last executing test programs: 1m33.938982536s ago: executing program 4 (id=525): socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1}, 0x10) 1m32.796909308s ago: executing program 4 (id=526): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) 1m32.796617768s ago: executing program 4 (id=527): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) 1m31.796341948s ago: executing program 4 (id=528): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2000000000000000840000000200000000800c000800000000000000", @ANYRES32, @ANYBLOB="18000000000000008400000000000000040009004b05080018000000000000008400000006000000020000000000000018000000000000008400000000000000060064000b0010001800000000000000840000000000000007003f000700030030000000000000008400000001000000ff010e0008000000010001000c0000000100000007000000b50a0000", @ANYRES32, @ANYBLOB="18000000000000008400000000000000891e00016b0800001800000000000000840000000000000080000e000000acfe18"], 0xf8}, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) 1m31.795508498s ago: executing program 4 (id=529): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000580)={[{@resuid}]}, 0xfe, 0x4a1, &(0x7f0000000940)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./file1\x00') statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 1m27.613702073s ago: executing program 4 (id=541): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) 1m0.343668105s ago: executing program 1 (id=580): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000280)='./file0\x00'}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="20000000020803000000008000000000000000000900010073797a3000000000b728e37a6992894ff00af955806b3de21d7b738b3a9bdf5cafcaa539b88dafca8a7ccf67bf2151c546f7e5ef18dc11ca918b220a7049ec74c37278fca6432d2fcbab33e21e6532219b64a62596d394981137b76176485afab44dc89658bcb54a86aa1d21cc19ec60790950d5bc576c81364f8d020d3a6d8017b530f2163b12435f8430878a8041e6f819808739dadb29253dbabf78cbac7a13c97910970333a41006b02e2709d43531ac83869cc7120c1339c54ada738039a68ed39f2e99c7bb603da28024add4b0fcbb7dd57008925217ececebf54a2f0f240ff111fa0121bfc3bc869020b5d18006eab90c8b7348d615b80d3d9e315a"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000500)=""/149, 0x95}], 0x6, &(0x7f0000000700)=""/212, 0xd4}, 0x200}], 0x1, 0x2000, &(0x7f0000000800)) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0xca, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@mask_fadd={0x58, 0x10c, 0x8, {{}, 0x0, 0x0}}], 0x58}, 0x0) msgget$private(0x0, 0x0) io_setup(0x0, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000001740)={0xa, @sdr}) 59.132318133s ago: executing program 1 (id=581): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000240), 0x10) 58.652317277s ago: executing program 1 (id=584): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xee, 0x1af, &(0x7f0000000580)="$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") r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) r5 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x18) renameat2(r5, &(0x7f0000000000)='./file1\x00', r6, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x3, 0x5}, 0x4) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 54.580408781s ago: executing program 1 (id=589): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a4000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) syz_emit_ethernet(0x2e, &(0x7f0000000b40)={@broadcast, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @empty, @remote, @multicast1}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)='\'', 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x5d) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0xe3) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x6c, r6, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xad}}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000240)=""/41, 0x29}], 0x2}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000c80), &(0x7f00000003c0)=0x68) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 48.999797941s ago: executing program 1 (id=598): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xee, 0x1af, &(0x7f0000000580)="$eJzs282O0lAYxvGnlALi99fGlYkL3QiKbtzJBXgD7ghUQixqxA3ExHgpcyfcydwAJDO7WU0nLWUCpMBpOzOF4f9LgDc5fc45JD1wzqICcLAehe+WLDlh5fv+v5eSvn6RVMx5cgCula9zH8Chsk/yngGAfEybdrgPGFvS8enf9iR6OYb7h2mzMCsqkhbyJdP8fyv8fFGUJgv5ctTl1v3L0Sz/Wsv5OwnHr67kq1ty1mV+9v3fvFrO35V0T9J9SQ8kPYzOWo8lPYkZv7My/nPD+QNZBHdfLWs+QwfB6vnW89x3cY329rwT5d/HNy/8hIxjLyhF+YbhfNflP6TMl6N8rf3T68S0F1L2C5go5Lz+benMX13/n83zxc3rH8AGg+Hoe8vz3N8JCicsylEPCeLB5QnHosijqMQ0OSnvlp0ugr+vHZiGaTFftTc5FoDbqv6n/6s+GI7e9vqtrtt1fzQ+fpofu8NzeX3t6RzAnlvenAMAAAAAAAAAAAAAgH30VNKzNEHTB/wAAAAA7IyrfWbIkRT/2B8AAAAAAAAAAAAAAAAAAACA7C4CAAD//3Y4Qng=") r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) r4 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x18) renameat2(r4, &(0x7f0000000000)='./file1\x00', r5, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x3, 0x5}, 0x4) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 40.782680207s ago: executing program 1 (id=611): syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 39.777837097s ago: executing program 2 (id=615): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) 39.513920031s ago: executing program 2 (id=617): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x46, 0x40000000000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ee8b4c7b167c8f3cc84c01669fcfc1994e794690f88f5c98f17ad5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x0, 0x0, {0x18}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) 37.28925629s ago: executing program 2 (id=618): ioperm(0x0, 0x3, 0x0) eventfd2(0x0, 0xc0801) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r1, 0x0, 0x4) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, 0x80) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000002c0)='-^\x00') setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) 33.595606661s ago: executing program 2 (id=623): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xee, 0x1af, &(0x7f0000000580)="$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") r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) r4 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x18) renameat2(r4, &(0x7f0000000000)='./file1\x00', r5, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x3, 0x5}, 0x4) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 31.294211997s ago: executing program 2 (id=624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) 27.372242488s ago: executing program 2 (id=630): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}}}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8}, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001640), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000002740)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB="0400fefffffffddbdf2511000000080015000000000008001500c100000008001500c000000008000100", @ANYBLOB="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", @ANYBLOB="402d83398a09d925756aaa8782b43b1e94b1c98cd87d13b742c91d5780c2f565b1e670ba1ca38148d9b7871e2a050b709c76b3d43bedaab5e41586a9c11988e6d1b9bcf6262f9d80cf8acfecbc63183b2611e1c3e9b6ffae944b268b12405f6a7de08af374dc981dbe90729fd3ad7f0cd3f05e96f1"], 0x34}}, 0x80808) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8de853fe007a3b24600000000000000fc000000000000000000000000000000fc00000000000000000000000000110000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3ba}, {}, 0xffffffff}}, 0xb8}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffe39}]}) fadvise64(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, &(0x7f0000000100)={@null, 0x0, 'lo\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 17.776880878s ago: executing program 3 (id=640): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = socket$kcm(0x2, 0x0, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe(0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000025c0)="866b3d570029a5e6", 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="c5", 0x1}, {0x0}, {&(0x7f0000000200)='p&x', 0x3}], 0x3}], 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = dup2(0xffffffffffffffff, r5) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) chdir(&(0x7f0000000100)='./file1\x00') setxattr$security_ima(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000380)=@sha1={0x1, "11e4c08b69ad7a48699bd8f9b310da3cc2348f04"}, 0x15, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000180)={0x1, 0x1, [@multicast]}) r7 = open(0x0, 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r7, 0x0, 0x0, &(0x7f0000000040)) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 15.787728486s ago: executing program 3 (id=642): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c000080"], 0x20}}, 0x0) 14.592132913s ago: executing program 3 (id=644): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xee, 0x1af, &(0x7f0000000580)="$eJzs282O0lAYxvGnlALi99fGlYkL3QiKbtzJBXgD7ghUQixqxA3ExHgpcyfcydwAJDO7WU0nLWUCpMBpOzOF4f9LgDc5fc45JD1wzqICcLAehe+WLDlh5fv+v5eSvn6RVMx5cgCula9zH8Chsk/yngGAfEybdrgPGFvS8enf9iR6OYb7h2mzMCsqkhbyJdP8fyv8fFGUJgv5ctTl1v3L0Sz/Wsv5OwnHr67kq1ty1mV+9v3fvFrO35V0T9J9SQ8kPYzOWo8lPYkZv7My/nPD+QNZBHdfLWs+QwfB6vnW89x3cY329rwT5d/HNy/8hIxjLyhF+YbhfNflP6TMl6N8rf3T68S0F1L2C5go5Lz+benMX13/n83zxc3rH8AGg+Hoe8vz3N8JCicsylEPCeLB5QnHosijqMQ0OSnvlp0ugr+vHZiGaTFftTc5FoDbqv6n/6s+GI7e9vqtrtt1fzQ+fpofu8NzeX3t6RzAnlvenAMAAAAAAAAAAAAAgH30VNKzNEHTB/wAAAAA7IyrfWbIkRT/2B8AAAAAAAAAAAAAAAAAAACA7C4CAAD//3Y4Qng=") r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) r5 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x18) renameat2(r5, &(0x7f0000000000)='./file1\x00', r6, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x3, 0x5}, 0x4) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 8.176320988s ago: executing program 3 (id=650): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xc}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000800)=ANY=[], 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="f1ff2dbd7000fddbdf250e00000008003900360c006008000300", @ANYRES64=r4], 0x24}, 0x1, 0x14}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x15) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 6.938208929s ago: executing program 0 (id=651): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c000080"], 0x20}}, 0x0) 5.736533876s ago: executing program 3 (id=652): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000500)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6}, @noop, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) sigaltstack(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x22, 0x2, 0x4) getpeername$inet(r5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x25, 0x0, "67d401136a26f0e201537ab118c4aab19a0ea93185087ed1128770039bdeda45de723fb17a76a2b9e404fff84d36c7e40044956b12258f3c61799f79b1c06b4a0433dae1ad3b8ea0d9fc8cd629ba56e3"}, 0xd8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12017002000000202312073f4000010203f6ac541376abd188c0200904000601030105068921018081012224060905810340008306070905020310007f00f3"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.756277704s ago: executing program 0 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 3.586866029s ago: executing program 0 (id=654): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x46, 0x40000000000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ee8b4c7b167c8f3cc84c01669fcfc1994e794690f88f5c98f17ad5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x18}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) 1.812588108s ago: executing program 0 (id=655): mkdir(0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r1, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 627.694304ms ago: executing program 0 (id=656): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}, 0x0) 620.384115ms ago: executing program 3 (id=657): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xee, 0x1af, &(0x7f0000000580)="$eJzs282O0lAYxvGnlALi99fGlYkL3QiKbtzJBXgD7ghUQixqxA3ExHgpcyfcydwAJDO7WU0nLWUCpMBpOzOF4f9LgDc5fc45JD1wzqICcLAehe+WLDlh5fv+v5eSvn6RVMx5cgCula9zH8Chsk/yngGAfEybdrgPGFvS8enf9iR6OYb7h2mzMCsqkhbyJdP8fyv8fFGUJgv5ctTl1v3L0Sz/Wsv5OwnHr67kq1ty1mV+9v3fvFrO35V0T9J9SQ8kPYzOWo8lPYkZv7My/nPD+QNZBHdfLWs+QwfB6vnW89x3cY329rwT5d/HNy/8hIxjLyhF+YbhfNflP6TMl6N8rf3T68S0F1L2C5go5Lz+benMX13/n83zxc3rH8AGg+Hoe8vz3N8JCicsylEPCeLB5QnHosijqMQ0OSnvlp0ugr+vHZiGaTFftTc5FoDbqv6n/6s+GI7e9vqtrtt1fzQ+fpofu8NzeX3t6RzAnlvenAMAAAAAAAAAAAAAgH30VNKzNEHTB/wAAAAA7IyrfWbIkRT/2B8AAAAAAAAAAAAAAAAAAACA7C4CAAD//3Y4Qng=") r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) r5 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x18) renameat2(r5, &(0x7f0000000000)='./file1\x00', r6, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x3, 0x5}, 0x4) mount$overlay(0x0, &(0x7f0000002240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 0s ago: executing program 0 (id=658): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x66, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r2}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080), 0xc) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '\'%'}], 0xa, "df29f19101d36746a344b4f1101c7fe601af5606e102f25a03bfb0cce5ff01156eeb606ee99f6cecedfb05f245230fff05769b1b7a1c707f8e6b988eb0eea857f4d8f100f40ed1bcf07b16acef973873fcd03096fbafea923dee3878df00000000000000"}, 0x77) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_mtu=0x3a}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x8, 0x2, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r6}, &(0x7f0000001180), &(0x7f0000001200)}, 0x20) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) kernel console output (not intermixed with test programs): 5257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 185.488496][ T3627] usb 5-1: USB disconnect, device number 4 [ 185.498005][ T4890] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 185.505554][ T4890] usb 5-1-port1: attempt power cycle [ 185.520921][ T5217] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 185.533772][ T5217] syz.3.356: attempt to access beyond end of device [ 185.533772][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.553300][ T5217] syz.3.356: attempt to access beyond end of device [ 185.553300][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 185.579047][ T5217] syz.3.356: attempt to access beyond end of device [ 185.579047][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.593701][ T5217] syz.3.356: attempt to access beyond end of device [ 185.593701][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 185.645063][ T5217] syz.3.356: attempt to access beyond end of device [ 185.645063][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.659759][ T5217] syz.3.356: attempt to access beyond end of device [ 185.659759][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 185.676446][ T5217] syz.3.356: attempt to access beyond end of device [ 185.676446][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.691094][ T5217] syz.3.356: attempt to access beyond end of device [ 185.691094][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 185.707421][ T5217] syz.3.356: attempt to access beyond end of device [ 185.707421][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.723043][ T5217] syz.3.356: attempt to access beyond end of device [ 185.723043][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 186.192210][ T3827] EXT4-fs (loop1): unmounting filesystem. [ 186.288018][ T5266] [U] iý€ [ 186.291581][ T5266] [U] % [ 186.346356][ T5263] [U] ëVëA*ôèÁ’L4°jn$² [ 186.859446][ T5275] netlink: 44 bytes leftover after parsing attributes in process `syz.0.376'. [ 186.933610][ T14] libceph: connect (1)[c::]:6789 error -101 [ 186.943169][ T3627] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 186.957070][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 187.020405][ T5279] ceph: No mds server is up or the cluster is laggy [ 187.296936][ T5289] loop0: detected capacity change from 0 to 2048 [ 187.503130][ T5291] IPVS: Scheduler module ip_vs_sip not found [ 187.514201][ T5289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 187.799536][ T153] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 187.956524][ T5299] bridge0: port 3(macvlan1) entered blocking state [ 187.963185][ T5299] bridge0: port 3(macvlan1) entered disabled state [ 187.970980][ T5299] device macvlan1 entered promiscuous mode [ 187.977614][ T5299] bridge0: port 3(macvlan1) entered blocking state [ 187.984207][ T5299] bridge0: port 3(macvlan1) entered forwarding state [ 188.902081][ T3829] EXT4-fs (loop0): unmounting filesystem. [ 188.947760][ T3627] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.004036][ T3627] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.022836][ T3627] usb 3-1: config 1 has no interface number 0 [ 189.050979][ T3627] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.071527][ T3627] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 189.086792][ T3627] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.267911][ T3627] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.282867][ T3627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.291657][ T3627] usb 3-1: Product: syz [ 189.295941][ T3627] usb 3-1: Manufacturer: syz [ 189.308115][ T3627] usb 3-1: SerialNumber: syz [ 189.377683][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.398058][ T4890] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 189.638309][ T4890] usb 1-1: Using ep0 maxpacket: 16 [ 189.643632][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 189.895844][ T3561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.918054][ T3561] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.926787][ T3561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.937553][ T3564] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.946466][ T3564] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 189.954997][ T3561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.968494][ T4890] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 189.977843][ T14] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 189.986905][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.007772][ T3627] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 190.013829][ T3627] cdc_ncm 3-1:1.1: bind() failure [ 190.039889][ T4890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.083475][ T14] usb 2-1: Product: syz [ 190.088141][ T4890] usb 1-1: Product: syz [ 190.102720][ T14] usb 2-1: Manufacturer: syz [ 190.107358][ T14] usb 2-1: SerialNumber: syz [ 190.112492][ T4890] usb 1-1: Manufacturer: syz [ 190.124071][ T4890] usb 1-1: SerialNumber: syz [ 190.152808][ T14] usb 2-1: config 0 descriptor?? [ 190.161438][ T4890] usb 1-1: config 0 descriptor?? [ 190.202651][ T4890] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 190.233026][ T14] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 190.410776][ T4890] gspca_sn9c2028: read1 error -32 [ 190.454101][ T14] gspca_sn9c2028: read1 error -32 [ 190.483570][ T4890] gspca_sn9c2028: read1 error -32 [ 190.509888][ T14] gspca_sn9c2028: read1 error -32 [ 190.520616][ T5310] chnl_net:caif_netlink_parms(): no params data found [ 190.528721][ T4890] gspca_sn9c2028: read1 error 0 [ 190.534354][ T4890] sn9c2028: probe of 1-1:0.0 failed with error -5 [ 190.540326][ T5217] bio_check_eod: 2426 callbacks suppressed [ 190.540344][ T5217] syz.3.356: attempt to access beyond end of device [ 190.540344][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.553403][ T4890] usb 1-1: Found UVC 0.00 device syz (0458:7005) [ 190.561178][ T5217] syz.3.356: attempt to access beyond end of device [ 190.561178][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.583306][ T5217] syz.3.356: attempt to access beyond end of device [ 190.583306][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.587944][ T14] gspca_sn9c2028: read1 error 0 [ 190.623359][ T4890] usb 1-1: No valid video chain found. [ 190.642864][ T5217] syz.3.356: attempt to access beyond end of device [ 190.642864][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.660474][ T5217] syz.3.356: attempt to access beyond end of device [ 190.660474][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.667946][ T14] sn9c2028: probe of 2-1:0.0 failed with error -5 [ 190.675118][ T5217] syz.3.356: attempt to access beyond end of device [ 190.675118][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.697128][ T5217] syz.3.356: attempt to access beyond end of device [ 190.697128][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.704097][ T14] usb 2-1: Found UVC 0.00 device syz (0458:7005) [ 190.711883][ T5217] syz.3.356: attempt to access beyond end of device [ 190.711883][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.734798][ T5217] syz.3.356: attempt to access beyond end of device [ 190.734798][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.750234][ T5217] syz.3.356: attempt to access beyond end of device [ 190.750234][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.798600][ T14] usb 2-1: No valid video chain found. [ 191.010691][ T4890] usb 2-1: USB disconnect, device number 8 [ 191.121384][ T5310] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.130054][ T3640] usb 3-1: USB disconnect, device number 15 [ 191.161274][ T5310] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.237807][ T5310] device bridge_slave_0 entered promiscuous mode [ 191.289619][ T5310] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.345553][ T5310] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.380387][ T5310] device bridge_slave_1 entered promiscuous mode [ 191.414832][ T3549] Bluetooth: hci6: sending frame failed (-49) [ 191.423098][ T3561] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 191.446103][ T5324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.388'. [ 191.625702][ T5310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.633537][ T4687] usb 1-1: USB disconnect, device number 12 [ 191.709649][ T5310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.943953][ T5310] team0: Port device team_slave_0 added [ 191.997695][ T3561] Bluetooth: hci5: command tx timeout [ 192.007199][ T5310] team0: Port device team_slave_1 added [ 193.068601][ T5332] IPVS: Scheduler module ip_vs_sip not found [ 193.076060][ T5310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.160341][ T5310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.317506][ T5310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.332130][ T5341] loop1: detected capacity change from 0 to 2048 [ 193.368909][ T5343] [U] iý€ [ 193.372068][ T5343] [U] % [ 193.402373][ T5310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.439145][ T5310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.466261][ T5342] [U] ëVëA*ôèÁ’L4°jn$² [ 193.480753][ T5310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.529017][ T5341] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 193.537667][ T14] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 194.117587][ T5310] device hsr_slave_0 entered promiscuous mode [ 194.124751][ T5310] device hsr_slave_1 entered promiscuous mode [ 194.132641][ T3561] Bluetooth: hci5: command tx timeout [ 194.156091][ T5310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.165926][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.177686][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.235180][ T5310] Cannot create hsr debugfs directory [ 194.267953][ T14] usb 3-1: config 0 has no interfaces? [ 194.333949][ T3827] EXT4-fs (loop1): unmounting filesystem. [ 194.452302][ T14] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.482405][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.533359][ T14] usb 3-1: Product: syz [ 194.552111][ T14] usb 3-1: Manufacturer: syz [ 194.561718][ T14] usb 3-1: SerialNumber: syz [ 194.602851][ T5362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.400'. [ 194.663221][ T14] usb 3-1: config 0 descriptor?? [ 195.053044][ T3640] usb 3-1: USB disconnect, device number 16 [ 195.548058][ T5217] bio_check_eod: 2632 callbacks suppressed [ 195.548076][ T5217] syz.3.356: attempt to access beyond end of device [ 195.548076][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.568395][ T5217] syz.3.356: attempt to access beyond end of device [ 195.568395][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.583713][ T5217] syz.3.356: attempt to access beyond end of device [ 195.583713][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.642866][ T5217] syz.3.356: attempt to access beyond end of device [ 195.642866][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.660262][ T5217] syz.3.356: attempt to access beyond end of device [ 195.660262][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.674942][ T5217] syz.3.356: attempt to access beyond end of device [ 195.674942][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.690867][ T5217] syz.3.356: attempt to access beyond end of device [ 195.690867][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.706510][ T5217] syz.3.356: attempt to access beyond end of device [ 195.706510][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.722990][ T5217] syz.3.356: attempt to access beyond end of device [ 195.722990][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.737736][ T5217] syz.3.356: attempt to access beyond end of device [ 195.737736][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.966271][ T5367] 9pnet_fd: Insufficient options for proto=fd [ 195.977982][ T5310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.271608][ T3549] Bluetooth: hci5: command tx timeout [ 197.269206][ T5377] [U] iý€ [ 197.272369][ T5377] [U] % [ 197.299632][ T5376] [U] ëVëA*ôèÁ’L4°jn$² [ 197.596214][ T5375] IPVS: Scheduler module ip_vs_sip not found [ 197.786977][ T5310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.857975][ T5384] netlink: 'syz.0.409': attribute type 10 has an invalid length. [ 197.865962][ T5384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.409'. [ 197.917732][ T14] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.990969][ T5384] team0: Port device geneve0 added [ 198.167534][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 198.307834][ T3561] Bluetooth: hci5: command tx timeout [ 198.313978][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.355418][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.365830][ T5393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 198.406589][ T14] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.433052][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.485038][ T14] usb 3-1: config 0 descriptor?? [ 198.550219][ T14] hub 3-1:0.0: USB hub found [ 198.809714][ T5386] netlink: 104 bytes leftover after parsing attributes in process `syz.2.410'. [ 198.826847][ T5310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.917664][ T14] hub 3-1:0.0: 1 port detected [ 199.208453][ T5396] loop0: detected capacity change from 0 to 4096 [ 199.228296][ T5396] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 199.390603][ T5310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.561011][ T5389] loop1: detected capacity change from 0 to 32768 [ 199.622049][ T5396] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 200.427739][ T14] hub 3-1:0.0: activate --> -90 [ 200.559748][ T5217] bio_check_eod: 2446 callbacks suppressed [ 200.559768][ T5217] syz.3.356: attempt to access beyond end of device [ 200.559768][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 200.580247][ T5217] syz.3.356: attempt to access beyond end of device [ 200.580247][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 200.646343][ T5217] syz.3.356: attempt to access beyond end of device [ 200.646343][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 200.661653][ T5217] syz.3.356: attempt to access beyond end of device [ 200.661653][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 200.677925][ T5217] syz.3.356: attempt to access beyond end of device [ 200.677925][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 200.692560][ T5217] syz.3.356: attempt to access beyond end of device [ 200.692560][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 200.708794][ T5217] syz.3.356: attempt to access beyond end of device [ 200.708794][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 200.723418][ T5217] syz.3.356: attempt to access beyond end of device [ 200.723418][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 200.739591][ T5217] syz.3.356: attempt to access beyond end of device [ 200.739591][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 200.754226][ T5217] syz.3.356: attempt to access beyond end of device [ 200.754226][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 201.279968][ T3640] usb 3-1: USB disconnect, device number 17 [ 201.297706][ T4890] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 201.341570][ T3674] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (3674) [ 202.787988][ T3640] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 202.994339][ T3627] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.057733][ T3640] usb 3-1: Using ep0 maxpacket: 16 [ 203.095017][ T5412] IPVS: Scheduler module ip_vs_sip not found [ 203.177957][ T3640] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.374932][ T3627] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.391329][ T3627] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.417902][ T3640] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.439086][ T3640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.447152][ T3640] usb 3-1: Product: çœåž´ìœ è˜½ç¬ê¾žé—¨î·†ä³°ç¼£ï±¨ì“Žì³¼êšâš—í‹”å¿ä¤é‡±åšŠè“⮊㭋ç†åžì¾è»¡êºŸâ¯¾ê‚®ì¿±ã¦ï¥›å²Žä§ï°³ëŸ³î®æ…®ê»–꣱踎뽚㽴炧â»ç¯€æ¬›å“é«Šï·ã²¥èž‡ç­˜æ“±ã¾¾ãŠ„⇋âŠì„䨽⾕á„磄⣣⹯Ք䖧涑晆ç’༽悾ᱺ뀗ာ惆ꄃ䄮ᥜæ—忇ཎ̓䑼à§ä¼’閶緊ἶ쮼㶖ç¾ážµï¶‚䨡붻ᣊçŒîŸ´ãŒ¾Ò¨ê¾‘ᢚ炩ê­è› ï…±è¬Š [ 203.492420][ T3627] usb 2-1: config 1 has no interface number 0 [ 203.511189][ T3627] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.527332][ T3627] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 203.539804][ T3627] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.560289][ T3640] usb 3-1: Manufacturer: à „ [ 203.565190][ T3640] usb 3-1: SerialNumber: 傧塵μ驨âŽèƒ½ê¾é–›àª©ç•šä¸«â£²ëœ«î¬³âœ–⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡé¸èŸ¨á«¶æ¨ä‹œä©äˆƒíŠšæ‘Žï†£è»§ï˜³â‚…êšî³ŸæŠ¸ç±“ᥬӗé‰á‚ꫮ훖弦瀫츇ꂄ [ 203.727814][ T3627] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.745142][ T3627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.754029][ T3627] usb 2-1: Product: syz [ 203.763627][ T4990] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 203.773387][ T3627] usb 2-1: Manufacturer: syz [ 203.783513][ T3627] usb 2-1: SerialNumber: syz [ 203.904888][ T5416] loop2: detected capacity change from 0 to 512 [ 203.963112][ T5416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.979484][ T5416] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038 (0x7fffffff) [ 205.378481][ T5310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 205.416978][ T5310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.448390][ T5310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.486910][ T5310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.567484][ T5217] bio_check_eod: 2066 callbacks suppressed [ 205.567502][ T5217] syz.3.356: attempt to access beyond end of device [ 205.567502][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.587946][ T5217] syz.3.356: attempt to access beyond end of device [ 205.587946][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.608291][ T4990] usb 5-1: config 0 interface 0 has no altsetting 0 [ 205.614959][ T4990] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 205.625648][ T3627] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 205.637007][ T3627] cdc_ncm 2-1:1.1: bind() failure [ 205.645474][ T5217] syz.3.356: attempt to access beyond end of device [ 205.645474][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.660099][ T5217] syz.3.356: attempt to access beyond end of device [ 205.660099][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.676388][ T5217] syz.3.356: attempt to access beyond end of device [ 205.676388][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.691013][ T5217] syz.3.356: attempt to access beyond end of device [ 205.691013][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.707193][ T5217] syz.3.356: attempt to access beyond end of device [ 205.707193][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.722276][ T5217] syz.3.356: attempt to access beyond end of device [ 205.722276][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.738545][ T5217] syz.3.356: attempt to access beyond end of device [ 205.738545][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.753186][ T5217] syz.3.356: attempt to access beyond end of device [ 205.753186][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.832208][ T5310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.916379][ T5310] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.940112][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.953498][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.998346][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.014532][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.026509][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.033760][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.051059][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.064039][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.077416][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.084677][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.104080][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.162579][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.175011][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.192653][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.215362][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.227049][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.244302][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.312821][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.375819][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.443330][ T5310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.508978][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.553953][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.569265][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.587155][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.596350][ T5429] netlink: 52 bytes leftover after parsing attributes in process `syz.4.422'. [ 206.606256][ T3627] usb 2-1: USB disconnect, device number 9 [ 206.614647][ T4990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.647347][ T3597] libceph: connect (1)[c::]:6789 error -101 [ 206.653824][ T3597] libceph: mon0 (1)[c::]:6789 connect error [ 206.664148][ T3829] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 206.702856][ T5426] ceph: No mds server is up or the cluster is laggy [ 207.203848][ T3716] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.519176][ T3553] EXT4-fs (loop2): unmounting filesystem. [ 207.571299][ T3716] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.606114][ T4990] usb 5-1: config 0 descriptor?? [ 207.629801][ T4990] usb 5-1: can't set config #0, error -71 [ 208.608715][ T4990] usb 5-1: USB disconnect, device number 10 [ 208.881103][ T3716] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.024131][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.037893][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.152717][ T3716] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.213701][ T5452] netlink: 196 bytes leftover after parsing attributes in process `syz.1.431'. [ 209.238382][ T5310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.380964][ T5451] IPVS: Scheduler module ip_vs_sip not found [ 209.428922][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.456720][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.619662][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.643280][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.689081][ T5310] device veth0_vlan entered promiscuous mode [ 209.761655][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.772449][ T3549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.783106][ T3549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.792033][ T3549] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.801678][ T3549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.809963][ T3549] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.817274][ T3549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.882620][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.930914][ T5310] device veth1_vlan entered promiscuous mode [ 210.027717][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.036187][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.169232][ T5310] device veth0_macvtap entered promiscuous mode [ 210.221233][ T5463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.434'. [ 210.251558][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.275086][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.448624][ T5310] device veth1_macvtap entered promiscuous mode [ 210.476353][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.486467][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.546782][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.579264][ T5217] bio_check_eod: 2464 callbacks suppressed [ 210.579284][ T5217] syz.3.356: attempt to access beyond end of device [ 210.579284][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.594822][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.632929][ T3640] usb 3-1: USB disconnect, device number 18 [ 210.642861][ T5217] syz.3.356: attempt to access beyond end of device [ 210.642861][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.659223][ T5217] syz.3.356: attempt to access beyond end of device [ 210.659223][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.673921][ T5217] syz.3.356: attempt to access beyond end of device [ 210.673921][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.690317][ T5217] syz.3.356: attempt to access beyond end of device [ 210.690317][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.705260][ T5217] syz.3.356: attempt to access beyond end of device [ 210.705260][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.721608][ T5217] syz.3.356: attempt to access beyond end of device [ 210.721608][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.736244][ T5217] syz.3.356: attempt to access beyond end of device [ 210.736244][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.752631][ T5217] syz.3.356: attempt to access beyond end of device [ 210.752631][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.767231][ T5217] syz.3.356: attempt to access beyond end of device [ 210.767231][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.767578][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.903864][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.946699][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.997553][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.037587][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.089004][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.137684][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.177563][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.219421][ T5310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.250032][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.282941][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.434507][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.487560][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.537672][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.569595][ T41] libceph: connect (1)[c::]:6789 error -22 [ 211.575602][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 211.606243][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.661026][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.691358][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.720169][ T5479] ceph: No mds server is up or the cluster is laggy [ 211.755783][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.798845][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.838088][ T5467] loop4: detected capacity change from 0 to 32768 [ 211.854541][ T5310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.869738][ T41] libceph: connect (1)[c::]:6789 error -22 [ 211.897693][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 211.907900][ T3564] Bluetooth: hci4: command tx timeout [ 211.948897][ T5310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.023453][ T5310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.147937][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.167138][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.220395][ T5310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.277649][ T5310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.327291][ T5310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.359737][ T5489] mmap: syz.2.437 (5489): VmData 37474304 exceed data ulimit 40800. Update limits or use boot option ignore_rlimit_data. [ 212.377506][ T5310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.604467][ T5467] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.686351][ T5467] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 212.777679][ T5467] BTRFS info (device loop4): using free space tree [ 213.026962][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.088404][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.174763][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.273368][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.331298][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.388756][ T5458] chnl_net:caif_netlink_parms(): no params data found [ 213.649365][ T5505] IPVS: Scheduler module ip_vs_sip not found [ 213.681772][ T5467] BTRFS error (device loop4): open_ctree failed [ 213.889051][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.987750][ T3564] Bluetooth: hci4: command tx timeout [ 214.449667][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.456840][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.524523][ T5458] device bridge_slave_0 entered promiscuous mode [ 215.057670][ T5524] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 215.309668][ T5524] usb 5-1: Using ep0 maxpacket: 16 [ 215.427892][ T5524] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 215.451338][ T5524] usb 5-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 215.477542][ T5524] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.590044][ T5217] bio_check_eod: 2698 callbacks suppressed [ 215.590067][ T5217] syz.3.356: attempt to access beyond end of device [ 215.590067][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.614189][ T5545] netlink: 52 bytes leftover after parsing attributes in process `syz.1.444'. [ 215.642808][ T5217] syz.3.356: attempt to access beyond end of device [ 215.642808][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.654879][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.659197][ T5217] syz.3.356: attempt to access beyond end of device [ 215.659197][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.664189][ T5524] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.678366][ T5217] syz.3.356: attempt to access beyond end of device [ 215.678366][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.697177][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.702946][ T5217] syz.3.356: attempt to access beyond end of device [ 215.702946][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.715859][ T5524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.722216][ T5217] syz.3.356: attempt to access beyond end of device [ 215.722216][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.746493][ T5217] syz.3.356: attempt to access beyond end of device [ 215.746493][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.751701][ T5458] device bridge_slave_1 entered promiscuous mode [ 215.761262][ T5217] syz.3.356: attempt to access beyond end of device [ 215.761262][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.780628][ T5524] usb 5-1: Product: çœåž´ìœ è˜½ç¬ê¾žé—¨î·†ä³°ç¼£ï±¨ì“Žì³¼êšâš—í‹”å¿ä¤é‡±åšŠè“⮊㭋ç†åžì¾è»¡êºŸâ¯¾ê‚®ì¿±ã¦ï¥›å²Žä§ï°³ëŸ³î®æ…®ê»–꣱踎뽚㽴炧â»ç¯€æ¬›å“é«Šï·ã²¥èž‡ç­˜æ“±ã¾¾ãŠ„⇋âŠì„䨽⾕á„磄⣣⹯Ք䖧涑晆ç’༽悾ᱺ뀗ာ惆ꄃ䄮ᥜæ—忇ཎ̓䑼à§ä¼’閶緊ἶ쮼㶖ç¾ážµï¶‚䨡붻ᣊçŒîŸ´ãŒ¾Ò¨ê¾‘ᢚ炩ê­è› ï…±è¬Š [ 215.783116][ T5217] syz.3.356: attempt to access beyond end of device [ 215.783116][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.828907][ T5217] syz.3.356: attempt to access beyond end of device [ 215.828907][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.916883][ T5524] usb 5-1: Manufacturer: à „ [ 215.937227][ T5524] usb 5-1: SerialNumber: 傧塵μ驨âŽèƒ½ê¾é–›àª©ç•šä¸«â£²ëœ«î¬³âœ–⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡé¸èŸ¨á«¶æ¨ä‹œä©äˆƒíŠšæ‘Žï†£è»§ï˜³â‚…êšî³ŸæŠ¸ç±“ᥬӗé‰á‚ꫮ훖弦瀫츇ꂄ [ 216.067829][ T3564] Bluetooth: hci4: command tx timeout [ 216.171251][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.355959][ T5562] loop4: detected capacity change from 0 to 512 [ 216.454631][ T5562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 216.480664][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.500346][ T5562] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038 (0x7fffffff) [ 216.965398][ T5572] loop1: detected capacity change from 0 to 512 [ 217.164686][ T5458] team0: Port device team_slave_0 added [ 217.627711][ T3640] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 217.677840][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 217.832266][ T5458] team0: Port device team_slave_1 added [ 217.901508][ T3716] device hsr_slave_0 left promiscuous mode [ 217.958046][ T3716] device hsr_slave_1 left promiscuous mode [ 218.008207][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.060929][ T3716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.156409][ T3564] Bluetooth: hci4: command tx timeout [ 218.162117][ T5524] usb 5-1: 0:2 : does not exist [ 218.172642][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.230047][ T5524] usb 5-1: USB disconnect, device number 11 [ 218.254031][ T3716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.380576][ T3716] device macvlan1 left promiscuous mode [ 218.386438][ T3716] bridge0: port 3(macvlan1) entered disabled state [ 218.398567][ T3878] EXT4-fs (loop4): unmounting filesystem. [ 218.478946][ T3716] device bridge_slave_1 left promiscuous mode [ 218.527946][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.550713][ T3674] udevd[3674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.568700][ T3716] device bridge_slave_0 left promiscuous mode [ 218.576210][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.860759][ T3716] device veth1_macvtap left promiscuous mode [ 218.866843][ T3716] device veth0_macvtap left promiscuous mode [ 218.947739][ T3716] device veth1_vlan left promiscuous mode [ 218.953688][ T3716] device veth0_vlan left promiscuous mode [ 219.993331][ T3716] team0 (unregistering): Port device geneve0 removed [ 220.328403][ T5587] loop2: detected capacity change from 0 to 32768 [ 220.367891][ T5587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.451 (5587) [ 220.598471][ T5217] bio_check_eod: 2690 callbacks suppressed [ 220.598496][ T5217] syz.3.356: attempt to access beyond end of device [ 220.598496][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.622977][ T5587] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.643807][ T5587] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 220.649930][ T5217] syz.3.356: attempt to access beyond end of device [ 220.649930][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 220.668764][ T5217] syz.3.356: attempt to access beyond end of device [ 220.668764][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.685266][ T5217] syz.3.356: attempt to access beyond end of device [ 220.685266][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 220.701556][ T5217] syz.3.356: attempt to access beyond end of device [ 220.701556][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.716672][ T5217] syz.3.356: attempt to access beyond end of device [ 220.716672][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 220.733046][ T5217] syz.3.356: attempt to access beyond end of device [ 220.733046][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.736403][ T5587] BTRFS info (device loop2): using free space tree [ 220.748158][ T5217] syz.3.356: attempt to access beyond end of device [ 220.748158][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 220.769938][ T5217] syz.3.356: attempt to access beyond end of device [ 220.769938][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.784655][ T5217] syz.3.356: attempt to access beyond end of device [ 220.784655][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 221.121144][ T5587] BTRFS info (device loop2): enabling ssd optimizations [ 221.347784][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 221.347804][ T26] audit: type=1804 audit(1720347740.740:51): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.451" name="/newroot/95/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 221.597275][ T9] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 221.747252][ T3553] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.808063][ T5529] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 222.187806][ T5529] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.217685][ T5529] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.247376][ T5529] usb 2-1: config 1 has no interface number 0 [ 222.287578][ T5529] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.327774][ T5529] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 222.374740][ T5529] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.613980][ T5529] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.624586][ T5529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.624694][ T3716] team0 (unregistering): Port device team_slave_1 removed [ 222.642504][ T5529] usb 2-1: Product: syz [ 222.646703][ T5529] usb 2-1: Manufacturer: syz [ 222.655648][ T5529] usb 2-1: SerialNumber: syz [ 222.847616][ T3597] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 222.883474][ T3716] team0 (unregistering): Port device team_slave_0 removed [ 223.080160][ T3716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.097556][ T3597] usb 4-1: Using ep0 maxpacket: 16 [ 223.184915][ T3716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.225914][ T3597] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 223.234972][ T3597] usb 4-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 223.254020][ T3597] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.407597][ T5529] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 223.413659][ T5529] cdc_ncm 2-1:1.1: bind() failure [ 223.419609][ T3597] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.436080][ T3597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.474259][ T3597] usb 4-1: Product: çœåž´ìœ è˜½ç¬ê¾žé—¨î·†ä³°ç¼£ï±¨ì“Žì³¼êšâš—í‹”å¿ä¤é‡±åšŠè“⮊㭋ç†åžì¾è»¡êºŸâ¯¾ê‚®ì¿±ã¦ï¥›å²Žä§ï°³ëŸ³î®æ…®ê»–꣱踎뽚㽴炧â»ç¯€æ¬›å“é«Šï·ã²¥èž‡ç­˜æ“±ã¾¾ãŠ„⇋âŠì„䨽⾕á„磄⣣⹯Ք䖧涑晆ç’༽悾ᱺ뀗ာ惆ꄃ䄮ᥜæ—忇ཎ̓䑼à§ä¼’閶緊ἶ쮼㶖ç¾ážµï¶‚䨡붻ᣊçŒîŸ´ãŒ¾Ò¨ê¾‘ᢚ炩ê­è› ï…±è¬Š [ 223.524550][ T3597] usb 4-1: Manufacturer: à „ [ 223.530932][ T3597] usb 4-1: SerialNumber: 傧塵μ驨âŽèƒ½ê¾é–›àª©ç•šä¸«â£²ëœ«î¬³âœ–⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡé¸èŸ¨á«¶æ¨ä‹œä©äˆƒíŠšæ‘Žï†£è»§ï˜³â‚…êšî³ŸæŠ¸ç±“ᥬӗé‰á‚ꫮ훖弦瀫츇ꂄ [ 225.085202][ T3640] usb 3-1: device descriptor read/64, error -32 [ 225.133553][ T3627] usb 2-1: USB disconnect, device number 10 [ 225.381917][ T3640] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 225.487311][ T3716] bond0 (unregistering): Released all slaves [ 225.608209][ T5217] bio_check_eod: 2371 callbacks suppressed [ 225.608232][ T5217] syz.3.356: attempt to access beyond end of device [ 225.608232][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.644912][ T5217] syz.3.356: attempt to access beyond end of device [ 225.644912][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.660705][ T5217] syz.3.356: attempt to access beyond end of device [ 225.660705][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.677847][ T3640] usb 3-1: Using ep0 maxpacket: 16 [ 225.679395][ T5217] syz.3.356: attempt to access beyond end of device [ 225.679395][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.697741][ T5217] syz.3.356: attempt to access beyond end of device [ 225.697741][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.713959][ T5217] syz.3.356: attempt to access beyond end of device [ 225.713959][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.728604][ T5217] syz.3.356: attempt to access beyond end of device [ 225.728604][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.744856][ T5217] syz.3.356: attempt to access beyond end of device [ 225.744856][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.759435][ T5217] syz.3.356: attempt to access beyond end of device [ 225.759435][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.775896][ T5217] syz.3.356: attempt to access beyond end of device [ 225.775896][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.816171][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.830882][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.858237][ T3640] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.876562][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.904664][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.917915][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.951600][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.034157][ T5458] device hsr_slave_0 entered promiscuous mode [ 226.041919][ T3640] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.060889][ T3640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.105414][ T3640] usb 3-1: Product: çœåž´ìœ è˜½ç¬ê¾žé—¨î·†ä³°ç¼£ï±¨ì“Žì³¼êšâš—í‹”å¿ä¤é‡±åšŠè“⮊㭋ç†åžì¾è»¡êºŸâ¯¾ê‚®ì¿±ã¦ï¥›å²Žä§ï°³ëŸ³î®æ…®ê»–꣱踎뽚㽴炧â»ç¯€æ¬›å“é«Šï·ã²¥èž‡ç­˜æ“±ã¾¾ãŠ„⇋âŠì„䨽⾕á„磄⣣⹯Ք䖧涑晆ç’༽悾ᱺ뀗ာ惆ꄃ䄮ᥜæ—忇ཎ̓䑼à§ä¼’閶緊ἶ쮼㶖ç¾ážµï¶‚䨡붻ᣊçŒîŸ´ãŒ¾Ò¨ê¾‘ᢚ炩ê­è› ï…±è¬Š [ 226.212107][ T5646] loop2: detected capacity change from 0 to 512 [ 226.227061][ T3640] usb 3-1: Manufacturer: à „ [ 226.247322][ T3640] usb 3-1: SerialNumber: 傧塵μ驨âŽèƒ½ê¾é–›àª©ç•šä¸«â£²ëœ«î¬³âœ–⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡé¸èŸ¨á«¶æ¨ä‹œä©äˆƒíŠšæ‘Žï†£è»§ï˜³â‚…êšî³ŸæŠ¸ç±“ᥬӗé‰á‚ꫮ훖弦瀫츇ꂄ [ 226.923757][ T5458] device hsr_slave_1 entered promiscuous mode [ 226.933528][ T5458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.958882][ T5458] Cannot create hsr debugfs directory [ 226.996457][ T5620] netlink: 52 bytes leftover after parsing attributes in process `syz.4.456'. [ 227.309664][ T5652] netlink: 196 bytes leftover after parsing attributes in process `syz.4.466'. [ 227.607707][ T3640] usb 3-1: can't set config #1, error -71 [ 227.615032][ T3640] usb 3-1: USB disconnect, device number 20 [ 228.097883][ T3597] usb 4-1: 0:2 : does not exist [ 228.193330][ T3597] usb 4-1: USB disconnect, device number 12 [ 229.487574][ T5523] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.838142][ T5676] netlink: 52 bytes leftover after parsing attributes in process `syz.2.475'. [ 229.857792][ T5523] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.907639][ T5523] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.977584][ T5523] usb 2-1: config 1 has no interface number 0 [ 230.018384][ T5523] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.086497][ T5523] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 230.147584][ T5523] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.377944][ T5523] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.387118][ T5523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.472361][ T5523] usb 2-1: Product: syz [ 230.476577][ T5523] usb 2-1: Manufacturer: syz [ 230.514284][ T5523] usb 2-1: SerialNumber: syz [ 230.644335][ T5217] bio_check_eod: 2425 callbacks suppressed [ 230.644354][ T5217] syz.3.356: attempt to access beyond end of device [ 230.644354][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.664955][ T5217] syz.3.356: attempt to access beyond end of device [ 230.664955][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 230.681452][ T5217] syz.3.356: attempt to access beyond end of device [ 230.681452][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.696103][ T5217] syz.3.356: attempt to access beyond end of device [ 230.696103][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 230.712736][ T5217] syz.3.356: attempt to access beyond end of device [ 230.712736][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.727359][ T5217] syz.3.356: attempt to access beyond end of device [ 230.727359][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 230.743759][ T5217] syz.3.356: attempt to access beyond end of device [ 230.743759][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.758670][ T5217] syz.3.356: attempt to access beyond end of device [ 230.758670][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 230.775189][ T5217] syz.3.356: attempt to access beyond end of device [ 230.775189][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.789950][ T5217] syz.3.356: attempt to access beyond end of device [ 230.789950][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 231.468981][ T5523] cdc_ncm 2-1:1.1: bind() failure [ 231.671040][ T5526] usb 2-1: USB disconnect, device number 11 [ 232.109730][ T5458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.300304][ T5458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.319071][ T5523] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.464028][ T5458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.518993][ T5458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.407586][ T5523] usb 5-1: Using ep0 maxpacket: 16 [ 233.527723][ T5523] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 233.572170][ T5523] usb 5-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config [ 233.674007][ T5523] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.928225][ T5523] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.982373][ T5726] netlink: 52 bytes leftover after parsing attributes in process `syz.1.487'. [ 233.992280][ T5523] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.082848][ T5523] usb 5-1: Product: çœåž´ìœ è˜½ç¬ê¾žé—¨î·†ä³°ç¼£ï±¨ì“Žì³¼êšâš—í‹”å¿ä¤é‡±åšŠè“⮊㭋ç†åžì¾è»¡êºŸâ¯¾ê‚®ì¿±ã¦ï¥›å²Žä§ï°³ëŸ³î®æ…®ê»–꣱踎뽚㽴炧â»ç¯€æ¬›å“é«Šï·ã²¥èž‡ç­˜æ“±ã¾¾ãŠ„⇋âŠì„䨽⾕á„磄⣣⹯Ք䖧涑晆ç’༽悾ᱺ뀗ာ惆ꄃ䄮ᥜæ—忇ཎ̓䑼à§ä¼’閶緊ἶ쮼㶖ç¾ážµï¶‚䨡붻ᣊçŒîŸ´ãŒ¾Ò¨ê¾‘ᢚ炩ê­è› ï…±è¬Š [ 234.171089][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.266219][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.350434][ T5523] usb 5-1: Manufacturer: à „ [ 234.427549][ T5523] usb 5-1: SerialNumber: 傧塵μ驨âŽèƒ½ê¾é–›àª©ç•šä¸«â£²ëœ«î¬³âœ–⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡé¸èŸ¨á«¶æ¨ä‹œä©äˆƒíŠšæ‘Žï†£è»§ï˜³â‚…êšî³ŸæŠ¸ç±“ᥬӗé‰á‚ꫮ훖弦瀫츇ꂄ [ 234.590161][ T5458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.069653][ T5458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.117934][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.234562][ T5739] loop4: detected capacity change from 0 to 512 [ 235.502308][ T5739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.558593][ T5739] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038 (0x7fffffff) [ 235.647684][ T5217] bio_check_eod: 2377 callbacks suppressed [ 235.647715][ T5217] syz.3.356: attempt to access beyond end of device [ 235.647715][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 235.670072][ T5217] syz.3.356: attempt to access beyond end of device [ 235.670072][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.684748][ T5217] syz.3.356: attempt to access beyond end of device [ 235.684748][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 235.702141][ T5217] syz.3.356: attempt to access beyond end of device [ 235.702141][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.716952][ T5217] syz.3.356: attempt to access beyond end of device [ 235.716952][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 235.733425][ T5217] syz.3.356: attempt to access beyond end of device [ 235.733425][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.749344][ T5217] syz.3.356: attempt to access beyond end of device [ 235.749344][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 235.765613][ T5217] syz.3.356: attempt to access beyond end of device [ 235.765613][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.780295][ T5217] syz.3.356: attempt to access beyond end of device [ 235.780295][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 235.797813][ T5217] syz.3.356: attempt to access beyond end of device [ 235.797813][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 236.631184][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.920193][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.992327][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.070493][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.077805][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.181003][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.258417][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.358228][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.365469][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.418016][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.475486][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.535444][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.596533][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.624660][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.633230][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.601247][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.610745][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.619542][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.628819][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.988493][ T4990] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 240.277719][ T4990] usb 3-1: Using ep0 maxpacket: 16 [ 240.447668][ T4990] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 240.455293][ T4990] usb 3-1: can't read configurations, error -71 [ 240.560528][ T5783] netlink: 52 bytes leftover after parsing attributes in process `syz.1.500'. [ 240.619596][ T5783] netlink: 72 bytes leftover after parsing attributes in process `syz.1.500'. [ 240.639854][ T3878] EXT4-fs (loop4): unmounting filesystem. [ 240.659821][ T5217] bio_check_eod: 1967 callbacks suppressed [ 240.659838][ T5217] syz.3.356: attempt to access beyond end of device [ 240.659838][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.680321][ T5217] syz.3.356: attempt to access beyond end of device [ 240.680321][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 240.696647][ T5217] syz.3.356: attempt to access beyond end of device [ 240.696647][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.712574][ T5217] syz.3.356: attempt to access beyond end of device [ 240.712574][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 240.729163][ T5217] syz.3.356: attempt to access beyond end of device [ 240.729163][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.743791][ T5217] syz.3.356: attempt to access beyond end of device [ 240.743791][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 240.760016][ T5217] syz.3.356: attempt to access beyond end of device [ 240.760016][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.774623][ T5217] syz.3.356: attempt to access beyond end of device [ 240.774623][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 240.790800][ T5217] syz.3.356: attempt to access beyond end of device [ 240.790800][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.805420][ T5217] syz.3.356: attempt to access beyond end of device [ 240.805420][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.608924][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.617112][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.143537][ T5523] usb 5-1: 0:2 : does not exist [ 243.159400][ T5523] usb 5-1: USB disconnect, device number 12 [ 243.168634][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.631080][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.782338][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.108381][ T3549] Bluetooth: hci6: sending frame failed (-49) [ 245.116327][ T3564] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 245.699206][ T5217] bio_check_eod: 2420 callbacks suppressed [ 245.699255][ T5217] syz.3.356: attempt to access beyond end of device [ 245.699255][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.723063][ T5217] syz.3.356: attempt to access beyond end of device [ 245.723063][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 245.747535][ T5217] syz.3.356: attempt to access beyond end of device [ 245.747535][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.764696][ T5217] syz.3.356: attempt to access beyond end of device [ 245.764696][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 245.789833][ T5217] syz.3.356: attempt to access beyond end of device [ 245.789833][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.806871][ T5217] syz.3.356: attempt to access beyond end of device [ 245.806871][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 245.831339][ T5217] syz.3.356: attempt to access beyond end of device [ 245.831339][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.848126][ T5217] syz.3.356: attempt to access beyond end of device [ 245.848126][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 245.873078][ T5217] syz.3.356: attempt to access beyond end of device [ 245.873078][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.889929][ T5217] syz.3.356: attempt to access beyond end of device [ 245.889929][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 246.424443][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.815611][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.833682][ T5526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.293411][ T5523] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 248.507783][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.516331][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.580706][ T5458] device veth0_vlan entered promiscuous mode [ 248.627265][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.655585][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.705175][ T5458] device veth1_vlan entered promiscuous mode [ 248.764497][ T5844] netlink: 52 bytes leftover after parsing attributes in process `syz.2.514'. [ 248.807002][ T5844] netlink: 72 bytes leftover after parsing attributes in process `syz.2.514'. [ 248.983224][ T5458] device veth0_macvtap entered promiscuous mode [ 249.092514][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.109952][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.151270][ T5853] netlink: 'syz.4.519': attribute type 10 has an invalid length. [ 249.200913][ T5853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.519'. [ 249.308959][ T5853] team0: Port device geneve0 added [ 249.339440][ T5458] device veth1_macvtap entered promiscuous mode [ 249.373694][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.395890][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.421232][ T3674] udevd[3674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.519919][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.601335][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.611564][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.622088][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.632513][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.715540][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.952588][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.184953][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.194957][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.216125][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.716878][ T5217] bio_check_eod: 2265 callbacks suppressed [ 250.716961][ T5217] syz.3.356: attempt to access beyond end of device [ 250.716961][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.776907][ T5217] syz.3.356: attempt to access beyond end of device [ 250.776907][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 250.801740][ T5217] syz.3.356: attempt to access beyond end of device [ 250.801740][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.852270][ T5217] syz.3.356: attempt to access beyond end of device [ 250.852270][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 250.877079][ T5217] syz.3.356: attempt to access beyond end of device [ 250.877079][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.918373][ T5217] syz.3.356: attempt to access beyond end of device [ 250.918373][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 250.942821][ T5217] syz.3.356: attempt to access beyond end of device [ 250.942821][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.998408][ T5217] syz.3.356: attempt to access beyond end of device [ 250.998408][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 251.017883][ T5217] syz.3.356: attempt to access beyond end of device [ 251.017883][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 251.072748][ T5217] syz.3.356: attempt to access beyond end of device [ 251.072748][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 251.506874][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.571553][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.621093][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.688708][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.750741][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.782418][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.823189][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.863117][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.905202][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.936613][ T5458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.974422][ T5458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.006527][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.036222][ T5458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.057307][ T5458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.084480][ T5458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.113079][ T5458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.607583][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.618328][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.627240][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.640465][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.614740][ T5875] netlink: 196 bytes leftover after parsing attributes in process `syz.1.524'. [ 253.735187][ T5887] loop4: detected capacity change from 0 to 512 [ 253.896948][ T3675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.930317][ T3675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.951769][ T5887] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.529: casefold flag without casefold feature [ 254.039110][ T5887] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.529: missing EA_INODE flag [ 254.129574][ T3675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.179877][ T3675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.217620][ T5887] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.529: error while reading EA inode 2 err=-117 [ 254.322721][ T5894] overlayfs: failed to resolve './file0': -2 [ 254.368019][ T5887] EXT4-fs (loop4): 1 orphan inode deleted [ 254.376970][ T5887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 254.610231][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.618928][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 255.717775][ T5217] bio_check_eod: 2392 callbacks suppressed [ 255.717797][ T5217] syz.3.356: attempt to access beyond end of device [ 255.717797][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.740077][ T5217] syz.3.356: attempt to access beyond end of device [ 255.740077][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.754684][ T5217] syz.3.356: attempt to access beyond end of device [ 255.754684][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.770987][ T5217] syz.3.356: attempt to access beyond end of device [ 255.770987][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.785648][ T5217] syz.3.356: attempt to access beyond end of device [ 255.785648][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.801851][ T5217] syz.3.356: attempt to access beyond end of device [ 255.801851][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.816444][ T5217] syz.3.356: attempt to access beyond end of device [ 255.816444][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.832622][ T5217] syz.3.356: attempt to access beyond end of device [ 255.832622][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.847226][ T5217] syz.3.356: attempt to access beyond end of device [ 255.847226][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.863333][ T5217] syz.3.356: attempt to access beyond end of device [ 255.863333][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 256.145060][ T5887] overlayfs: failed to resolve './file0': -2 [ 256.598005][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.604334][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.258256][ T5921] netlink: 'syz.3.535': attribute type 10 has an invalid length. [ 257.282158][ T5921] netlink: 40 bytes leftover after parsing attributes in process `syz.3.535'. [ 257.757019][ T5921] team0: Port device geneve0 added [ 257.880583][ T3878] EXT4-fs (loop4): unmounting filesystem. [ 257.919626][ T5942] netlink: 52 bytes leftover after parsing attributes in process `syz.1.539'. [ 258.038484][ T5942] netlink: 72 bytes leftover after parsing attributes in process `syz.1.539'. [ 258.117656][ T5523] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 258.377570][ T5523] usb 1-1: Using ep0 maxpacket: 16 [ 258.497760][ T5523] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 258.539340][ T5523] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.737870][ T5523] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.780601][ T5523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.866925][ T5523] usb 1-1: Product: çœåž´ìœ è˜½ç¬ê¾žé—¨î·†ä³°ç¼£ï±¨ì“Žì³¼êšâš—í‹”å¿ä¤é‡±åšŠè“⮊㭋ç†åžì¾è»¡êºŸâ¯¾ê‚®ì¿±ã¦ï¥›å²Žä§ï°³ëŸ³î®æ…®ê»–꣱踎뽚㽴炧â»ç¯€æ¬›å“é«Šï·ã²¥èž‡ç­˜æ“±ã¾¾ãŠ„⇋âŠì„䨽⾕á„磄⣣⹯Ք䖧涑晆ç’༽悾ᱺ뀗ာ惆ꄃ䄮ᥜæ—忇ཎ̓䑼à§ä¼’閶緊ἶ쮼㶖ç¾ážµï¶‚䨡붻ᣊçŒîŸ´ãŒ¾Ò¨ê¾‘ᢚ炩ê­è› ï…±è¬Š [ 259.928559][ T5523] usb 1-1: Manufacturer: à „ [ 259.933212][ T5523] usb 1-1: SerialNumber: 傧塵μ驨âŽèƒ½ê¾é–›àª©ç•šä¸«â£²ëœ«î¬³âœ–⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡé¸èŸ¨á«¶æ¨ä‹œä©äˆƒíŠšæ‘Žï†£è»§ï˜³â‚…êšî³ŸæŠ¸ç±“ᥬӗé‰á‚ꫮ훖弦瀫츇ꂄ [ 260.601318][ T5971] loop0: detected capacity change from 0 to 512 [ 260.622397][ T5968] loop2: detected capacity change from 0 to 512 [ 260.729590][ T5217] bio_check_eod: 2217 callbacks suppressed [ 260.729611][ T5217] syz.3.356: attempt to access beyond end of device [ 260.729611][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.750119][ T5217] syz.3.356: attempt to access beyond end of device [ 260.750119][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.766355][ T5217] syz.3.356: attempt to access beyond end of device [ 260.766355][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.781328][ T5217] syz.3.356: attempt to access beyond end of device [ 260.781328][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.797582][ T5217] syz.3.356: attempt to access beyond end of device [ 260.797582][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.812202][ T5217] syz.3.356: attempt to access beyond end of device [ 260.812202][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.828424][ T5217] syz.3.356: attempt to access beyond end of device [ 260.828424][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.843055][ T5217] syz.3.356: attempt to access beyond end of device [ 260.843055][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.862037][ T5217] syz.3.356: attempt to access beyond end of device [ 260.862037][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.877495][ T5217] syz.3.356: attempt to access beyond end of device [ 260.877495][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.952577][ T5968] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.546: casefold flag without casefold feature [ 260.969204][ T5971] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 261.019066][ T5971] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 261.056686][ T5968] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.546: missing EA_INODE flag [ 261.227302][ T5968] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.546: error while reading EA inode 2 err=-117 [ 262.724283][ T5968] EXT4-fs (loop2): 1 orphan inode deleted [ 262.748133][ T5968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 264.757776][ T5523] usb 1-1: 0:2 : does not exist [ 264.800534][ T5523] usb 1-1: USB disconnect, device number 13 [ 265.099655][ T3674] udevd[3674]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.134773][ T6006] netlink: 52 bytes leftover after parsing attributes in process `syz.3.553'. [ 265.227586][ T6006] netlink: 36 bytes leftover after parsing attributes in process `syz.3.553'. [ 265.639643][ T3553] EXT4-fs (loop2): unmounting filesystem. [ 265.738135][ T5217] bio_check_eod: 1835 callbacks suppressed [ 265.738158][ T5217] syz.3.356: attempt to access beyond end of device [ 265.738158][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.760430][ T5217] syz.3.356: attempt to access beyond end of device [ 265.760430][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.775201][ T5217] syz.3.356: attempt to access beyond end of device [ 265.775201][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.792985][ T5217] syz.3.356: attempt to access beyond end of device [ 265.792985][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.807645][ T5217] syz.3.356: attempt to access beyond end of device [ 265.807645][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.824018][ T5217] syz.3.356: attempt to access beyond end of device [ 265.824018][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.838746][ T5217] syz.3.356: attempt to access beyond end of device [ 265.838746][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.854942][ T5217] syz.3.356: attempt to access beyond end of device [ 265.854942][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.869590][ T5217] syz.3.356: attempt to access beyond end of device [ 265.869590][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.885888][ T5217] syz.3.356: attempt to access beyond end of device [ 265.885888][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.999976][ T5458] EXT4-fs (loop0): unmounting filesystem. [ 268.502822][ T3549] Bluetooth: hci6: sending frame failed (-49) [ 268.510530][ T3561] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 269.036523][ T6036] loop1: detected capacity change from 0 to 64 [ 269.717579][ T5526] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 269.778463][ T3549] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.791812][ T3564] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.800080][ T3564] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.809164][ T3564] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.816781][ T3549] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 269.824465][ T3564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.078610][ T5526] usb 1-1: config 0 interface 0 has no altsetting 0 [ 270.085275][ T5526] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 270.177578][ T5526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.262558][ T5526] usb 1-1: config 0 descriptor?? [ 270.753894][ T5217] bio_check_eod: 2289 callbacks suppressed [ 270.753940][ T5217] syz.3.356: attempt to access beyond end of device [ 270.753940][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.777249][ T5217] syz.3.356: attempt to access beyond end of device [ 270.777249][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.803044][ T5217] syz.3.356: attempt to access beyond end of device [ 270.803044][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.820720][ T5217] syz.3.356: attempt to access beyond end of device [ 270.820720][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.846337][ T5217] syz.3.356: attempt to access beyond end of device [ 270.846337][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.863366][ T5217] syz.3.356: attempt to access beyond end of device [ 270.863366][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.888994][ T5217] syz.3.356: attempt to access beyond end of device [ 270.888994][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.906192][ T5217] syz.3.356: attempt to access beyond end of device [ 270.906192][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.931743][ T5217] syz.3.356: attempt to access beyond end of device [ 270.931743][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.947751][ T5217] syz.3.356: attempt to access beyond end of device [ 270.947751][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 271.907632][ T3549] Bluetooth: hci6: command tx timeout [ 272.163429][ T6065] overlayfs: './file1' not a directory [ 272.543537][ T6061] loop2: detected capacity change from 0 to 512 [ 272.614352][ T6061] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.563: casefold flag without casefold feature [ 272.628026][ T5526] video4linux radio32: keene_cmd_main failed (-110) [ 272.635183][ T5526] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 272.815602][ T6061] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.563: missing EA_INODE flag [ 272.877717][ T5524] usb 1-1: USB disconnect, device number 14 [ 272.907845][ T6061] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.563: error while reading EA inode 2 err=-117 [ 273.025422][ T6061] EXT4-fs (loop2): 1 orphan inode deleted [ 273.057151][ T6061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 273.509979][ T3549] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 273.518672][ T3549] Bluetooth: hci4: Injecting HCI hardware error event [ 273.527579][ T3561] Bluetooth: hci4: hardware error 0x00 [ 273.757317][ T3716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.816579][ T3553] EXT4-fs (loop2): unmounting filesystem. [ 273.987933][ T3549] Bluetooth: hci6: command tx timeout [ 274.567586][ T5523] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 274.817500][ T5523] usb 3-1: Using ep0 maxpacket: 16 [ 274.937739][ T5523] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 274.958422][ T5523] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.137807][ T5523] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.173995][ T5523] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.204485][ T5523] usb 3-1: Product: çœåž´ìœ è˜½ç¬ê¾žé—¨î·†ä³°ç¼£ï±¨ì“Žì³¼êšâš—í‹”å¿ä¤é‡±åšŠè“⮊㭋ç†åžì¾è»¡êºŸâ¯¾ê‚®ì¿±ã¦ï¥›å²Žä§ï°³ëŸ³î®æ…®ê»–꣱踎뽚㽴炧â»ç¯€æ¬›å“é«Šï·ã²¥èž‡ç­˜æ“±ã¾¾ãŠ„⇋âŠì„䨽⾕á„磄⣣⹯Ք䖧涑晆ç’༽悾ᱺ뀗ာ惆ꄃ䄮ᥜæ—忇ཎ̓䑼à§ä¼’閶緊ἶ쮼㶖ç¾ážµï¶‚䨡붻ᣊçŒîŸ´ãŒ¾Ò¨ê¾‘ᢚ炩ê­è› ï…±è¬Š [ 275.384107][ T5523] usb 3-1: Manufacturer: à „ [ 275.411126][ T5523] usb 3-1: SerialNumber: 傧塵μ驨âŽèƒ½ê¾é–›àª©ç•šä¸«â£²ëœ«î¬³âœ–⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡé¸èŸ¨á«¶æ¨ä‹œä©äˆƒíŠšæ‘Žï†£è»§ï˜³â‚…êšî³ŸæŠ¸ç±“ᥬӗé‰á‚ꫮ훖弦瀫츇ꂄ [ 275.609855][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 275.667673][ T3561] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 275.759684][ T5217] bio_check_eod: 2478 callbacks suppressed [ 275.759704][ T5217] syz.3.356: attempt to access beyond end of device [ 275.759704][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.780154][ T5217] syz.3.356: attempt to access beyond end of device [ 275.780154][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.796310][ T5217] syz.3.356: attempt to access beyond end of device [ 275.796310][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.810945][ T5217] syz.3.356: attempt to access beyond end of device [ 275.810945][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.827872][ T5217] syz.3.356: attempt to access beyond end of device [ 275.827872][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.842554][ T5217] syz.3.356: attempt to access beyond end of device [ 275.842554][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.858854][ T5217] syz.3.356: attempt to access beyond end of device [ 275.858854][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.859727][ T3716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.873464][ T5217] syz.3.356: attempt to access beyond end of device [ 275.873464][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.899501][ T5217] syz.3.356: attempt to access beyond end of device [ 275.899501][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.906336][ T6085] loop2: detected capacity change from 0 to 512 [ 275.914176][ T5217] syz.3.356: attempt to access beyond end of device [ 275.914176][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 276.055436][ T6085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 276.068653][ T3561] Bluetooth: hci6: command tx timeout [ 276.110164][ T3549] Bluetooth: hci0: sending frame failed (-49) [ 276.118082][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 276.181692][ T6085] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038 (0x7fffffff) [ 276.295723][ T3716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.411816][ T3561] Bluetooth: hci6: command tx timeout [ 280.071100][ T6107] loop1: detected capacity change from 0 to 64 [ 280.675525][ T3716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.767831][ T5217] bio_check_eod: 2050 callbacks suppressed [ 280.767851][ T5217] syz.3.356: attempt to access beyond end of device [ 280.767851][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.788449][ T5217] syz.3.356: attempt to access beyond end of device [ 280.788449][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.804784][ T5217] syz.3.356: attempt to access beyond end of device [ 280.804784][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.825685][ T5217] syz.3.356: attempt to access beyond end of device [ 280.825685][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.842000][ T5217] syz.3.356: attempt to access beyond end of device [ 280.842000][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.857782][ T5217] syz.3.356: attempt to access beyond end of device [ 280.857782][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.874136][ T5217] syz.3.356: attempt to access beyond end of device [ 280.874136][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.894738][ T6114] overlayfs: './file1' not a directory [ 280.902301][ T5217] syz.3.356: attempt to access beyond end of device [ 280.902301][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.918664][ T5217] syz.3.356: attempt to access beyond end of device [ 280.918664][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.933300][ T5217] syz.3.356: attempt to access beyond end of device [ 280.933300][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 281.175689][ T3593] libceph: connect (1)[c::]:6789 error -101 [ 281.207825][ T5523] usb 3-1: 0:2 : does not exist [ 281.324442][ T6111] ceph: No mds server is up or the cluster is laggy [ 281.331321][ T3593] libceph: mon0 (1)[c::]:6789 connect error [ 281.510261][ T5523] usb 3-1: USB disconnect, device number 23 [ 281.711060][ T3553] EXT4-fs (loop2): unmounting filesystem. [ 281.719151][ T3674] udevd[3674]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.637249][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.758203][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.778772][ T6040] device bridge_slave_0 entered promiscuous mode [ 283.894392][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.933615][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.975984][ T6040] device bridge_slave_1 entered promiscuous mode [ 284.127773][ T5529] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 284.373385][ T5529] usb 4-1: Using ep0 maxpacket: 8 [ 284.439030][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.497811][ T5529] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 284.538812][ T5529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.566942][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.611945][ T5529] usb 4-1: config 0 descriptor?? [ 284.678689][ T5529] hso 4-1:0.0: Can't find BULK IN endpoint [ 284.963426][ T5529] usb 4-1: USB disconnect, device number 13 [ 285.139440][ T6040] team0: Port device team_slave_0 added [ 285.495110][ T6040] team0: Port device team_slave_1 added [ 285.781579][ T5217] bio_check_eod: 2596 callbacks suppressed [ 285.781625][ T5217] syz.3.356: attempt to access beyond end of device [ 285.781625][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 285.804902][ T5217] syz.3.356: attempt to access beyond end of device [ 285.804902][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 285.830630][ T5217] syz.3.356: attempt to access beyond end of device [ 285.830630][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 285.847981][ T5217] syz.3.356: attempt to access beyond end of device [ 285.847981][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 285.874025][ T5217] syz.3.356: attempt to access beyond end of device [ 285.874025][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 285.891223][ T5217] syz.3.356: attempt to access beyond end of device [ 285.891223][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 285.915326][ T5217] syz.3.356: attempt to access beyond end of device [ 285.915326][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 285.932687][ T5217] syz.3.356: attempt to access beyond end of device [ 285.932687][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 285.958389][ T5217] syz.3.356: attempt to access beyond end of device [ 285.958389][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 285.975793][ T5217] syz.3.356: attempt to access beyond end of device [ 285.975793][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 286.398433][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.405460][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.612573][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.629754][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.636749][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.666223][ T6162] loop2: detected capacity change from 0 to 512 [ 286.753758][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.916267][ T6167] loop1: detected capacity change from 0 to 64 [ 287.513297][ T6040] device hsr_slave_0 entered promiscuous mode [ 288.418199][ T6040] device hsr_slave_1 entered promiscuous mode [ 288.717996][ T6040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.725602][ T6040] Cannot create hsr debugfs directory [ 290.787710][ T5217] bio_check_eod: 2410 callbacks suppressed [ 290.787734][ T5217] syz.3.356: attempt to access beyond end of device [ 290.787734][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.808277][ T5217] syz.3.356: attempt to access beyond end of device [ 290.808277][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 290.824528][ T5217] syz.3.356: attempt to access beyond end of device [ 290.824528][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.839283][ T5217] syz.3.356: attempt to access beyond end of device [ 290.839283][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 290.855554][ T5217] syz.3.356: attempt to access beyond end of device [ 290.855554][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.870253][ T5217] syz.3.356: attempt to access beyond end of device [ 290.870253][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 290.886552][ T5217] syz.3.356: attempt to access beyond end of device [ 290.886552][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.901189][ T5217] syz.3.356: attempt to access beyond end of device [ 290.901189][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 290.917542][ T5217] syz.3.356: attempt to access beyond end of device [ 290.917542][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.932195][ T5217] syz.3.356: attempt to access beyond end of device [ 290.932195][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 291.257716][ T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 291.507624][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 291.633679][ T14] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 291.701906][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.783117][ T14] usb 1-1: config 0 descriptor?? [ 291.828664][ T14] hso 1-1:0.0: Can't find BULK IN endpoint [ 292.659520][ T5529] usb 1-1: USB disconnect, device number 15 [ 292.753544][ T6196] ceph: No mds server is up or the cluster is laggy [ 292.760961][ T5524] libceph: connect (1)[c::]:6789 error -22 [ 292.773303][ T5524] libceph: mon0 (1)[c::]:6789 connect error [ 295.797975][ T5217] bio_check_eod: 2677 callbacks suppressed [ 295.797997][ T5217] syz.3.356: attempt to access beyond end of device [ 295.797997][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 295.820198][ T5217] syz.3.356: attempt to access beyond end of device [ 295.820198][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 295.834993][ T5217] syz.3.356: attempt to access beyond end of device [ 295.834993][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 295.851272][ T5217] syz.3.356: attempt to access beyond end of device [ 295.851272][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 295.865968][ T5217] syz.3.356: attempt to access beyond end of device [ 295.865968][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 295.882266][ T5217] syz.3.356: attempt to access beyond end of device [ 295.882266][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 295.898035][ T5217] syz.3.356: attempt to access beyond end of device [ 295.898035][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 295.914689][ T5217] syz.3.356: attempt to access beyond end of device [ 295.914689][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 295.929414][ T5217] syz.3.356: attempt to access beyond end of device [ 295.929414][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 295.945872][ T5217] syz.3.356: attempt to access beyond end of device [ 295.945872][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 296.540150][ T6226] loop1: detected capacity change from 0 to 64 [ 297.075007][ T6230] overlayfs: upper fs needs to support d_type. [ 297.093230][ T6230] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 297.100421][ T6230] overlayfs: failed to set xattr on upper [ 297.106159][ T6230] overlayfs: ...falling back to index=off,metacopy=off. [ 297.923675][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 300.807487][ T5217] bio_check_eod: 2519 callbacks suppressed [ 300.807510][ T5217] syz.3.356: attempt to access beyond end of device [ 300.807510][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.828544][ T5217] syz.3.356: attempt to access beyond end of device [ 300.828544][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 300.844844][ T5217] syz.3.356: attempt to access beyond end of device [ 300.844844][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.859497][ T5217] syz.3.356: attempt to access beyond end of device [ 300.859497][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 300.875737][ T5217] syz.3.356: attempt to access beyond end of device [ 300.875737][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.890351][ T5217] syz.3.356: attempt to access beyond end of device [ 300.890351][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 300.906515][ T5217] syz.3.356: attempt to access beyond end of device [ 300.906515][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.909243][ T5524] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 300.921700][ T5217] syz.3.356: attempt to access beyond end of device [ 300.921700][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 300.945082][ T5217] syz.3.356: attempt to access beyond end of device [ 300.945082][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.959875][ T5217] syz.3.356: attempt to access beyond end of device [ 300.959875][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 304.717694][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'. [ 304.750629][ T3827] Bad inode number on dev loop1: 4160749571 is out of range [ 304.808405][ T3827] Bad inode number on dev loop1: 4160749571 is out of range [ 304.870601][ T3716] device hsr_slave_0 left promiscuous mode [ 304.938829][ T3716] device hsr_slave_1 left promiscuous mode [ 304.999639][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.007107][ T3716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.098635][ T3716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.136978][ T3716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.178539][ T3716] device macvlan1 left promiscuous mode [ 305.184413][ T3716] bridge0: port 3(macvlan1) entered disabled state [ 305.308144][ T3716] device bridge_slave_1 left promiscuous mode [ 305.337875][ T3716] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.361266][ T3716] device bridge_slave_0 left promiscuous mode [ 305.402065][ T3716] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.700096][ T6294] loop0: detected capacity change from 0 to 2048 [ 305.818005][ T5217] bio_check_eod: 2440 callbacks suppressed [ 305.818025][ T5217] syz.3.356: attempt to access beyond end of device [ 305.818025][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.838476][ T5217] syz.3.356: attempt to access beyond end of device [ 305.838476][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 305.855059][ T5217] syz.3.356: attempt to access beyond end of device [ 305.855059][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.869608][ T5217] syz.3.356: attempt to access beyond end of device [ 305.869608][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 305.885856][ T5217] syz.3.356: attempt to access beyond end of device [ 305.885856][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.900514][ T5217] syz.3.356: attempt to access beyond end of device [ 305.900514][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 305.916756][ T5217] syz.3.356: attempt to access beyond end of device [ 305.916756][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.931340][ T5217] syz.3.356: attempt to access beyond end of device [ 305.931340][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 305.947902][ T5217] syz.3.356: attempt to access beyond end of device [ 305.947902][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.962570][ T5217] syz.3.356: attempt to access beyond end of device [ 305.962570][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 306.054814][ T3716] device veth1_macvtap left promiscuous mode [ 306.071298][ T3716] device veth0_macvtap left promiscuous mode [ 306.091087][ T3716] device veth1_vlan left promiscuous mode [ 306.117318][ T3716] device veth0_vlan left promiscuous mode [ 306.124306][ T6294] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 308.732040][ T5524] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 309.618261][ T3716] team0 (unregistering): Port device geneve0 removed [ 309.642034][ T5458] EXT4-fs (loop0): unmounting filesystem. [ 309.697554][ T5524] usb 3-1: Using ep0 maxpacket: 8 [ 309.997768][ T5524] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 310.679191][ T5524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.696464][ T5524] usb 3-1: config 0 descriptor?? [ 310.738999][ T5524] hso 3-1:0.0: Can't find BULK IN endpoint [ 310.828296][ T5217] bio_check_eod: 2216 callbacks suppressed [ 310.828317][ T5217] syz.3.356: attempt to access beyond end of device [ 310.828317][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.849250][ T5217] syz.3.356: attempt to access beyond end of device [ 310.849250][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 310.865557][ T5217] syz.3.356: attempt to access beyond end of device [ 310.865557][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.880226][ T5217] syz.3.356: attempt to access beyond end of device [ 310.880226][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 310.896454][ T5217] syz.3.356: attempt to access beyond end of device [ 310.896454][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.911228][ T5217] syz.3.356: attempt to access beyond end of device [ 310.911228][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 310.927520][ T5217] syz.3.356: attempt to access beyond end of device [ 310.927520][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.942221][ T5217] syz.3.356: attempt to access beyond end of device [ 310.942221][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 310.958965][ T5217] syz.3.356: attempt to access beyond end of device [ 310.958965][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.973591][ T5217] syz.3.356: attempt to access beyond end of device [ 310.973591][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 311.047590][ T3597] usb 3-1: USB disconnect, device number 25 [ 311.920785][ T6328] loop2: detected capacity change from 0 to 64 [ 312.289201][ T3716] team0 (unregistering): Port device team_slave_1 removed [ 312.371440][ T6330] overlayfs: upper fs needs to support d_type. [ 312.379456][ T6330] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 312.387529][ T6330] overlayfs: failed to set xattr on upper [ 312.393358][ T6330] overlayfs: ...falling back to index=off,metacopy=off. [ 312.544393][ T3716] team0 (unregistering): Port device team_slave_0 removed [ 312.738711][ T3716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.893933][ T3716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.110069][ T3553] Bad inode number on dev loop2: 4160749571 is out of range [ 314.138976][ T3553] Bad inode number on dev loop2: 4160749571 is out of range [ 314.229366][ T3549] Bluetooth: hci5: command 0x0406 tx timeout [ 314.454156][ T3716] bond0 (unregistering): Released all slaves [ 315.781727][ T3561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.796874][ T3564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.805434][ T3561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.813439][ T3564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.823359][ T3561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 315.831903][ T3564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.840898][ T5217] bio_check_eod: 2822 callbacks suppressed [ 315.840913][ T5217] syz.3.356: attempt to access beyond end of device [ 315.840913][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.861367][ T5217] syz.3.356: attempt to access beyond end of device [ 315.861367][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 315.878132][ T5217] syz.3.356: attempt to access beyond end of device [ 315.878132][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.892760][ T5217] syz.3.356: attempt to access beyond end of device [ 315.892760][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 315.909063][ T5217] syz.3.356: attempt to access beyond end of device [ 315.909063][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.923877][ T5217] syz.3.356: attempt to access beyond end of device [ 315.923877][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 315.939842][ T5217] syz.3.356: attempt to access beyond end of device [ 315.939842][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.954447][ T5217] syz.3.356: attempt to access beyond end of device [ 315.954447][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 315.970995][ T5217] syz.3.356: attempt to access beyond end of device [ 315.970995][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.985749][ T5217] syz.3.356: attempt to access beyond end of device [ 315.985749][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 316.356979][ T6040] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.611286][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.617667][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.987669][ T3549] Bluetooth: hci0: command tx timeout [ 318.092109][ T153] libceph: connect (1)[c::]:6789 error -101 [ 318.098731][ T153] libceph: mon0 (1)[c::]:6789 connect error [ 318.320078][ T6342] ceph: No mds server is up or the cluster is laggy [ 319.130590][ T5523] libceph: connect (1)[c::]:6789 error -101 [ 319.136650][ T5523] libceph: mon0 (1)[c::]:6789 connect error [ 319.180721][ T6040] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 319.377766][ T6040] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 319.455411][ T6040] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.067638][ T3549] Bluetooth: hci0: command tx timeout [ 320.091507][ T6332] chnl_net:caif_netlink_parms(): no params data found [ 320.849764][ T5217] bio_check_eod: 2460 callbacks suppressed [ 320.849786][ T5217] syz.3.356: attempt to access beyond end of device [ 320.849786][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 320.861996][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.870245][ T5217] syz.3.356: attempt to access beyond end of device [ 320.870245][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 320.892349][ T5217] syz.3.356: attempt to access beyond end of device [ 320.892349][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 320.907048][ T5217] syz.3.356: attempt to access beyond end of device [ 320.907048][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 320.910944][ T3561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.923521][ T5217] syz.3.356: attempt to access beyond end of device [ 320.923521][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 320.932260][ T3561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.942636][ T5217] syz.3.356: attempt to access beyond end of device [ 320.942636][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 320.951475][ T3561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.965093][ T5217] syz.3.356: attempt to access beyond end of device [ 320.965093][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 320.970599][ T3561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.984054][ T5217] syz.3.356: attempt to access beyond end of device [ 320.984054][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 320.993456][ T3561] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.006606][ T5217] syz.3.356: attempt to access beyond end of device [ 321.006606][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 321.025531][ T5217] syz.3.356: attempt to access beyond end of device [ 321.025531][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 321.026506][ T3561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.138706][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.183446][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.249530][ T6332] device bridge_slave_0 entered promiscuous mode [ 321.308223][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.316456][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.361624][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.408369][ T6332] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.415499][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.454555][ T6332] device bridge_slave_1 entered promiscuous mode [ 321.501077][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.527336][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.566874][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.574065][ T3640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.678266][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 321.720089][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.728956][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.767142][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.835413][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.842737][ T4890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.879005][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.907078][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.961960][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.005626][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 322.138043][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 322.146315][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 322.215705][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 322.265431][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 322.338379][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.402589][ T6332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.452638][ T6040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.510664][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.549309][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.576541][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.599512][ T3564] Bluetooth: hci0: command tx timeout [ 322.622801][ T6332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.968550][ T6332] team0: Port device team_slave_0 added [ 323.110098][ T3564] Bluetooth: hci1: command tx timeout [ 323.126785][ T6332] team0: Port device team_slave_1 added [ 323.718371][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.741191][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.886132][ T6332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.984690][ T6332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.627623][ T3564] Bluetooth: hci0: command tx timeout [ 325.599895][ T3564] Bluetooth: hci1: command tx timeout [ 325.632714][ T6332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.857673][ T5217] bio_check_eod: 2654 callbacks suppressed [ 325.857693][ T5217] syz.3.356: attempt to access beyond end of device [ 325.857693][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.878179][ T5217] syz.3.356: attempt to access beyond end of device [ 325.878179][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 325.894859][ T5217] syz.3.356: attempt to access beyond end of device [ 325.894859][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.910346][ T5217] syz.3.356: attempt to access beyond end of device [ 325.910346][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 325.926603][ T5217] syz.3.356: attempt to access beyond end of device [ 325.926603][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.941337][ T5217] syz.3.356: attempt to access beyond end of device [ 325.941337][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 325.957887][ T5217] syz.3.356: attempt to access beyond end of device [ 325.957887][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.972548][ T5217] syz.3.356: attempt to access beyond end of device [ 325.972548][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 325.988778][ T5217] syz.3.356: attempt to access beyond end of device [ 325.988778][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 326.003910][ T5217] syz.3.356: attempt to access beyond end of device [ 326.003910][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 326.101706][ T6332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.361842][ T6370] chnl_net:caif_netlink_parms(): no params data found [ 327.581218][ T6332] device hsr_slave_0 entered promiscuous mode [ 327.621115][ T6332] device hsr_slave_1 entered promiscuous mode [ 327.673834][ T3564] Bluetooth: hci1: command tx timeout [ 328.614372][ T6332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.797572][ T6332] Cannot create hsr debugfs directory [ 329.629148][ T3561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.641356][ T3561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.650397][ T3561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.660523][ T3561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.668303][ T3561] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 329.675673][ T3561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.907585][ T3564] Bluetooth: hci1: command tx timeout [ 330.628263][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 330.868841][ T5217] bio_check_eod: 2218 callbacks suppressed [ 330.868861][ T5217] syz.3.356: attempt to access beyond end of device [ 330.868861][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 330.889358][ T5217] syz.3.356: attempt to access beyond end of device [ 330.889358][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 330.905461][ T5217] syz.3.356: attempt to access beyond end of device [ 330.905461][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 330.921135][ T5217] syz.3.356: attempt to access beyond end of device [ 330.921135][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 330.937354][ T5217] syz.3.356: attempt to access beyond end of device [ 330.937354][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 330.952266][ T5217] syz.3.356: attempt to access beyond end of device [ 330.952266][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 330.968547][ T5217] syz.3.356: attempt to access beyond end of device [ 330.968547][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 330.983308][ T5217] syz.3.356: attempt to access beyond end of device [ 330.983308][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 330.999760][ T5217] syz.3.356: attempt to access beyond end of device [ 330.999760][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 331.014430][ T5217] syz.3.356: attempt to access beyond end of device [ 331.014430][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 331.559956][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.567100][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.647219][ T6370] device bridge_slave_0 entered promiscuous mode [ 331.750267][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.828330][ T3564] Bluetooth: hci3: command tx timeout [ 331.915853][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.959099][ T6370] device bridge_slave_1 entered promiscuous mode [ 334.599515][ T3564] Bluetooth: hci3: command tx timeout [ 335.886750][ T5217] bio_check_eod: 2552 callbacks suppressed [ 335.886798][ T5217] syz.3.356: attempt to access beyond end of device [ 335.886798][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 335.910047][ T5217] syz.3.356: attempt to access beyond end of device [ 335.910047][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 335.935933][ T5217] syz.3.356: attempt to access beyond end of device [ 335.935933][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 335.953328][ T5217] syz.3.356: attempt to access beyond end of device [ 335.953328][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 335.979185][ T5217] syz.3.356: attempt to access beyond end of device [ 335.979185][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 335.996358][ T5217] syz.3.356: attempt to access beyond end of device [ 335.996358][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 336.022314][ T5217] syz.3.356: attempt to access beyond end of device [ 336.022314][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 336.039733][ T5217] syz.3.356: attempt to access beyond end of device [ 336.039733][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 336.065759][ T5217] syz.3.356: attempt to access beyond end of device [ 336.065759][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 336.083077][ T5217] syz.3.356: attempt to access beyond end of device [ 336.083077][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 336.393456][ T6477] loop0: detected capacity change from 0 to 2048 [ 336.510762][ T6477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 336.627986][ T3561] Bluetooth: hci3: command tx timeout [ 337.000273][ T5458] EXT4-fs (loop0): unmounting filesystem. [ 337.631681][ T6370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.550481][ T6370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.708034][ T3561] Bluetooth: hci3: command tx timeout [ 338.829207][ T6370] team0: Port device team_slave_0 added [ 338.866568][ T6370] team0: Port device team_slave_1 added [ 338.992514][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.027258][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.140867][ T6370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.193566][ T6370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.226729][ T6370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.341109][ T6370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.552545][ T6370] device hsr_slave_0 entered promiscuous mode [ 339.608314][ T6370] device hsr_slave_1 entered promiscuous mode [ 339.617821][ T6370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.636442][ T6370] Cannot create hsr debugfs directory [ 340.007540][ T3597] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 340.257612][ T3597] usb 4-1: Using ep0 maxpacket: 16 [ 340.377636][ T3597] usb 4-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 340.397508][ T3597] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.420050][ T3597] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 340.435779][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.465697][ T3597] usb 4-1: config 0 descriptor?? [ 340.519890][ T3597] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 340.603148][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 340.629178][ T6437] chnl_net:caif_netlink_parms(): no params data found [ 340.887534][ T5217] bio_check_eod: 2525 callbacks suppressed [ 340.887556][ T5217] syz.3.356: attempt to access beyond end of device [ 340.887556][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 340.906143][ T6332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.909786][ T5217] syz.3.356: attempt to access beyond end of device [ 340.909786][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 340.924557][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 340.932297][ T5217] syz.3.356: attempt to access beyond end of device [ 340.932297][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 340.956908][ T5217] syz.3.356: attempt to access beyond end of device [ 340.956908][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 340.971582][ T5217] syz.3.356: attempt to access beyond end of device [ 340.971582][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 340.987834][ T5217] syz.3.356: attempt to access beyond end of device [ 340.987834][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 341.002453][ T5217] syz.3.356: attempt to access beyond end of device [ 341.002453][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 341.018474][ T5217] syz.3.356: attempt to access beyond end of device [ 341.018474][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 341.033102][ T5217] syz.3.356: attempt to access beyond end of device [ 341.033102][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 341.049119][ T5217] syz.3.356: attempt to access beyond end of device [ 341.049119][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 341.182534][ T26] audit: type=1326 audit(1720347860.600:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 341.300203][ T26] audit: type=1326 audit(1720347860.630:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 341.467999][ T26] audit: type=1326 audit(1720347860.670:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 341.599735][ T26] audit: type=1326 audit(1720347860.670:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 341.610979][ T6437] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.622047][ T26] audit: type=1326 audit(1720347860.670:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 341.697551][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.705956][ T6437] device bridge_slave_0 entered promiscuous mode [ 341.863419][ T6332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.877583][ T26] audit: type=1326 audit(1720347860.700:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 341.937935][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.945077][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.165143][ T6437] device bridge_slave_1 entered promiscuous mode [ 342.172241][ T26] audit: type=1326 audit(1720347860.700:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 343.611417][ T26] audit: type=1326 audit(1720347860.700:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 343.634259][ T26] audit: type=1326 audit(1720347860.750:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 343.893175][ T6437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.908235][ T26] audit: type=1326 audit(1720347860.750:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be5f75bd9 code=0x7ffc0000 [ 344.628624][ T3593] usb 4-1: USB disconnect, device number 14 [ 344.895741][ T6332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.169439][ T6437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.500849][ T6332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.607237][ T6523] loop0: detected capacity change from 0 to 2048 [ 345.690368][ T6437] team0: Port device team_slave_0 added [ 345.732046][ T6523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 345.751398][ T6437] team0: Port device team_slave_1 added [ 345.827880][ T27] INFO: task kworker/u4:11:3717 blocked for more than 145 seconds. [ 345.836219][ T27] Not tainted 6.1.97-syzkaller #0 [ 345.898064][ T5217] bio_check_eod: 2420 callbacks suppressed [ 345.898085][ T5217] syz.3.356: attempt to access beyond end of device [ 345.898085][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 345.920546][ T5217] syz.3.356: attempt to access beyond end of device [ 345.920546][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 345.935360][ T5217] syz.3.356: attempt to access beyond end of device [ 345.935360][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 345.951590][ T5217] syz.3.356: attempt to access beyond end of device [ 345.951590][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 345.966205][ T5217] syz.3.356: attempt to access beyond end of device [ 345.966205][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 345.982432][ T5217] syz.3.356: attempt to access beyond end of device [ 345.982432][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 345.997218][ T5217] syz.3.356: attempt to access beyond end of device [ 345.997218][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 346.013432][ T5217] syz.3.356: attempt to access beyond end of device [ 346.013432][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 346.028164][ T5217] syz.3.356: attempt to access beyond end of device [ 346.028164][ T5217] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 346.044376][ T5217] syz.3.356: attempt to access beyond end of device [ 346.044376][ T5217] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 346.210361][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.236971][ T27] task:kworker/u4:11 state:D stack:21368 pid:3717 ppid:2 flags:0x00004000 [ 346.266715][ T27] Workqueue: writeback wb_workfn (flush-7:3) [ 346.287143][ T27] Call Trace: [ 346.300071][ T27] [ 346.309854][ T27] __schedule+0x142d/0x4550 [ 346.325426][ T27] ? __sched_text_start+0x8/0x8 [ 346.341698][ T27] ? blk_check_plugged+0x250/0x250 [ 346.359354][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 346.375839][ T27] ? wq_worker_sleeping+0x5f/0x270 [ 346.393827][ T27] schedule+0xbf/0x180 [ 346.408182][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 346.425127][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 346.446644][ T27] ? down_write_killable_nested+0x90/0x90 [ 346.465339][ T27] ? read_lock_is_recursive+0x10/0x10 [ 346.484484][ T27] ? rwsem_write_trylock+0x166/0x210 [ 346.502323][ T27] ? clear_nonspinnable+0x60/0x60 [ 346.518823][ T27] ? from_kgid+0x1a3/0x730 [ 346.532355][ T27] f2fs_balance_fs+0x4fb/0x6c0 [ 346.550603][ T27] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 346.570067][ T27] ? folio_unlock+0x122/0x2f0 [ 346.585274][ T27] f2fs_write_inode+0x4c3/0x540 [ 346.601512][ T27] __writeback_single_inode+0x67d/0x11e0 [ 346.619473][ T27] writeback_sb_inodes+0xc2b/0x1b20 [ 346.637028][ T27] ? queue_io+0x630/0x630 [ 346.651791][ T27] ? __writeback_inodes_wb+0x400/0x400 [ 346.671960][ T27] __writeback_inodes_wb+0x114/0x400 [ 346.689973][ T27] wb_writeback+0x4b1/0xe10 [ 346.703539][ T27] ? percpu_ref_tryget+0x260/0x260 [ 346.721028][ T27] ? _find_next_bit+0x11b/0x120 [ 346.737080][ T27] wb_workfn+0xc9e/0x1020 [ 346.750691][ T27] ? inode_wait_for_writeback+0x280/0x280 [ 346.771591][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 346.792435][ T27] ? print_irqtrace_events+0x210/0x210 [ 346.810758][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 346.830150][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 346.846776][ T27] ? process_one_work+0x7a9/0x11d0 [ 346.862857][ T27] process_one_work+0x8a9/0x11d0 [ 346.880315][ T27] ? worker_detach_from_pool+0x260/0x260 [ 346.899554][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 346.918818][ T27] ? kthread_data+0x4e/0xc0 [ 346.932346][ T27] ? wq_worker_running+0x97/0x190 [ 346.949902][ T27] worker_thread+0xa47/0x1200 [ 346.964657][ T27] ? _raw_spin_unlock+0x40/0x40 [ 346.980817][ T27] ? __sched_text_start+0x8/0x8 [ 346.998186][ T27] ? _raw_spin_unlock+0x40/0x40 [ 347.015007][ T27] kthread+0x28d/0x320 [ 347.028585][ T27] ? worker_clr_flags+0x190/0x190 [ 347.044845][ T27] ? kthread_blkcg+0xd0/0xd0 [ 347.060710][ T27] ret_from_fork+0x1f/0x30 [ 347.074430][ T27] [ 347.084454][ T27] INFO: task syz.3.356:5226 blocked for more than 146 seconds. [ 347.112270][ T27] Not tainted 6.1.97-syzkaller #0 [ 347.131256][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.160142][ T27] task:syz.3.356 state:D stack:25856 pid:5226 ppid:3555 flags:0x00004004 [ 347.190648][ T27] Call Trace: [ 347.202017][ T27] [ 347.210617][ T27] __schedule+0x142d/0x4550 [ 347.225537][ T27] ? __sched_text_start+0x8/0x8 [ 347.242680][ T27] ? print_irqtrace_events+0x210/0x210 [ 347.261766][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 347.278113][ T27] ? rwsem_spin_on_owner+0x157/0x2e0 [ 347.294740][ T27] schedule+0xbf/0x180 [ 347.309062][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 347.327152][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 347.346592][ T27] ? down_write_killable_nested+0x90/0x90 [ 347.367621][ T27] ? read_lock_is_recursive+0x10/0x10 [ 347.386648][ T27] ? ima_lsm_policy_change+0x620/0x620 [ 347.403672][ T27] ? rwsem_write_trylock+0x166/0x210 [ 347.421681][ T27] ? clear_nonspinnable+0x60/0x60 [ 347.437931][ T27] process_measurement+0x446/0x21b0 [ 347.455710][ T27] ? mark_lock+0x9a/0x340 [ 347.471294][ T27] ? ima_file_mmap+0x1c0/0x1c0 [ 347.487520][ T27] ? dquot_initialize+0x20/0x20 [ 347.502618][ T27] ? aa_get_current_label+0x111/0x1d0 [ 347.522012][ T27] ? apparmor_current_getsecid_subj+0xac/0x110 [ 347.543001][ T27] ima_file_check+0xed/0x170 [ 347.558094][ T27] ? do_dentry_open+0xce4/0x10f0 [ 347.576293][ T27] ? ima_bprm_check+0x2b0/0x2b0 [ 347.592539][ T27] path_openat+0x2687/0x2e60 [ 347.611943][ T27] ? mark_lock+0x9a/0x340 [ 347.621075][ T27] ? do_filp_open+0x480/0x480 [ 347.625966][ T27] do_filp_open+0x230/0x480 [ 347.630610][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 347.635268][ T27] ? _raw_spin_unlock+0x24/0x40 [ 347.640299][ T27] ? alloc_fd+0x59c/0x640 [ 347.675116][ T27] do_sys_openat2+0x13b/0x500 [ 347.685574][ T27] ? do_sys_open+0x220/0x220 [ 347.697629][ T27] ? fd_install+0x57/0x540 [ 347.702200][ T27] __x64_sys_openat+0x243/0x290 [ 347.707177][ T27] ? __ia32_sys_open+0x270/0x270 [ 347.722188][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 347.734849][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 347.743976][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 347.760136][ T27] do_syscall_64+0x3b/0xb0 [ 347.766654][ T27] ? clear_bhb_loop+0x45/0xa0 [ 347.777810][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.783888][ T27] RIP: 0033:0x7fee86575bd9 [ 347.798640][ T27] RSP: 002b:00007fee872e2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.809998][ T27] RAX: ffffffffffffffda RBX: 00007fee867041e8 RCX: 00007fee86575bd9 [ 347.827932][ T27] RDX: 0000000000183341 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 347.836056][ T27] RBP: 00007fee865e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 347.852253][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.866874][ T27] R13: 000000000000006e R14: 00007fee867041e8 R15: 00007fff2d525f58 [ 347.882179][ T27] [ 347.888820][ T27] INFO: task syz.3.356:5233 blocked for more than 147 seconds. [ 347.906908][ T27] Not tainted 6.1.97-syzkaller #0 [ 347.922563][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.936313][ T27] task:syz.3.356 state:D stack:26040 pid:5233 ppid:3555 flags:0x00004004 [ 347.951712][ T27] Call Trace: [ 347.955272][ T27] [ 347.964383][ T27] __schedule+0x142d/0x4550 [ 347.973809][ T27] ? __sched_text_start+0x8/0x8 [ 347.984851][ T27] ? print_irqtrace_events+0x210/0x210 [ 347.995643][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 348.006903][ T27] ? rwsem_spin_on_owner+0x157/0x2e0 [ 348.020286][ T27] schedule+0xbf/0x180 [ 348.024505][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 348.038683][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 348.047832][ T27] ? down_write_killable_nested+0x90/0x90 [ 348.053678][ T27] ? read_lock_is_recursive+0x10/0x10 [ 348.067642][ T27] ? rwsem_write_trylock+0x166/0x210 [ 348.074244][ T27] ? clear_nonspinnable+0x60/0x60 [ 348.087639][ T27] f2fs_issue_checkpoint+0x2d2/0x4d0 [ 348.094410][ T27] ? f2fs_destroy_checkpoint_caches+0x20/0x20 [ 348.107663][ T27] ? d_instantiate_new+0x7b/0x110 [ 348.114580][ T27] ? f2fs_create+0x7a7/0xa10 [ 348.128955][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 348.135865][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 348.148765][ T27] ? f2fs_sync_fs+0x201/0x410 [ 348.154392][ T27] f2fs_create+0x862/0xa10 [ 348.167532][ T27] ? f2fs_lookup+0xae0/0xae0 [ 348.172321][ T27] path_openat+0x12f1/0x2e60 [ 348.177102][ T27] ? do_filp_open+0x480/0x480 [ 348.189926][ T27] do_filp_open+0x230/0x480 [ 348.199108][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 348.208095][ T27] ? _raw_spin_unlock+0x24/0x40 [ 348.213178][ T27] ? alloc_fd+0x59c/0x640 [ 348.226454][ T27] do_sys_openat2+0x13b/0x500 [ 348.235841][ T27] ? do_sys_open+0x220/0x220 [ 348.248426][ T27] __x64_sys_openat+0x243/0x290 [ 348.253483][ T27] ? __ia32_sys_open+0x270/0x270 [ 348.267673][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 348.274260][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 348.288586][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 348.295612][ T27] do_syscall_64+0x3b/0xb0 [ 348.307872][ T27] ? clear_bhb_loop+0x45/0xa0 [ 348.317149][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.332013][ T27] RIP: 0033:0x7fee86575bd9 [ 348.341128][ T27] RSP: 002b:00007fee872c1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 348.358693][ T27] RAX: ffffffffffffffda RBX: 00007fee867042c0 RCX: 00007fee86575bd9 [ 348.366804][ T27] RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 348.382122][ T27] RBP: 00007fee865e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 348.399681][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.416846][ T27] R13: 000000000000006e R14: 00007fee867042c0 R15: 00007fff2d525f58 [ 348.435209][ T27] [ 348.442527][ T27] [ 348.442527][ T27] Showing all locks held in the system: [ 348.460014][ T27] 1 lock held by rcu_tasks_kthre/12: [ 348.465687][ T27] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 348.489167][ T27] 1 lock held by rcu_tasks_trace/13: [ 348.496781][ T27] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 348.519748][ T27] 1 lock held by khungtaskd/27: [ 348.524714][ T27] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 348.544343][ T27] 2 locks held by kworker/1:2/153: [ 348.553458][ T27] 2 locks held by getty/3309: [ 348.566186][ T27] #0: ffff88814ba59098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 348.580299][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 348.597602][ T27] 3 locks held by kworker/1:6/3597: [ 348.603070][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 348.627618][ T5458] EXT4-fs (loop0): unmounting filesystem. [ 348.639196][ T27] #1: ffffc9000406fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 348.672957][ T27] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 348.687072][ T27] 5 locks held by kworker/u4:10/3716: [ 348.710154][ T27] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 348.739406][ T27] #1: ffffc90004d37d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 348.758677][ T27] #2: ffffffff8e28d810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 348.776611][ T27] #3: ffff888077fc22f8 (&devlink->lock_key#10){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x130/0x2c0 [ 348.797613][ T27] #4: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x2b1/0xa00 [ 348.808697][ T27] 4 locks held by kworker/u4:11/3717: [ 348.814171][ T27] #0: ffff888144668138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 348.834408][ T27] #1: ffffc90004d47d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 348.852071][ T27] #2: ffff88807364a0e0 (&type->s_umount_key#48){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 348.869764][ T27] #3: ffff888014671140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 348.887921][ T27] 4 locks held by syz.3.356/5217: [ 348.893057][ T27] 2 locks held by syz.3.356/5226: [ 348.907688][ T27] #0: ffff88807364a460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 348.925929][ T27] #1: ffff88805cf93f70 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 348.941678][ T27] 3 locks held by syz.3.356/5233: [ 348.946807][ T27] #0: ffff88807364a460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 348.963566][ T27] #1: ffff88805cf974b0 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 348.979233][ T27] #2: ffff888014671140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x2d2/0x4d0 [ 348.997599][ T27] 3 locks held by kworker/1:14/5523: [ 349.004496][ T27] #0: ffff888027eee538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 349.023913][ T27] #1: ffffc90014287d20 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 349.047526][ T27] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 349.067103][ T27] 2 locks held by kworker/1:18/5529: [ 349.074224][ T27] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 349.093241][ T27] #1: ffffc90014217d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 349.113536][ T27] 7 locks held by syz-executor/6332: [ 349.124936][ T27] #0: ffff88807e9b8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xba0 [ 349.141048][ T27] #1: ffff88805c15a488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 349.158901][ T27] #2: ffff8880219fd3a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 349.177299][ T27] #3: ffffffff8dc0cf08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 349.198338][ T27] #4: ffff88807aa720e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 349.217701][ T27] #5: ffff88807aa762f8 (&devlink->lock_key#11){+.+.}-{3:3}, at: nsim_drv_probe+0xc9/0xb20 [ 349.238584][ T27] #6: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 349.259300][ T27] 4 locks held by syz-executor/6370: [ 349.266047][ T27] #0: ffff88807e9b8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xba0 [ 349.283105][ T27] #1: ffff88805e48b888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 349.298176][ T27] #2: ffff8880219fd490 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 349.317588][ T27] #3: ffffffff8dc0cf08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 349.337136][ T27] 2 locks held by syz-executor/6437: [ 349.343995][ T27] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 349.363495][ T27] #1: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 349.381572][ T27] [ 349.384012][ T27] ============================================= [ 349.384012][ T27] [ 349.399555][ T27] NMI backtrace for cpu 0 [ 349.403919][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 349.411742][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 349.421815][ T27] Call Trace: [ 349.425129][ T27] [ 349.428080][ T27] dump_stack_lvl+0x1e3/0x2cb [ 349.432796][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 349.438285][ T27] ? panic+0x764/0x764 [ 349.442378][ T27] ? vprintk_emit+0x622/0x740 [ 349.447100][ T27] ? printk_sprint+0x490/0x490 [ 349.451896][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 349.457060][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 349.462057][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 349.468265][ T27] ? _printk+0xd1/0x111 [ 349.472443][ T27] ? panic+0x764/0x764 [ 349.476534][ T27] ? __wake_up_klogd+0xcc/0x100 [ 349.481409][ T27] ? panic+0x764/0x764 [ 349.485507][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 349.491608][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 349.497709][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 349.503724][ T27] watchdog+0xf88/0xfd0 [ 349.507917][ T27] ? watchdog+0x1f8/0xfd0 [ 349.512279][ T27] kthread+0x28d/0x320 [ 349.516367][ T27] ? hungtask_pm_notify+0x50/0x50 [ 349.521415][ T27] ? kthread_blkcg+0xd0/0xd0 [ 349.526025][ T27] ret_from_fork+0x1f/0x30 [ 349.530484][ T27] [ 349.534710][ T27] Sending NMI from CPU 0 to CPUs 1: [ 349.540105][ C1] NMI backtrace for cpu 1 [ 349.540115][ C1] CPU: 1 PID: 5217 Comm: syz.3.356 Not tainted 6.1.97-syzkaller #0 [ 349.540134][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 349.540145][ C1] RIP: 0010:check_preemption_disabled+0x59/0x110 [ 349.540173][ C1] Code: 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 c7 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 c9 49 89 f6 49 89 ff 65 4c 8b 25 [ 349.540188][ C1] RSP: 0018:ffffc900053fe818 EFLAGS: 00000046 [ 349.540203][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffff888076113b80 [ 349.540216][ C1] RDX: 0000000000000000 RSI: ffffffff8aec0f20 RDI: ffffffff8b3d4760 [ 349.540229][ C1] RBP: 00000000ffffffff R08: ffffffff83ca773c R09: ffffc900053ff010 [ 349.540242][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246 [ 349.540254][ C1] R13: ffff888076113b80 R14: 00000000ffffffff R15: ffffffff8d12ad60 [ 349.540268][ C1] FS: 00007fee873036c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 349.540284][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.540297][ C1] CR2: 0000000020001240 CR3: 000000005dfaf000 CR4: 00000000003506e0 [ 349.540312][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.540322][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 349.540333][ C1] Call Trace: [ 349.540339][ C1] [ 349.540345][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 349.540373][ C1] ? read_lock_is_recursive+0x10/0x10 [ 349.540401][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 349.540429][ C1] ? nmi_handle+0x25/0x440 [ 349.540464][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 349.540491][ C1] ? nmi_handle+0x12e/0x440 [ 349.540517][ C1] ? nmi_handle+0x25/0x440 [ 349.540544][ C1] ? check_preemption_disabled+0x59/0x110 [ 349.540566][ C1] ? default_do_nmi+0x62/0x150 [ 349.540583][ C1] ? exc_nmi+0xa8/0x100 [ 349.540599][ C1] ? end_repeat_nmi+0x16/0x31 [ 349.540629][ C1] ? do_garbage_collect+0x218c/0x81f0 [ 349.540659][ C1] ? check_preemption_disabled+0x59/0x110 [ 349.540682][ C1] ? check_preemption_disabled+0x59/0x110 [ 349.540704][ C1] ? check_preemption_disabled+0x59/0x110 [ 349.540726][ C1] [ 349.540731][ C1] [ 349.540739][ C1] lock_is_held_type+0x76/0x180 [ 349.540762][ C1] __might_resched+0xa1/0x780 [ 349.540779][ C1] ? read_lock_is_recursive+0x10/0x10 [ 349.540807][ C1] ? __might_sleep+0xb0/0xb0 [ 349.540826][ C1] ? do_garbage_collect+0x44d7/0x81f0 [ 349.540858][ C1] down_read+0x8a/0xa30 [ 349.540878][ C1] ? do_garbage_collect+0x22d7/0x81f0 [ 349.540906][ C1] ? __down_common+0x8b0/0x8b0 [ 349.540924][ C1] ? __up_read+0x2b9/0x690 [ 349.540947][ C1] ? up_read+0x20/0x20 [ 349.540967][ C1] ? iput+0x401/0x980 [ 349.540995][ C1] do_garbage_collect+0x21ed/0x81f0 [ 349.541054][ C1] ? get_victim_by_default+0xe8a/0x6ff0 [ 349.541075][ C1] ? f2fs_gc+0x32a0/0x32a0 [ 349.541106][ C1] ? get_victim_by_default+0x6893/0x6ff0 [ 349.541130][ C1] ? mark_lock+0x9a/0x340 [ 349.541165][ C1] ? f2fs_gc+0xef4/0x32a0 [ 349.541191][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 349.541225][ C1] ? up_write+0x19d/0x580 [ 349.541246][ C1] ? get_ckpt_valid_blocks+0x260/0x260 [ 349.541265][ C1] ? __up_read+0x690/0x690 [ 349.541292][ C1] f2fs_gc+0x1169/0x32a0 [ 349.541336][ C1] ? f2fs_start_bidx_of_node+0x370/0x370 [ 349.541375][ C1] ? rwsem_write_trylock+0x166/0x210 [ 349.541409][ C1] f2fs_balance_fs+0x506/0x6c0 [ 349.541435][ C1] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 349.541461][ C1] ? __up_read+0x2b9/0x690 [ 349.541485][ C1] ? folio_unlock+0x122/0x2f0 [ 349.541515][ C1] f2fs_map_blocks+0x2871/0x3ab0 [ 349.541554][ C1] ? f2fs_do_map_lock+0x70/0x70 [ 349.541582][ C1] expand_inode_data+0x56d/0xaf0 [ 349.541611][ C1] ? f2fs_insert_range+0x3c0/0x3c0 [ 349.541627][ C1] ? file_modified_flags+0x3e1/0x480 [ 349.541659][ C1] ? rcu_read_lock_any_held+0xb3/0x160 [ 349.541686][ C1] f2fs_fallocate+0x44a/0x9f0 [ 349.541717][ C1] vfs_fallocate+0x547/0x6b0 [ 349.541743][ C1] do_vfs_ioctl+0x222c/0x2a90 [ 349.541763][ C1] ? __x64_compat_sys_ioctl+0x80/0x80 [ 349.541780][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 349.541804][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 349.541827][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 349.541852][ C1] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 349.541872][ C1] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 349.541891][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 349.541918][ C1] ? __fget_files+0x28/0x4a0 [ 349.541945][ C1] ? __fget_files+0x28/0x4a0 [ 349.541961][ C1] ? __fget_files+0x435/0x4a0 [ 349.541978][ C1] ? __fget_files+0x28/0x4a0 [ 349.541998][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 349.542016][ C1] ? security_file_ioctl+0x7d/0xa0 [ 349.542035][ C1] __se_sys_ioctl+0x81/0x160 [ 349.542063][ C1] do_syscall_64+0x3b/0xb0 [ 349.542094][ C1] ? clear_bhb_loop+0x45/0xa0 [ 349.542120][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.542144][ C1] RIP: 0033:0x7fee86575bd9 [ 349.542159][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.542173][ C1] RSP: 002b:00007fee87303048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.542190][ C1] RAX: ffffffffffffffda RBX: 00007fee86704110 RCX: 00007fee86575bd9 [ 349.542203][ C1] RDX: 00000000200000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 349.542214][ C1] RBP: 00007fee865e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 349.542225][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.542235][ C1] R13: 000000000000006e R14: 00007fee86704110 R15: 00007fff2d525f58 [ 349.542256][ C1] [ 349.610706][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 349.610725][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 349.610749][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 349.610762][ T27] Call Trace: [ 349.610770][ T27] [ 349.610778][ T27] dump_stack_lvl+0x1e3/0x2cb [ 349.610821][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 349.610856][ T27] ? panic+0x764/0x764 [ 349.610880][ T27] ? llist_add_batch+0x160/0x1d0 [ 349.610915][ T27] ? vscnprintf+0x59/0x80 [ 349.610945][ T27] panic+0x318/0x764 [ 349.610971][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 349.611009][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 349.611039][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 349.611081][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 349.611119][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 349.611159][ T27] watchdog+0xfc7/0xfd0 [ 349.611194][ T27] ? watchdog+0x1f8/0xfd0 [ 349.611238][ T27] kthread+0x28d/0x320 [ 349.611258][ T27] ? hungtask_pm_notify+0x50/0x50 [ 349.611285][ T27] ? kthread_blkcg+0xd0/0xd0 [ 349.611308][ T27] ret_from_fork+0x1f/0x30 [ 349.611352][ T27] [ 349.616084][ T27] Kernel Offset: disabled [ 350.231402][ T27] Rebooting in 86400 seconds..