefold feature [ 153.574400][ T3645] syz.1.2: attempt to access beyond end of device [ 153.574400][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.589413][ T4457] chnl_net:caif_netlink_parms(): no params data found [ 153.598672][ T3645] syz.1.2: attempt to access beyond end of device [ 153.598672][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.806568][ T4474] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.213: missing EA_INODE flag [ 153.904012][ T4474] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.213: error while reading EA inode 2 err=-117 [ 154.023302][ T4474] EXT4-fs (loop3): 1 orphan inode deleted [ 154.103656][ T4474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.306960][ T4474] overlayfs: failed to resolve './file1': -2 [ 154.404404][ T3559] Bluetooth: hci2: command tx timeout [ 155.389986][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.432560][ T4457] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.517098][ T4457] device bridge_slave_0 entered promiscuous mode [ 155.585662][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 155.601981][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.693609][ T4457] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.744382][ T4457] device bridge_slave_1 entered promiscuous mode [ 156.993516][ T3559] Bluetooth: hci2: command tx timeout [ 157.001754][ T4457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.029584][ T4457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.947868][ T4457] team0: Port device team_slave_0 added [ 157.984198][ T4516] 9pnet_fd: Insufficient options for proto=fd [ 158.015162][ T4457] team0: Port device team_slave_1 added [ 158.228267][ T4457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.311631][ T4457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.394298][ T4457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.407866][ T4457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.419111][ T4530] loop2: detected capacity change from 0 to 512 [ 158.436793][ T4531] loop0: detected capacity change from 0 to 512 [ 158.455842][ T3645] bio_check_eod: 2548 callbacks suppressed [ 158.455862][ T3645] syz.1.2: attempt to access beyond end of device [ 158.455862][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.456395][ T4457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.462300][ T3645] syz.1.2: attempt to access beyond end of device [ 158.462300][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.518034][ T3645] syz.1.2: attempt to access beyond end of device [ 158.518034][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.532466][ T3645] syz.1.2: attempt to access beyond end of device [ 158.532466][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.548314][ T3645] syz.1.2: attempt to access beyond end of device [ 158.548314][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.562723][ T3645] syz.1.2: attempt to access beyond end of device [ 158.562723][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.579064][ T3645] syz.1.2: attempt to access beyond end of device [ 158.579064][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.594371][ T3645] syz.1.2: attempt to access beyond end of device [ 158.594371][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.596453][ T4457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.608513][ T4531] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.226: casefold flag without casefold feature [ 158.633336][ T3645] syz.1.2: attempt to access beyond end of device [ 158.633336][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.647805][ T3645] syz.1.2: attempt to access beyond end of device [ 158.647805][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.693925][ T4531] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.226: missing EA_INODE flag [ 158.760724][ T4457] device hsr_slave_0 entered promiscuous mode [ 158.801035][ T4457] device hsr_slave_1 entered promiscuous mode [ 158.814038][ T4531] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.226: error while reading EA inode 2 err=-117 [ 158.846924][ T4457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.863969][ T4531] EXT4-fs (loop0): 1 orphan inode deleted [ 158.880019][ T4457] Cannot create hsr debugfs directory [ 158.893536][ T4531] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.593541][ T3726] EXT4-fs (loop0): unmounting filesystem. [ 159.907071][ T3929] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 160.183837][ T3929] usb 2-1: Using ep0 maxpacket: 16 [ 160.333903][ T3929] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.377958][ T3559] Bluetooth: hci2: command tx timeout [ 160.543893][ T3929] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.553058][ T3929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.622534][ T3929] usb 2-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 160.854541][ T3929] usb 2-1: Manufacturer: ࠄ [ 160.859643][ T3929] usb 2-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 162.403846][ T3559] Bluetooth: hci2: command tx timeout [ 162.856555][ T4582] loop3: detected capacity change from 0 to 512 [ 163.464741][ T3645] bio_check_eod: 2636 callbacks suppressed [ 163.464759][ T3645] syz.1.2: attempt to access beyond end of device [ 163.464759][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.485063][ T3645] syz.1.2: attempt to access beyond end of device [ 163.485063][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.501524][ T3645] syz.1.2: attempt to access beyond end of device [ 163.501524][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.516259][ T3645] syz.1.2: attempt to access beyond end of device [ 163.516259][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.532178][ T3645] syz.1.2: attempt to access beyond end of device [ 163.532178][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.546686][ T3645] syz.1.2: attempt to access beyond end of device [ 163.546686][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.562864][ T3645] syz.1.2: attempt to access beyond end of device [ 163.562864][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.577291][ T3645] syz.1.2: attempt to access beyond end of device [ 163.577291][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.593514][ T3645] syz.1.2: attempt to access beyond end of device [ 163.593514][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.610175][ T3645] syz.1.2: attempt to access beyond end of device [ 163.610175][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 165.770835][ T4611] tipc: Started in network mode [ 165.775992][ T4611] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 165.841968][ T4611] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 165.940009][ T4611] tipc: Enabled bearer , priority 10 [ 167.121667][ T7] tipc: Node number set to 1 [ 167.388553][ T3929] usb 2-1: USB disconnect, device number 4 [ 167.423724][ T3598] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 167.794594][ T3598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.832684][ T3598] usb 1-1: config 1 has no interface number 0 [ 167.863646][ T3598] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.475779][ T3645] bio_check_eod: 2642 callbacks suppressed [ 168.475798][ T3645] syz.1.2: attempt to access beyond end of device [ 168.475798][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.496089][ T3645] syz.1.2: attempt to access beyond end of device [ 168.496089][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.511906][ T3645] syz.1.2: attempt to access beyond end of device [ 168.511906][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.526312][ T3645] syz.1.2: attempt to access beyond end of device [ 168.526312][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.542242][ T3645] syz.1.2: attempt to access beyond end of device [ 168.542242][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.556650][ T3645] syz.1.2: attempt to access beyond end of device [ 168.556650][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.572496][ T3645] syz.1.2: attempt to access beyond end of device [ 168.572496][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.586963][ T3645] syz.1.2: attempt to access beyond end of device [ 168.586963][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.602935][ T3645] syz.1.2: attempt to access beyond end of device [ 168.602935][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.617296][ T3645] syz.1.2: attempt to access beyond end of device [ 168.617296][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.753660][ T3929] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 169.031665][ T3929] usb 3-1: Using ep0 maxpacket: 16 [ 169.353895][ T3929] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 169.379214][ T3598] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 169.383128][ T3929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.388376][ T3598] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 169.523034][ T3929] usb 3-1: Product: syz [ 169.547843][ T3929] usb 3-1: Manufacturer: syz [ 169.572564][ T3929] usb 3-1: SerialNumber: syz [ 169.605685][ T3929] usb 3-1: config 0 descriptor?? [ 169.675419][ T3929] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 169.893918][ T3929] gp8psk: usb in 128 operation failed. [ 169.933637][ T3929] gp8psk: usb in 137 operation failed. [ 169.939191][ T3929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.024052][ T3929] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 170.054883][ T3929] usb 3-1: media controller created [ 170.132408][ T3929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.244574][ T3929] gp8psk_fe: Frontend revision 1 attached [ 170.302561][ T3929] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 170.333192][ T3929] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 170.404011][ T3598] usb 1-1: string descriptor 0 read error: -71 [ 170.410281][ T3598] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.618409][ T4678] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 170.647723][ T4678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.251'. [ 170.744219][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.752954][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.843664][ T3929] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 170.888212][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.895608][ T4678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.904134][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.911254][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.920340][ T3929] gp8psk: found Genpix USB device pID = 201 (hex) [ 171.233104][ T4678] team0: Port device bridge0 added [ 171.315101][ T4457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.348077][ T153] usb 3-1: USB disconnect, device number 10 [ 171.379432][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.390072][ T4457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.403697][ T3598] usb 1-1: can't set config #1, error -71 [ 171.415569][ T3598] usb 1-1: USB disconnect, device number 2 [ 171.497679][ T4673] loop0: detected capacity change from 0 to 32768 [ 171.588862][ T4673] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop0 scanned by syz.0.255 (4673) [ 171.605937][ T153] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 171.713778][ T4673] BTRFS info (device loop0): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f [ 171.748013][ T4457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.823900][ T4673] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 171.895216][ T4457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.909346][ T4673] BTRFS info (device loop0): using free space tree [ 172.471096][ T3751] device hsr_slave_0 left promiscuous mode [ 173.485127][ T3645] bio_check_eod: 2596 callbacks suppressed [ 173.485146][ T3645] syz.1.2: attempt to access beyond end of device [ 173.485146][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.505460][ T3645] syz.1.2: attempt to access beyond end of device [ 173.505460][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.521418][ T3645] syz.1.2: attempt to access beyond end of device [ 173.521418][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.538384][ T3645] syz.1.2: attempt to access beyond end of device [ 173.538384][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.543292][ T3751] device hsr_slave_1 left promiscuous mode [ 173.554107][ T3645] syz.1.2: attempt to access beyond end of device [ 173.554107][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.572254][ T3645] syz.1.2: attempt to access beyond end of device [ 173.572254][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.588033][ T3645] syz.1.2: attempt to access beyond end of device [ 173.588033][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.602429][ T3645] syz.1.2: attempt to access beyond end of device [ 173.602429][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.618261][ T3645] syz.1.2: attempt to access beyond end of device [ 173.618261][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.633637][ T3645] syz.1.2: attempt to access beyond end of device [ 173.633637][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.661971][ T3751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.696124][ T3751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.769041][ T3751] device bridge_slave_1 left promiscuous mode [ 173.782346][ T3751] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.856965][ T3751] device bridge_slave_0 left promiscuous mode [ 173.885077][ T3751] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.387289][ T4673] BTRFS error (device loop0): open_ctree failed [ 174.395704][ T4049] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop0 scanned by udevd (4049) [ 174.713872][ T3924] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.776435][ T3751] team0 (unregistering): Port device team_slave_1 removed [ 175.068358][ T3751] team0 (unregistering): Port device team_slave_0 removed [ 175.222608][ T3751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.243848][ T3924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.257399][ T3924] usb 2-1: config 1 has no interface number 0 [ 175.307120][ T3924] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.384104][ T3924] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 175.445544][ T3924] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.610788][ T3751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.703914][ T3924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.730668][ T3924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.772743][ T3924] usb 2-1: Product: syz [ 175.790835][ T3924] usb 2-1: Manufacturer: syz [ 175.805870][ T3924] usb 2-1: SerialNumber: syz [ 175.843753][ T3559] Bluetooth: hci0: command 0x0406 tx timeout [ 175.849853][ T3559] Bluetooth: hci4: command 0x0406 tx timeout [ 175.856094][ T3546] Bluetooth: hci3: command 0x0406 tx timeout [ 176.041230][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.325093][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 176.462528][ T22] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.657629][ T3751] bond0 (unregistering): Released all slaves [ 176.664246][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.673328][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.712155][ T22] usb 4-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 176.745421][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.792061][ T4722] netlink: 224 bytes leftover after parsing attributes in process `syz.1.262'. [ 176.831625][ T22] usb 4-1: Manufacturer: ࠄ [ 176.851865][ T22] usb 4-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 176.873526][ T3924] cdc_ncm 2-1:1.1: bind() failure [ 177.234954][ T4713] usb 2-1: USB disconnect, device number 5 [ 177.278869][ T4737] loop3: detected capacity change from 0 to 512 [ 177.308291][ T4457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.339873][ T3559] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 177.409965][ T4457] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.417385][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.448177][ T4737] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.490758][ T4737] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038 (0x7fffffff) [ 178.410930][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.495843][ T3645] bio_check_eod: 2596 callbacks suppressed [ 178.495864][ T3645] syz.1.2: attempt to access beyond end of device [ 178.495864][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.499426][ T153] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 178.502402][ T3645] syz.1.2: attempt to access beyond end of device [ 178.502402][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.539109][ T3645] syz.1.2: attempt to access beyond end of device [ 178.539109][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.553546][ T3645] syz.1.2: attempt to access beyond end of device [ 178.553546][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.569462][ T3645] syz.1.2: attempt to access beyond end of device [ 178.569462][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.583844][ T3645] syz.1.2: attempt to access beyond end of device [ 178.583844][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.599743][ T3645] syz.1.2: attempt to access beyond end of device [ 178.599743][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.614163][ T3645] syz.1.2: attempt to access beyond end of device [ 178.614163][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.630068][ T3645] syz.1.2: attempt to access beyond end of device [ 178.630068][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.644517][ T3645] syz.1.2: attempt to access beyond end of device [ 178.644517][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 179.043850][ T153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.050534][ T153] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 179.793501][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.806922][ T4457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.824839][ T153] usb 3-1: config 0 descriptor?? [ 179.842411][ T4457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.856475][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.869694][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.878856][ T3924] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.886000][ T3924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.962077][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.011508][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.056995][ T3924] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.064156][ T3924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.123222][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.153808][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.212664][ T22] usb 4-1: USB disconnect, device number 11 [ 180.231732][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.285126][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.321033][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.340594][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.368748][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.391199][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.410568][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.451818][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.485299][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.543283][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.582871][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.654672][ T3552] EXT4-fs (loop3): unmounting filesystem. [ 180.904712][ T41] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 181.045451][ T153] video4linux radio32: keene_cmd_main failed (-110) [ 181.052843][ T153] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 181.263810][ T41] usb 2-1: config 0 has no interfaces? [ 181.284193][ T4747] loop0: detected capacity change from 0 to 40427 [ 181.314375][ T153] usb 3-1: USB disconnect, device number 11 [ 181.365611][ T3559] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 181.374167][ T3559] Bluetooth: hci4: Injecting HCI hardware error event [ 181.382617][ T3554] Bluetooth: hci4: hardware error 0x00 [ 181.407971][ T4747] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 181.422336][ T4747] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 181.454097][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.473728][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.481747][ T41] usb 2-1: Product: syz [ 181.493555][ T41] usb 2-1: Manufacturer: syz [ 181.503735][ T41] usb 2-1: SerialNumber: syz [ 181.526864][ T41] usb 2-1: config 0 descriptor?? [ 181.585878][ T4747] F2FS-fs (loop0): Found nat_bits in checkpoint [ 181.819912][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.861337][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.903416][ T4457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.951803][ T41] usb 2-1: USB disconnect, device number 6 [ 182.184096][ T4777] netlink: 'syz.2.274': attribute type 10 has an invalid length. [ 182.244419][ T4777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.274'. [ 182.423963][ T4777] team0: Port device geneve0 added [ 183.504233][ T3645] bio_check_eod: 2682 callbacks suppressed [ 183.504251][ T3645] syz.1.2: attempt to access beyond end of device [ 183.504251][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.525015][ T3645] syz.1.2: attempt to access beyond end of device [ 183.525015][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.543599][ T3645] syz.1.2: attempt to access beyond end of device [ 183.543599][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.559353][ T3645] syz.1.2: attempt to access beyond end of device [ 183.559353][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.576238][ T3645] syz.1.2: attempt to access beyond end of device [ 183.576238][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.590673][ T3645] syz.1.2: attempt to access beyond end of device [ 183.590673][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.606591][ T3645] syz.1.2: attempt to access beyond end of device [ 183.606591][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.621009][ T3645] syz.1.2: attempt to access beyond end of device [ 183.621009][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.636939][ T3645] syz.1.2: attempt to access beyond end of device [ 183.636939][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.651392][ T3645] syz.1.2: attempt to access beyond end of device [ 183.651392][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.684012][ T3554] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 184.194029][ T41] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.349184][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.373963][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.433869][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 184.444583][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.473987][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.506194][ T4457] device veth0_vlan entered promiscuous mode [ 184.553942][ T41] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.564559][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.572419][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.583715][ T3924] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 184.638061][ T4457] device veth1_vlan entered promiscuous mode [ 184.774588][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.793906][ T41] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.814480][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.822652][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.839177][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.867772][ T3924] usb 3-1: Using ep0 maxpacket: 16 [ 184.875731][ T41] usb 1-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 184.974831][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.028502][ T4457] device veth0_macvtap entered promiscuous mode [ 185.043996][ T3554] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 185.066787][ T4457] device veth1_macvtap entered promiscuous mode [ 185.133710][ T41] usb 1-1: Manufacturer: ࠄ [ 185.154695][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.165598][ T41] usb 1-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 185.185944][ T3924] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 185.216055][ T3924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.234444][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.263478][ T3924] usb 3-1: Product: syz [ 185.273822][ T3924] usb 3-1: Manufacturer: syz [ 185.289644][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.313533][ T3924] usb 3-1: SerialNumber: syz [ 185.349088][ T3924] usb 3-1: config 0 descriptor?? [ 185.369936][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.404909][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.426885][ T3924] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 185.455132][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.482081][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.520065][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.551684][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.608934][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.633704][ T3924] gspca_sn9c2028: read1 error -32 [ 185.645264][ T4810] loop0: detected capacity change from 0 to 512 [ 185.683653][ T4713] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.691354][ T3924] gspca_sn9c2028: read1 error -32 [ 185.725226][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.734577][ T3924] gspca_sn9c2028: read1 error 0 [ 185.739488][ T3924] sn9c2028: probe of 3-1:0.0 failed with error -5 [ 185.774830][ T4810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.793937][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.802483][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 185.811363][ T3924] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 185.823703][ T4810] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 185.844021][ T3924] usb 3-1: No valid video chain found. [ 185.871359][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.955210][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.886037][ T4713] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.911588][ T3598] usb 3-1: USB disconnect, device number 12 [ 187.386969][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.397661][ T4713] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 187.406782][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.416682][ T4713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.437743][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.497724][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.573571][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.629313][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.692091][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.702800][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.712711][ T4457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.723256][ T4457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.734635][ T4457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.742096][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.751733][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.763168][ T4713] usb 4-1: config 0 descriptor?? [ 187.777285][ T4457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.811646][ T4457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.850203][ T4457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.914599][ T4457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.260113][ T3648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.289716][ T3648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.387386][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.445543][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.485791][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.515523][ T3645] bio_check_eod: 2594 callbacks suppressed [ 188.515542][ T3645] syz.1.2: attempt to access beyond end of device [ 188.515542][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.535778][ T3645] syz.1.2: attempt to access beyond end of device [ 188.535778][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.551385][ T3645] syz.1.2: attempt to access beyond end of device [ 188.551385][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.551508][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.565739][ T3645] syz.1.2: attempt to access beyond end of device [ 188.565739][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.589185][ T3645] syz.1.2: attempt to access beyond end of device [ 188.589185][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.603636][ T3645] syz.1.2: attempt to access beyond end of device [ 188.603636][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.619575][ T3645] syz.1.2: attempt to access beyond end of device [ 188.619575][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.634042][ T3645] syz.1.2: attempt to access beyond end of device [ 188.634042][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.649840][ T3645] syz.1.2: attempt to access beyond end of device [ 188.649840][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.664880][ T3645] syz.1.2: attempt to access beyond end of device [ 188.664880][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.724168][ T4713] video4linux radio32: keene_cmd_main failed (-71) [ 188.734202][ T4713] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 188.807873][ T4713] usb 4-1: USB disconnect, device number 12 [ 189.084086][ T3554] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 189.193527][ T3554] Bluetooth: hci3: Injecting HCI hardware error event [ 189.204112][ T3546] Bluetooth: hci3: hardware error 0x00 [ 189.557535][ T41] usb 1-1: USB disconnect, device number 3 [ 189.850606][ T3726] EXT4-fs (loop0): unmounting filesystem. [ 191.184683][ T3554] Bluetooth: hci5: command 0x0406 tx timeout [ 191.585167][ T3546] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 193.312036][ T4851] loop2: detected capacity change from 0 to 32768 [ 193.414171][ T4851] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.293 (4851) [ 193.524228][ T3645] bio_check_eod: 2865 callbacks suppressed [ 193.524248][ T3645] syz.1.2: attempt to access beyond end of device [ 193.524248][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.545942][ T3645] syz.1.2: attempt to access beyond end of device [ 193.545942][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.560397][ T3645] syz.1.2: attempt to access beyond end of device [ 193.560397][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.563556][ T3924] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 193.576012][ T3645] syz.1.2: attempt to access beyond end of device [ 193.576012][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.595667][ T3645] syz.1.2: attempt to access beyond end of device [ 193.595667][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.612665][ T3645] syz.1.2: attempt to access beyond end of device [ 193.612665][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.627111][ T3645] syz.1.2: attempt to access beyond end of device [ 193.627111][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.642960][ T3645] syz.1.2: attempt to access beyond end of device [ 193.642960][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.657386][ T3645] syz.1.2: attempt to access beyond end of device [ 193.657386][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.673283][ T3645] syz.1.2: attempt to access beyond end of device [ 193.673283][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.853534][ T3924] usb 1-1: Using ep0 maxpacket: 32 [ 193.993980][ T3924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.035790][ T3924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.061763][ T4859] loop4: detected capacity change from 0 to 32768 [ 194.088690][ T3924] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 194.142279][ T3924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.172159][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.178540][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.230892][ T3924] usb 1-1: config 0 descriptor?? [ 194.246934][ T4859] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 194.294672][ T3924] hub 1-1:0.0: USB hub found [ 194.323557][ T4859] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 194.399391][ T4851] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 194.450661][ T4851] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 194.483301][ T4859] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 194.502043][ T4862] netlink: 104 bytes leftover after parsing attributes in process `syz.0.298'. [ 194.512281][ T4851] BTRFS info (device loop2): using free space tree [ 194.603755][ T3924] hub 1-1:0.0: 1 port detected [ 194.704782][ T3595] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 194.712880][ T3595] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 194.758882][ T4885] 9pnet_fd: Insufficient options for proto=fd [ 195.004169][ T3595] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 291ms [ 195.060224][ T3595] gfs2: fsid=syz:syz.0: jid=0: Done [ 195.079778][ T4859] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 195.279031][ T3927] hub 1-1:0.0: activate --> -90 [ 195.284127][ T3595] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 195.376527][ T4851] BTRFS error (device loop2): open_ctree failed [ 195.543692][ T3595] usb 2-1: Using ep0 maxpacket: 8 [ 195.694097][ T3595] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 195.727689][ T3595] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 195.803717][ T3595] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.853248][ T3595] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.923804][ T3595] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.953593][ T3594] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 195.984222][ T3594] usb 1-1-port1: cannot reset (err = -71) [ 195.990461][ T3594] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 196.008191][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.063660][ T3594] usb 1-1-port1: cannot disable (err = -71) [ 196.104679][ T3594] usb 1-1-port1: cannot reset (err = -71) [ 196.147578][ T3594] usb 1-1-port1: cannot reset (err = -71) [ 196.187772][ T3594] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 196.216704][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.226315][ T3556] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.235147][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.248576][ T3556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.259961][ T3556] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 196.269453][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.313720][ T3922] usb 1-1: USB disconnect, device number 4 [ 196.333674][ T3595] usb 2-1: usb_control_msg returned -71 [ 196.339279][ T3595] usbtmc 2-1:16.0: can't read capabilities [ 196.347007][ T3594] usb 1-1-port1: cannot disable (err = -71) [ 196.352976][ T3594] usb 1-1-port1: attempt power cycle [ 196.413787][ T3554] Bluetooth: hci1: command 0x0406 tx timeout [ 196.420341][ T3595] usb 2-1: USB disconnect, device number 7 [ 197.812781][ T4909] loop2: detected capacity change from 0 to 512 [ 198.323584][ T3554] Bluetooth: hci3: command tx timeout [ 198.535636][ T3645] bio_check_eod: 2919 callbacks suppressed [ 198.535657][ T3645] syz.1.2: attempt to access beyond end of device [ 198.535657][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.556018][ T3645] syz.1.2: attempt to access beyond end of device [ 198.556018][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.572091][ T3645] syz.1.2: attempt to access beyond end of device [ 198.572091][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.586509][ T3645] syz.1.2: attempt to access beyond end of device [ 198.586509][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.602497][ T3645] syz.1.2: attempt to access beyond end of device [ 198.602497][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.617599][ T3645] syz.1.2: attempt to access beyond end of device [ 198.617599][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.633473][ T3645] syz.1.2: attempt to access beyond end of device [ 198.633473][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.648065][ T3645] syz.1.2: attempt to access beyond end of device [ 198.648065][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.664064][ T3645] syz.1.2: attempt to access beyond end of device [ 198.664064][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.678472][ T3645] syz.1.2: attempt to access beyond end of device [ 198.678472][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.893627][ T3597] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.147801][ T3597] usb 5-1: Using ep0 maxpacket: 32 [ 199.266514][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.290897][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.320686][ T3597] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.349793][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.405401][ T3597] usb 5-1: config 0 descriptor?? [ 199.494619][ T3597] hub 5-1:0.0: USB hub found [ 199.615882][ T102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.662443][ T4918] netlink: 104 bytes leftover after parsing attributes in process `syz.4.314'. [ 199.717639][ T4887] chnl_net:caif_netlink_parms(): no params data found [ 199.733800][ T3597] hub 5-1:0.0: 1 port detected [ 199.819256][ T102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.230018][ T102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.403687][ T3546] Bluetooth: hci3: command tx timeout [ 200.503682][ T936] hub 5-1:0.0: activate --> -90 [ 200.612212][ T102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.729568][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.753773][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.792496][ T4887] device bridge_slave_0 entered promiscuous mode [ 200.873107][ T4887] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.931492][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.968775][ T4887] device bridge_slave_1 entered promiscuous mode [ 201.164627][ T3597] usb 5-1: USB disconnect, device number 3 [ 201.173583][ T936] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 201.182663][ T936] usb 5-1-port1: attempt power cycle [ 201.238863][ T4887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.348517][ T4887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.600106][ T4887] team0: Port device team_slave_0 added [ 201.824808][ T4887] team0: Port device team_slave_1 added [ 201.864926][ T3731] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 201.949671][ T4953] loop4: detected capacity change from 0 to 2048 [ 201.975566][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.982534][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.009425][ T4887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.022096][ T4887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.052833][ T4887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.164830][ T4953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.274140][ T4887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.763767][ T3731] usb 3-1: Using ep0 maxpacket: 16 [ 202.774110][ T3546] Bluetooth: hci3: command tx timeout [ 202.883746][ T3731] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.907241][ T4887] device hsr_slave_0 entered promiscuous mode [ 202.933588][ T3731] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.009919][ T4457] EXT4-fs (loop4): unmounting filesystem. [ 203.016819][ T4887] device hsr_slave_1 entered promiscuous mode [ 203.164025][ T3731] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.183320][ T3731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.207864][ T4966] loop0: detected capacity change from 0 to 512 [ 203.253626][ T3731] usb 3-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 203.544346][ T3645] bio_check_eod: 2904 callbacks suppressed [ 203.544365][ T3645] syz.1.2: attempt to access beyond end of device [ 203.544365][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.564595][ T3645] syz.1.2: attempt to access beyond end of device [ 203.564595][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.580499][ T3645] syz.1.2: attempt to access beyond end of device [ 203.580499][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.594988][ T3645] syz.1.2: attempt to access beyond end of device [ 203.594988][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.610934][ T3645] syz.1.2: attempt to access beyond end of device [ 203.610934][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.625335][ T3645] syz.1.2: attempt to access beyond end of device [ 203.625335][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.641883][ T3645] syz.1.2: attempt to access beyond end of device [ 203.641883][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.656418][ T3645] syz.1.2: attempt to access beyond end of device [ 203.656418][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.664874][ T3731] usb 3-1: Manufacturer: ࠄ [ 203.672041][ T3645] syz.1.2: attempt to access beyond end of device [ 203.672041][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.689224][ T3645] syz.1.2: attempt to access beyond end of device [ 203.689224][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.723993][ T3731] usb 3-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 204.185990][ T4978] loop2: detected capacity change from 0 to 512 [ 204.436325][ T4978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.479283][ T4978] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038 (0x7fffffff) [ 204.803983][ T3546] Bluetooth: hci3: command tx timeout [ 207.190651][ T3553] EXT4-fs (loop2): unmounting filesystem. [ 208.554416][ T3645] bio_check_eod: 2306 callbacks suppressed [ 208.554437][ T3645] syz.1.2: attempt to access beyond end of device [ 208.554437][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.574715][ T3645] syz.1.2: attempt to access beyond end of device [ 208.574715][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.590615][ T3645] syz.1.2: attempt to access beyond end of device [ 208.590615][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.605036][ T3645] syz.1.2: attempt to access beyond end of device [ 208.605036][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.620902][ T3645] syz.1.2: attempt to access beyond end of device [ 208.620902][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.636042][ T3645] syz.1.2: attempt to access beyond end of device [ 208.636042][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.652836][ T3645] syz.1.2: attempt to access beyond end of device [ 208.652836][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.667229][ T3645] syz.1.2: attempt to access beyond end of device [ 208.667229][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.683076][ T3645] syz.1.2: attempt to access beyond end of device [ 208.683076][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.697800][ T3645] syz.1.2: attempt to access beyond end of device [ 208.697800][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.973748][ T3731] usb 3-1: 0:2 : does not exist [ 209.042227][ T3731] usb 3-1: USB disconnect, device number 13 [ 209.152079][ T4047] udevd[4047]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.376110][ T5018] loop4: detected capacity change from 0 to 32768 [ 210.397160][ T5046] loop0: detected capacity change from 0 to 2048 [ 210.427939][ T5018] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.338 (5018) [ 210.485164][ T5046] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.961931][ T5058] loop2: detected capacity change from 0 to 512 [ 211.377179][ T5018] BTRFS error (device loop4): open_ctree failed [ 211.495676][ T4887] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.543914][ T4887] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.628020][ T4887] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.686400][ T4887] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.563569][ T4887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.595769][ T3726] EXT4-fs (loop0): unmounting filesystem. [ 212.655835][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.664160][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.723714][ T27] INFO: task syz.1.2:3646 blocked for more than 143 seconds. [ 212.733544][ T27] Not tainted 6.1.97-syzkaller #0 [ 212.739133][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.761931][ T4887] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.802322][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.824955][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.848714][ T27] task:syz.1.2 state:D stack:26688 pid:3646 ppid:3544 flags:0x00004004 [ 212.868400][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.875595][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.902773][ T27] Call Trace: [ 212.909824][ T27] [ 212.936245][ T27] __schedule+0x142d/0x4550 [ 212.945901][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.984365][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.993098][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.013536][ T27] ? __sched_text_start+0x8/0x8 [ 213.018435][ T27] ? print_irqtrace_events+0x210/0x210 [ 213.096215][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 213.101381][ T27] ? rwsem_spin_on_owner+0x157/0x2e0 [ 213.134158][ T3920] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.141296][ T3920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.175067][ T27] schedule+0xbf/0x180 [ 213.179192][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 213.219311][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 213.226201][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.254153][ T27] ? down_write_killable_nested+0x90/0x90 [ 213.272551][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.298303][ T27] ? read_lock_is_recursive+0x10/0x10 [ 213.336868][ T27] ? ima_lsm_policy_change+0x620/0x620 [ 213.360889][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.382133][ T27] ? rwsem_write_trylock+0x166/0x210 [ 213.388281][ T27] ? clear_nonspinnable+0x60/0x60 [ 213.393366][ T27] process_measurement+0x446/0x21b0 [ 213.398648][ T27] ? mark_lock+0x9a/0x340 [ 213.403020][ T27] ? ima_file_mmap+0x1c0/0x1c0 [ 213.407916][ T27] ? dquot_initialize+0x20/0x20 [ 213.410851][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.412774][ T27] ? aa_get_current_label+0x111/0x1d0 [ 213.412809][ T27] ? apparmor_current_getsecid_subj+0xac/0x110 [ 213.467298][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.504443][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.549556][ T27] ima_file_check+0xed/0x170 [ 213.563958][ T3645] bio_check_eod: 2945 callbacks suppressed [ 213.563976][ T3645] syz.1.2: attempt to access beyond end of device [ 213.563976][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.576583][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.586281][ T3645] syz.1.2: attempt to access beyond end of device [ 213.586281][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.598604][ T27] ? do_dentry_open+0xce4/0x10f0 [ 213.606157][ T3645] syz.1.2: attempt to access beyond end of device [ 213.606157][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.626377][ T3645] syz.1.2: attempt to access beyond end of device [ 213.626377][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.640769][ T3645] syz.1.2: attempt to access beyond end of device [ 213.640769][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.651081][ T27] ? ima_bprm_check+0x2b0/0x2b0 [ 213.656489][ T3645] syz.1.2: attempt to access beyond end of device [ 213.656489][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.668448][ T27] path_openat+0x2687/0x2e60 [ 213.674101][ T3645] syz.1.2: attempt to access beyond end of device [ 213.674101][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.693798][ T3645] syz.1.2: attempt to access beyond end of device [ 213.693798][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.694135][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.708117][ T3645] syz.1.2: attempt to access beyond end of device [ 213.708117][ T3645] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.731201][ T3645] syz.1.2: attempt to access beyond end of device [ 213.731201][ T3645] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.760608][ T27] ? mark_lock+0x9a/0x340 [ 213.791606][ T27] ? do_filp_open+0x480/0x480 [ 213.818048][ T27] do_filp_open+0x230/0x480 [ 213.840461][ T4887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.869274][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 213.894325][ T27] ? _raw_spin_unlock+0x24/0x40 [ 213.931603][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.945473][ T27] ? alloc_fd+0x59c/0x640 [ 213.965734][ T27] do_sys_openat2+0x13b/0x500 [ 213.988966][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.015509][ T27] ? do_sys_open+0x220/0x220 [ 214.021403][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.047218][ T27] __x64_sys_openat+0x243/0x290 [ 214.083405][ T3920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.097476][ T27] ? __ia32_sys_open+0x270/0x270 [ 214.120323][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 214.159525][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 214.196082][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 214.227666][ T27] do_syscall_64+0x3b/0xb0 [ 214.251064][ T27] ? clear_bhb_loop+0x45/0xa0 [ 214.281040][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.321191][ T27] RIP: 0033:0x7efebad75bd9 [ 214.343744][ T27] RSP: 002b:00007efebbb92048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.386818][ T27] RAX: ffffffffffffffda RBX: 00007efebaf041e8 RCX: 00007efebad75bd9 [ 214.394927][ T27] RDX: 0000000000183341 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 214.402915][ T27] RBP: 00007efebade4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 214.411880][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.472443][ T27] R13: 000000000000006e R14: 00007efebaf041e8 R15: 00007ffe477eaed8 [ 214.517096][ T27] [ 214.581493][ T27] INFO: task syz.1.2:3647 blocked for more than 145 seconds. [ 214.668549][ T27] Not tainted 6.1.97-syzkaller #0 [ 214.722198][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 214.788941][ T27] task:syz.1.2 state:D stack:23696 pid:3647 ppid:3544 flags:0x00004004 [ 214.851134][ T27] Call Trace: [ 214.881820][ T27] [ 214.923383][ T27] __schedule+0x142d/0x4550 [ 214.941484][ T27] ? __sched_text_start+0x8/0x8 [ 214.979555][ T27] ? print_irqtrace_events+0x210/0x210 [ 215.009989][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 215.043676][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 215.076990][ T27] schedule+0xbf/0x180 [ 215.099052][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 215.132164][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 215.171510][ T27] ? down_write_killable_nested+0x90/0x90 [ 215.190738][ T27] ? read_lock_is_recursive+0x10/0x10 [ 215.210716][ T27] ? rwsem_write_trylock+0x166/0x210 [ 215.227548][ T27] ? clear_nonspinnable+0x60/0x60 [ 215.244866][ T27] ? f2fs_issue_checkpoint+0x2ed/0x4d0 [ 215.264837][ T27] f2fs_balance_fs+0x4fb/0x6c0 [ 215.280861][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 215.299899][ T27] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 215.319996][ T27] ? f2fs_sync_fs+0x201/0x410 [ 215.336113][ T27] f2fs_create+0x86f/0xa10 [ 215.351733][ T27] ? f2fs_lookup+0xae0/0xae0 [ 215.363159][ T27] path_openat+0x12f1/0x2e60 [ 215.378177][ T27] ? do_filp_open+0x480/0x480 [ 215.387326][ T27] do_filp_open+0x230/0x480 [ 215.391881][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 215.396564][ T27] ? _raw_spin_unlock+0x24/0x40 [ 215.401432][ T27] ? alloc_fd+0x59c/0x640 [ 215.405855][ T27] do_sys_openat2+0x13b/0x500 [ 215.411223][ T27] ? do_sys_open+0x220/0x220 [ 215.415917][ T27] __x64_sys_openat+0x243/0x290 [ 215.474827][ T27] ? __ia32_sys_open+0x270/0x270 [ 215.479896][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.493683][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 215.499520][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 215.513761][ T27] do_syscall_64+0x3b/0xb0 [ 215.519716][ T27] ? clear_bhb_loop+0x45/0xa0 [ 215.531373][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.542149][ T27] RIP: 0033:0x7efebad75bd9 [ 215.552974][ T27] RSP: 002b:00007efebbb71048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.564032][ T27] RAX: ffffffffffffffda RBX: 00007efebaf042c0 RCX: 00007efebad75bd9 [ 215.572106][ T27] RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 215.587092][ T27] RBP: 00007efebade4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 215.598722][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.611644][ T27] R13: 000000000000006e R14: 00007efebaf042c0 R15: 00007ffe477eaed8 [ 215.624837][ T27] [ 215.630930][ T102] device hsr_slave_0 left promiscuous mode [ 215.646986][ T27] [ 215.646986][ T27] Showing all locks held in the system: [ 215.669935][ T102] device hsr_slave_1 left promiscuous mode [ 215.681497][ T27] 1 lock held by rcu_tasks_kthre/12: [ 215.691610][ T27] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 215.707393][ T27] 1 lock held by rcu_tasks_trace/13: [ 215.712765][ T27] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 215.733114][ T27] 1 lock held by khungtaskd/27: [ 215.738289][ T27] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 215.755854][ T27] 5 locks held by kworker/u4:4/102: [ 215.762002][ T27] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 215.786164][ T27] #1: ffffc900015e7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 215.805483][ T27] #2: ffffffff8e28d810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 215.822285][ T27] #3: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe5/0x9d0 [ 215.834948][ T27] #4: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 215.853736][ T27] 1 lock held by dhcpcd/3216: [ 215.862918][ T27] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6e0 [ 215.879276][ T27] 2 locks held by getty/3303: [ 215.887313][ T27] #0: ffff88814b88e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 215.905842][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 215.930051][ T27] 3 locks held by kworker/0:3/3564: [ 215.940981][ T27] 4 locks held by kworker/u4:5/3590: [ 215.950325][ T27] #0: ffff888016e51138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 215.964808][ T27] #1: ffffc9000416fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 215.982755][ T27] #2: ffff88802369a0e0 (&type->s_umount_key#59){.+.+}-{3:3}, at: trylock_super+0x1b/0xf0 [ 215.995342][ T27] #3: ffff888023411140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 216.021003][ T27] 4 locks held by syz.1.2/3645: [ 216.036224][ T27] 2 locks held by syz.1.2/3646: [ 216.041169][ T27] #0: ffff88802369a460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 216.055420][ T27] #1: ffff88805ee89bf0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 216.072393][ T27] 3 locks held by syz.1.2/3647: [ 216.079842][ T27] #0: ffff88802369a460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 216.095134][ T27] #1: ffff88805ee89310 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 216.111188][ T27] #2: ffff888023411140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 216.125149][ T27] 3 locks held by kworker/1:11/3920: [ 216.131882][ T27] #0: ffff88814b548538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 216.151514][ T27] #1: ffffc9000565fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 216.173664][ T27] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 216.184277][ T27] 2 locks held by kworker/1:13/3922: [ 216.189651][ T27] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 216.207242][ T27] #1: ffffc9000562fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 216.222489][ T27] 1 lock held by syz-executor/4887: [ 216.237805][ T27] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 216.253719][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.261195][ T27] [ 216.270900][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.279589][ T27] ============================================= [ 216.279589][ T27] [ 216.296160][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.309385][ T27] NMI backtrace for cpu 1 [ 216.313749][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 216.321558][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 216.331612][ T27] Call Trace: [ 216.334894][ T27] [ 216.337827][ T27] dump_stack_lvl+0x1e3/0x2cb [ 216.342523][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 216.347990][ T27] ? panic+0x764/0x764 [ 216.352060][ T27] ? vprintk_emit+0x622/0x740 [ 216.356750][ T27] ? printk_sprint+0x490/0x490 [ 216.361520][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 216.366643][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 216.371594][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 216.377760][ T27] ? _printk+0xd1/0x111 [ 216.381917][ T27] ? panic+0x764/0x764 [ 216.385149][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.385975][ T27] ? __wake_up_klogd+0xcc/0x100 [ 216.385997][ T27] ? panic+0x764/0x764 [ 216.401955][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 216.408013][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 216.414065][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 216.420031][ T27] watchdog+0xf88/0xfd0 [ 216.424171][ T27] ? watchdog+0x1f8/0xfd0 [ 216.428504][ T27] kthread+0x28d/0x320 [ 216.432555][ T27] ? hungtask_pm_notify+0x50/0x50 [ 216.437566][ T27] ? kthread_blkcg+0xd0/0xd0 [ 216.442138][ T27] ret_from_fork+0x1f/0x30 [ 216.446543][ T27] [ 216.450447][ T27] Sending NMI from CPU 1 to CPUs 0: [ 216.455922][ C0] NMI backtrace for cpu 0 [ 216.455933][ C0] CPU: 0 PID: 3645 Comm: syz.1.2 Not tainted 6.1.97-syzkaller #0 [ 216.455948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 216.455956][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x58/0x60 [ 216.455982][ C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0f 1f 80 00 00 00 00 4c 8b 04 24 65 48 8b 15 c4 da 77 7e 65 8b [ 216.455994][ C0] RSP: 0018:ffffc900046feb18 EFLAGS: 00000246 [ 216.456008][ C0] RAX: ffffffff83ca78f5 RBX: 0000000000000000 RCX: 0000000000040000 [ 216.456018][ C0] RDX: ffffc9000a94c000 RSI: 000000000003ffff RDI: 0000000000040000 [ 216.456028][ C0] RBP: ffffc900046ff130 R08: ffffffff83ca7893 R09: ffffed100baad18c [ 216.456039][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000010 [ 216.456049][ C0] R13: 0000000000000000 R14: 000000000000000e R15: ffff88805d568c58 [ 216.456058][ C0] FS: 00007efebbbb36c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 216.456072][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.456082][ C0] CR2: 00007f0369fdbfa8 CR3: 000000001afa4000 CR4: 00000000003506f0 [ 216.456095][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.456103][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.456113][ C0] Call Trace: [ 216.456117][ C0] [ 216.456122][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 216.456142][ C0] ? read_lock_is_recursive+0x10/0x10 [ 216.456163][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 216.456182][ C0] ? nmi_handle+0x25/0x440 [ 216.456208][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 216.456227][ C0] ? nmi_handle+0x12e/0x440 [ 216.456245][ C0] ? nmi_handle+0x25/0x440 [ 216.456263][ C0] ? __sanitizer_cov_trace_pc+0x58/0x60 [ 216.456278][ C0] ? default_do_nmi+0x62/0x150 [ 216.456293][ C0] ? exc_nmi+0xa8/0x100 [ 216.456305][ C0] ? end_repeat_nmi+0x16/0x31 [ 216.456327][ C0] ? do_garbage_collect+0x22e3/0x81f0 [ 216.456345][ C0] ? do_garbage_collect+0x2345/0x81f0 [ 216.456364][ C0] ? __sanitizer_cov_trace_pc+0x58/0x60 [ 216.456381][ C0] ? __sanitizer_cov_trace_pc+0x58/0x60 [ 216.456397][ C0] ? __sanitizer_cov_trace_pc+0x58/0x60 [ 216.456414][ C0] [ 216.456418][ C0] [ 216.456422][ C0] do_garbage_collect+0x2345/0x81f0 [ 216.456468][ C0] ? get_victim_by_default+0xe8a/0x6ff0 [ 216.456485][ C0] ? f2fs_gc+0x32a0/0x32a0 [ 216.456501][ C0] ? get_victim_by_default+0x6893/0x6ff0 [ 216.456521][ C0] ? mark_lock+0x9a/0x340 [ 216.456547][ C0] ? f2fs_gc+0xef4/0x32a0 [ 216.456564][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 216.456589][ C0] ? up_write+0x19d/0x580 [ 216.456605][ C0] ? get_ckpt_valid_blocks+0x260/0x260 [ 216.456619][ C0] ? __up_read+0x690/0x690 [ 216.456639][ C0] f2fs_gc+0x1169/0x32a0 [ 216.456672][ C0] ? f2fs_start_bidx_of_node+0x370/0x370 [ 216.456700][ C0] ? rwsem_write_trylock+0x166/0x210 [ 216.456725][ C0] f2fs_balance_fs+0x506/0x6c0 [ 216.456743][ C0] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 216.456762][ C0] ? __up_read+0x318/0x690 [ 216.456779][ C0] ? folio_unlock+0x109/0x2f0 [ 216.456800][ C0] f2fs_map_blocks+0x2871/0x3ab0 [ 216.456831][ C0] ? f2fs_do_map_lock+0x70/0x70 [ 216.456854][ C0] expand_inode_data+0x56d/0xaf0 [ 216.456876][ C0] ? f2fs_insert_range+0x3c0/0x3c0 [ 216.456889][ C0] ? file_modified_flags+0x3e1/0x480 [ 216.456912][ C0] ? rcu_read_lock_any_held+0xb3/0x160 [ 216.456932][ C0] f2fs_fallocate+0x44a/0x9f0 [ 216.456954][ C0] vfs_fallocate+0x547/0x6b0 [ 216.456978][ C0] do_vfs_ioctl+0x222c/0x2a90 [ 216.456994][ C0] ? __x64_compat_sys_ioctl+0x80/0x80 [ 216.457008][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 216.457024][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 216.457042][ C0] ? __kmem_cache_free+0x25c/0x3c0 [ 216.457061][ C0] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 216.457077][ C0] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 216.457092][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 216.457114][ C0] ? __fget_files+0x28/0x4a0 [ 216.457136][ C0] ? __fget_files+0x28/0x4a0 [ 216.457148][ C0] ? __fget_files+0x435/0x4a0 [ 216.457162][ C0] ? __fget_files+0x28/0x4a0 [ 216.457177][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 216.457191][ C0] ? security_file_ioctl+0x7d/0xa0 [ 216.457206][ C0] __se_sys_ioctl+0x81/0x160 [ 216.457225][ C0] do_syscall_64+0x3b/0xb0 [ 216.457242][ C0] ? clear_bhb_loop+0x45/0xa0 [ 216.457260][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.457277][ C0] RIP: 0033:0x7efebad75bd9 [ 216.457290][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.457301][ C0] RSP: 002b:00007efebbbb3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.457315][ C0] RAX: ffffffffffffffda RBX: 00007efebaf04110 RCX: 00007efebad75bd9 [ 216.457325][ C0] RDX: 00000000200000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 216.457334][ C0] RBP: 00007efebade4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 216.457344][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.457352][ C0] R13: 000000000000006e R14: 00007efebaf04110 R15: 00007ffe477eaed8 [ 216.457369][ C0] [ 216.460809][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 216.983803][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 216.991613][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 217.001666][ T27] Call Trace: [ 217.004945][ T27] [ 217.007875][ T27] dump_stack_lvl+0x1e3/0x2cb [ 217.012568][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 217.018123][ T27] ? panic+0x764/0x764 [ 217.022202][ T27] ? llist_add_batch+0x160/0x1d0 [ 217.027148][ T27] ? vscnprintf+0x59/0x80 [ 217.031481][ T27] panic+0x318/0x764 [ 217.035376][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 217.041541][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 217.046923][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 217.053082][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 217.059242][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 217.065489][ T27] watchdog+0xfc7/0xfd0 [ 217.069654][ T27] ? watchdog+0x1f8/0xfd0 [ 217.073990][ T27] kthread+0x28d/0x320 [ 217.078055][ T27] ? hungtask_pm_notify+0x50/0x50 [ 217.083080][ T27] ? kthread_blkcg+0xd0/0xd0 [ 217.087671][ T27] ret_from_fork+0x1f/0x30 [ 217.092102][ T27] [ 217.095241][ T27] Kernel Offset: disabled [ 217.099551][ T27] Rebooting in 86400 seconds..