last executing test programs: 34.414041376s ago: executing program 1 (id=409): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp6\x00') r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendfile(r1, r0, 0x0, 0x1) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x1) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x842839, 0x0, 0x0, 0x0, 0x0) sync() sync() r2 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007ffb) r4 = memfd_create(&(0x7f0000000440)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xadt\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x1dz\xd0\x11\xe3\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a\x82\xf0\xc72\xea\xb7Ww\xbe\xa8\x06\xa7\xdc\x06\x7f\x00\xc36\x96\xffZ\\A\x1dO\x03~Dk\xeb\x80\f\xed{u[\xbd\x9d^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00\x00\x00\x00\x00\x00\x00\x00\x00\x003F\xf1 \x17-\x9e4C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s>\xd7s\xef\xb3\x9f#\x15\xad\x83i\x1b\x9b{4)\xd8\xa2\xb8\x8f\xa22)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccU\xaf\\\xc4j,\xad[E\xb5*\xa1`\x7f\x93\xff\xb1G\xb9\xc4\xb8\xfbF\xa5BPF\x0fN\x8d\x1c\xdc\xdd^@\x1e\xf5\x7f ~\xbd\x1f\b\xe7\xe8\x0f\xa0|e\xba\x95a6\xf50\x14|\x19j\\\xe2\xca\f\x0fsd\x85>[\x04\x85I^\x80\x18m\x96:\x0f\xf4V\x8f\xa6l\xd4\"\xd7S\xac\x1e\x94\xc1\xb6x\xb8\xaa\x8c\x00\xfc\xf5', 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) fspick(r5, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x800) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) ftruncate(r4, 0x6) write$UHID_DESTROY(r3, &(0x7f0000000180), 0x4) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x1000000201005) open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) sync() open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a40), 0x140, 0x0) 33.213047834s ago: executing program 1 (id=414): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'vlan1\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'lo\x00', {}, 0x7}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f50e"], 0x72) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x761, 0x103382) r2 = memfd_create(&(0x7f00000012c0)='C\x13\xfe2\x95WD\xaa\xba^\x90\xff\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Em\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x04\x00\x93i|\xc0\x00\x04\x00\x00\x00 \x00\x00v\x0f\xef+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000d00)={0xd0}, 0x0, 0x0) 29.779758534s ago: executing program 1 (id=424): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 27.681892034s ago: executing program 1 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 24.140880783s ago: executing program 1 (id=442): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 23.741703506s ago: executing program 3 (id=443): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000500)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6}, @noop, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) sigaltstack(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x22, 0x2, 0x4) getpeername$inet(r5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x25, 0x0, "67d401136a26f0e201537ab118c4aab19a0ea93185087ed1128770039bdeda45de723fb17a76a2b9e404fff84d36c7e40044956b12258f3c61799f79b1c06b4a0433dae1ad3b8ea0d9fc8cd629ba56e3"}, 0xd8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12017002000000202312073f4000010203f6ac541376abd188c0200904000601030105068921018081012224060905810340008306070905020310007f00f3"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 19.723039333s ago: executing program 3 (id=449): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r0, 0x29, 0x18, 0x0, 0x0) 19.415866388s ago: executing program 3 (id=450): prlimit64(0x0, 0x0, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 16.697148019s ago: executing program 0 (id=455): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r2 = dup(r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 16.343937448s ago: executing program 3 (id=456): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)}], 0x1}, 0x4000041) recvmmsg$unix(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x1, 0x1, 0x0) 16.343740088s ago: executing program 0 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) r2 = dup2(r1, r1) pipe2(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$rose(r2, 0x11, 0x7, 0x0, &(0x7f0000000100)) 16.096046728s ago: executing program 3 (id=459): socket$qrtr(0x2a, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_io_uring_setup(0x6ab5, &(0x7f0000000080)={0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x8000480) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 13.230992502s ago: executing program 3 (id=464): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffe000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp6\x00') r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendfile(r1, r0, 0x0, 0x1) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x1) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x842839, 0x0, 0x0, 0x0, 0x0) sync() sync() r2 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007ffb) r4 = memfd_create(&(0x7f0000000440)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xadt\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x1dz\xd0\x11\xe3\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a\x82\xf0\xc72\xea\xb7Ww\xbe\xa8\x06\xa7\xdc\x06\x7f\x00\xc36\x96\xffZ\\A\x1dO\x03~Dk\xeb\x80\f\xed{u[\xbd\x9d^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00\x00\x00\x00\x00\x00\x00\x00\x00\x003F\xf1 \x17-\x9e4C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s>\xd7s\xef\xb3\x9f#\x15\xad\x83i\x1b\x9b{4)\xd8\xa2\xb8\x8f\xa22)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccU\xaf\\\xc4j,\xad[E\xb5*\xa1`\x7f\x93\xff\xb1G\xb9\xc4\xb8\xfbF\xa5BPF\x0fN\x8d\x1c\xdc\xdd^@\x1e\xf5\x7f ~\xbd\x1f\b\xe7\xe8\x0f\xa0|e\xba\x95a6\xf50\x14|\x19j\\\xe2\xca\f\x0fsd\x85>[\x04\x85I^\x80\x18m\x96:\x0f\xf4V\x8f\xa6l\xd4\"\xd7S\xac\x1e\x94\xc1\xb6x\xb8\xaa\x8c\x00\xfc\xf5', 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) fspick(r5, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x800) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r4, 0x0) ftruncate(r4, 0x6) write$UHID_DESTROY(r3, &(0x7f0000000180), 0x4) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x1000000201005) open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) sync() open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x10}) 12.055884608s ago: executing program 0 (id=465): mknod$loop(0x0, 0x0, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) creat(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000b40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002f40)={0x150, 0x0, r4, [{{}, {0x0, 0x0, 0x6, 0x0, '*-./$$'}}, {{}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x150) 11.142166793s ago: executing program 4 (id=466): prlimit64(0x0, 0x0, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 10.984784276s ago: executing program 0 (id=467): syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x81105a, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) unshare(0x22020600) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x400005ef) setns(r0, 0x0) 7.071279764s ago: executing program 4 (id=469): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)}], 0x1}, 0x4000041) recvmmsg$unix(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x1, 0x1, 0x0) 7.071100284s ago: executing program 4 (id=470): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'vlan1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'lo\x00', {}, 0x7}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f50e"], 0x72) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x761, 0x103382) r2 = memfd_create(&(0x7f00000012c0)='C\x13\xfe2\x95WD\xaa\xba^\x90\xff\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Em\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x04\x00\x93i|\xc0\x00\x04\x00\x00\x00 \x00\x00v\x0f\xef+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 4.731192825s ago: executing program 4 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) socket$unix(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}]}, 0x2c}}, 0x0) 3.539818452s ago: executing program 0 (id=475): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460006000000e0ff0000ffffff02000000d4"], 0x78) socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000d00)={0xd0}, 0x0, 0x0) 3.001162396s ago: executing program 2 (id=477): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xcc, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0x95, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f282828882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4c"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xcc}], 0x1}, 0x0) 1.910928985s ago: executing program 2 (id=479): r0 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 898.282777ms ago: executing program 2 (id=480): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)}], 0x1}, 0x4000041) recvmmsg$unix(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x1, 0x1, 0x0) 579.744543ms ago: executing program 2 (id=481): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_MTU={0x8, 0x4, 0x29000000}]}, 0x28}}, 0x0) 549.242036ms ago: executing program 4 (id=482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x40}}, 0x0) 354.330151ms ago: executing program 2 (id=483): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'vlan1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'lo\x00', {}, 0x7}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f50e"], 0x72) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x761, 0x103382) r2 = memfd_create(&(0x7f00000012c0)='C\x13\xfe2\x95WD\xaa\xba^\x90\xff\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Em\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x04\x00\x93i|\xc0\x00\x04\x00\x00\x00 \x00\x00v\x0f\xef+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 0s ago: executing program 2 (id=485): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460006000000e0ff0000ffffff02000000d4"], 0x78) socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000d00)={0xd0}, 0x0, 0x0) kernel console output (not intermixed with test programs): 202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 138.663867][ T4579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.690730][ T4579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.720159][ T4579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.728810][ T4579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.781087][ T3599] hid (null): invalid report_size 53675 [ 138.797606][ T3599] hid (null): unknown global tag 0xd [ 138.828546][ T3599] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 138.857823][ T3599] hid-generic 0003:0158:0100.0003: unexpected long global item [ 138.880483][ T3599] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 138.985333][ T4276] usb 1-1: USB disconnect, device number 9 [ 139.187812][ T4591] loop1: detected capacity change from 0 to 32768 [ 139.207337][ T4600] device batadv0 entered promiscuous mode [ 139.403874][ T4594] loop3: detected capacity change from 0 to 32768 [ 139.439607][ T4591] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.469711][ T4591] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 139.469740][ T4594] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.266 (4594) [ 139.498875][ T4591] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 139.554182][ T4594] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 139.560077][ T4591] BTRFS info (device loop1): trying to use backup root at mount time [ 139.609852][ T4591] BTRFS info (device loop1): setting nodatasum [ 139.616193][ T4591] BTRFS info (device loop1): force zlib compression, level 3 [ 139.624222][ T4594] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 139.664980][ T4591] BTRFS info (device loop1): turning on flush-on-commit [ 139.672789][ T4594] BTRFS info (device loop3): using free space tree [ 139.699631][ T4591] BTRFS info (device loop1): enabling disk space caching [ 139.723137][ T4591] BTRFS error (device loop1): cannot disable free space tree [ 139.751772][ T4591] BTRFS error (device loop1): open_ctree failed [ 140.024972][ T4594] BTRFS info (device loop3): enabling ssd optimizations [ 140.407700][ T3553] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 141.075239][ T4646] loop4: detected capacity change from 0 to 128 [ 141.231771][ T4639] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 141.322186][ T4607] loop2: detected capacity change from 0 to 40427 [ 141.591796][ T4607] F2FS-fs (loop2): invalid crc value [ 141.660124][ T4639] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 141.712787][ T4639] usb 2-1: config 0 has no interface number 0 [ 141.796436][ T4607] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.840458][ T4639] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 142.119765][ T4639] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 142.159662][ T4639] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 142.197013][ T4639] usb 2-1: Product: syz [ 142.215362][ T4639] usb 2-1: SerialNumber: syz [ 142.241866][ T4639] usb 2-1: config 0 descriptor?? [ 142.248246][ T4607] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 142.303598][ T4639] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 142.579397][ T3599] usb 2-1: USB disconnect, device number 6 [ 142.997056][ T4650] loop3: detected capacity change from 0 to 40427 [ 143.120340][ T4665] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000401) [ 143.128287][ T4665] FAT-fs (loop4): Filesystem has been set read-only [ 143.293635][ T4650] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.707194][ T4650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.835564][ T3553] syz-executor: attempt to access beyond end of device [ 143.835564][ T3553] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 143.859857][ T4637] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.112224][ T4676] binder: transaction release 93 bad handle 1, ret = -22 [ 144.119761][ T4637] usb 2-1: Using ep0 maxpacket: 16 [ 144.259896][ T4637] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 144.289934][ T4637] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 144.319601][ T4637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.359198][ T4637] usb 2-1: config 0 descriptor?? [ 144.638282][ T4680] netlink: 1328 bytes leftover after parsing attributes in process `syz.3.284'. [ 144.652900][ T4669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.281'. [ 144.692321][ T27] audit: type=1326 audit(1720244448.672:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 144.750862][ T27] audit: type=1326 audit(1720244448.672:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 144.779134][ T4674] loop4: detected capacity change from 0 to 32768 [ 144.819401][ T4674] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.283 (4674) [ 144.843100][ T27] audit: type=1326 audit(1720244448.672:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 144.924518][ T4674] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 144.928644][ T27] audit: type=1326 audit(1720244448.672:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 144.967075][ T4674] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 145.010943][ T4674] BTRFS info (device loop4): using free space tree [ 145.027345][ T27] audit: type=1326 audit(1720244448.672:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 145.059899][ T27] audit: type=1326 audit(1720244448.672:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 145.086679][ T27] audit: type=1326 audit(1720244448.672:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 145.109467][ T27] audit: type=1326 audit(1720244448.672:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 145.138150][ T4669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.148752][ T4669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.268989][ T4669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.291886][ T4669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.304473][ T27] audit: type=1326 audit(1720244448.672:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 145.350282][ T27] audit: type=1326 audit(1720244448.672:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 145.374557][ T4637] hid (null): invalid report_size 53675 [ 145.381754][ T4637] hid (null): unknown global tag 0xd [ 145.390367][ T4637] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 145.398772][ T4637] hid-generic 0003:0158:0100.0004: unexpected long global item [ 145.408850][ T4637] hid-generic: probe of 0003:0158:0100.0004 failed with error -22 [ 145.595927][ T3599] usb 2-1: USB disconnect, device number 7 [ 145.884769][ T4674] BTRFS info (device loop4): enabling ssd optimizations [ 146.166533][ T3738] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 147.121177][ T4718] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 147.166525][ T4708] loop3: detected capacity change from 0 to 32768 [ 147.415193][ T4708] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.286 (4708) [ 147.479825][ T4718] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 147.661515][ T4718] usb 5-1: config 0 has no interface number 0 [ 147.744315][ T4718] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 147.814851][ T4708] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.867035][ T4708] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 147.890030][ T4718] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 147.919815][ T4708] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 147.930945][ T4708] BTRFS info (device loop3): trying to use backup root at mount time [ 147.939069][ T4708] BTRFS info (device loop3): setting nodatasum [ 147.945306][ T4708] BTRFS info (device loop3): force zlib compression, level 3 [ 147.953652][ T4708] BTRFS info (device loop3): turning on flush-on-commit [ 147.960668][ T4708] BTRFS info (device loop3): enabling disk space caching [ 147.967740][ T4708] BTRFS error (device loop3): cannot disable free space tree [ 147.975516][ T4708] BTRFS error (device loop3): open_ctree failed [ 148.013153][ T4718] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 148.053639][ T4718] usb 5-1: Product: syz [ 148.063754][ T4718] usb 5-1: SerialNumber: syz [ 148.081894][ T4718] usb 5-1: config 0 descriptor?? [ 148.132250][ T4718] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 148.329791][ T4743] loop3: detected capacity change from 32768 to 0 [ 148.517856][ T4718] usb 5-1: USB disconnect, device number 7 [ 149.717470][ T4759] netlink: 1328 bytes leftover after parsing attributes in process `syz.4.298'. [ 149.786515][ T4737] loop0: detected capacity change from 0 to 40427 [ 149.852249][ T4737] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.953881][ T4737] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.042676][ T3551] syz-executor: attempt to access beyond end of device [ 150.042676][ T3551] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 150.071253][ T4279] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.319716][ T4279] usb 3-1: Using ep0 maxpacket: 16 [ 150.442512][ T4279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 150.509777][ T4773] binder_alloc: 4770: binder_alloc_buf, no vma [ 150.522258][ T4279] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 150.574056][ T4279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.860829][ T4279] usb 3-1: config 0 descriptor?? [ 151.239161][ T4762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 151.301762][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 151.301779][ T27] audit: type=1326 audit(1720244455.282:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 151.367611][ T27] audit: type=1326 audit(1720244455.282:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 151.396692][ T27] audit: type=1326 audit(1720244455.282:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 151.431689][ T27] audit: type=1326 audit(1720244455.282:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 151.534698][ T27] audit: type=1326 audit(1720244455.282:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 151.600480][ T27] audit: type=1326 audit(1720244455.282:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 151.708272][ T27] audit: type=1326 audit(1720244455.282:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 151.986764][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.079849][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.210792][ T27] audit: type=1326 audit(1720244455.282:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 152.243493][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.286467][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.326101][ T27] audit: type=1326 audit(1720244455.282:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 152.351545][ T4279] hid (null): invalid report_size 53675 [ 152.358629][ T4279] hid (null): unknown global tag 0xd [ 152.391307][ T27] audit: type=1326 audit(1720244455.282:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4761 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 152.473305][ T4279] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 152.482810][ T4279] hid-generic 0003:0158:0100.0005: unexpected long global item [ 152.496210][ T4279] hid-generic: probe of 0003:0158:0100.0005 failed with error -22 [ 152.584043][ T3599] usb 3-1: USB disconnect, device number 7 [ 152.719707][ T4635] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 153.290591][ T4635] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 153.315760][ T4635] usb 4-1: config 0 has no interface number 0 [ 153.349171][ T4635] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 153.730353][ T4635] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 153.833995][ T4635] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 153.982380][ T4635] usb 4-1: Product: syz [ 154.057305][ T4635] usb 4-1: SerialNumber: syz [ 154.230787][ T4635] usb 4-1: config 0 descriptor?? [ 154.312375][ T4635] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 154.762999][ T4823] binder_alloc: 4816: binder_alloc_buf, no vma [ 154.949835][ T4718] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.219735][ T4718] usb 3-1: Using ep0 maxpacket: 8 [ 155.288126][ T3599] usb 4-1: USB disconnect, device number 9 [ 155.349965][ T4718] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 155.379789][ T4718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.428534][ T4718] usb 3-1: config 0 descriptor?? [ 155.670610][ T4718] hso 3-1:0.0: Can't find BULK IN endpoint [ 156.310953][ T4809] loop0: detected capacity change from 0 to 40427 [ 156.372464][ T4718] usb 3-1: USB disconnect, device number 8 [ 156.408550][ T4809] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.573990][ T4809] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.624554][ T3551] syz-executor: attempt to access beyond end of device [ 156.624554][ T3551] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 156.909623][ T3599] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.241717][ T4855] binder_alloc: 4852: binder_alloc_buf, no vma [ 157.329630][ T3599] usb 2-1: Using ep0 maxpacket: 16 [ 157.450337][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 157.851013][ T3599] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 157.909637][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.981032][ T3599] usb 2-1: config 0 descriptor?? [ 158.229413][ T4837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.321'. [ 158.259849][ T4718] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 158.479258][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 158.479292][ T27] audit: type=1326 audit(1720244462.452:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 158.630399][ T4718] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 158.671094][ T4718] usb 3-1: config 0 has no interface number 0 [ 158.776896][ T4718] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 158.859704][ T27] audit: type=1326 audit(1720244462.502:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 158.895117][ T4867] mmap: syz.0.332 (4867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.925064][ T4846] loop3: detected capacity change from 0 to 32768 [ 158.968174][ T4846] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.326 (4846) [ 158.991730][ T27] audit: type=1326 audit(1720244462.512:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 159.020455][ T4718] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 159.024965][ T27] audit: type=1326 audit(1720244462.532:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 159.057329][ T4846] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.069973][ T4718] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 159.074374][ T4846] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 159.088412][ T4846] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 159.108144][ T4718] usb 3-1: Product: syz [ 159.129055][ T27] audit: type=1326 audit(1720244462.532:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 159.129676][ T4718] usb 3-1: SerialNumber: syz [ 159.161805][ T4846] BTRFS info (device loop3): trying to use backup root at mount time [ 159.195123][ T4846] BTRFS info (device loop3): setting nodatasum [ 159.196500][ T4718] usb 3-1: config 0 descriptor?? [ 159.207614][ T4846] BTRFS info (device loop3): force zlib compression, level 3 [ 159.215968][ T27] audit: type=1326 audit(1720244462.542:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 159.243532][ T27] audit: type=1326 audit(1720244462.552:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 159.268999][ T4718] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 159.278522][ T27] audit: type=1326 audit(1720244462.562:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 159.285914][ T4846] BTRFS info (device loop3): turning on flush-on-commit [ 159.339308][ T27] audit: type=1326 audit(1720244462.562:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 159.342625][ T4837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.370173][ T27] audit: type=1326 audit(1720244462.572:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0865375bd9 code=0x7ffc0000 [ 159.372438][ T4846] BTRFS info (device loop3): enabling disk space caching [ 159.399779][ T4837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.424272][ T4837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.430052][ T4846] BTRFS error (device loop3): cannot disable free space tree [ 159.443463][ T4837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.459243][ T4846] BTRFS error (device loop3): open_ctree failed [ 159.476433][ T3599] hid (null): invalid report_size 53675 [ 159.484970][ T3599] hid (null): unknown global tag 0xd [ 159.512550][ T3599] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 159.529866][ T3599] hid-generic 0003:0158:0100.0006: unexpected long global item [ 159.538158][ T3599] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 159.604391][ T4635] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.717477][ T4636] usb 3-1: USB disconnect, device number 9 [ 159.745407][ T3598] usb 2-1: USB disconnect, device number 8 [ 159.803374][ T4882] loop3: detected capacity change from 0 to 1024 [ 159.879913][ T4635] usb 1-1: Using ep0 maxpacket: 8 [ 160.040145][ T4635] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 160.157722][ T4635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.456189][ T4635] usb 1-1: config 0 descriptor?? [ 160.550958][ T4635] hso 1-1:0.0: Can't find BULK IN endpoint [ 160.725257][ T4068] hfsplus: b-tree write err: -5, ino 4 [ 160.763987][ T4635] usb 1-1: USB disconnect, device number 10 [ 163.248404][ T4886] loop1: detected capacity change from 0 to 40427 [ 163.445153][ T4886] F2FS-fs (loop1): Found nat_bits in checkpoint [ 163.685438][ T4636] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.990197][ T4636] usb 1-1: Using ep0 maxpacket: 16 [ 164.131068][ T4636] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 164.357896][ T4636] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 164.475997][ T4636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.533717][ T4636] usb 1-1: config 0 descriptor?? [ 164.604535][ T3567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.617889][ T3567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.626649][ T3567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.676395][ T3567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.690176][ T3567] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 164.701838][ T3567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.776084][ T4919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'. [ 164.788709][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 164.788725][ T27] audit: type=1326 audit(1720244468.762:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 164.888894][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.889673][ T27] audit: type=1326 audit(1720244468.812:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 164.986023][ T27] audit: type=1326 audit(1720244468.812:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 165.065687][ T27] audit: type=1326 audit(1720244468.812:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 165.089050][ T27] audit: type=1326 audit(1720244468.812:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 165.135259][ T27] audit: type=1326 audit(1720244468.812:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 165.168462][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.249902][ T27] audit: type=1326 audit(1720244468.812:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 165.253817][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.331960][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.348471][ T27] audit: type=1326 audit(1720244468.812:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 165.409074][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.526099][ T27] audit: type=1326 audit(1720244468.812:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 165.568857][ T27] audit: type=1326 audit(1720244468.812:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.0.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 165.592499][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.609331][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.658255][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.703549][ T4636] hid (null): invalid report_size 53675 [ 165.712652][ T4931] loop2: detected capacity change from 0 to 32768 [ 165.717900][ T4636] hid (null): unknown global tag 0xd [ 165.806748][ T4931] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.351 (4931) [ 166.451991][ T4636] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 166.470450][ T4636] hid-generic 0003:0158:0100.0007: unexpected long global item [ 166.478973][ T4636] hid-generic: probe of 0003:0158:0100.0007 failed with error -22 [ 166.527426][ T4636] usb 1-1: USB disconnect, device number 11 [ 166.562713][ T4932] chnl_net:caif_netlink_parms(): no params data found [ 166.592116][ T4931] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.639675][ T4931] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 166.669237][ T4931] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 166.727057][ T4931] BTRFS info (device loop2): trying to use backup root at mount time [ 166.730067][ T3559] Bluetooth: hci2: command tx timeout [ 166.754931][ T4931] BTRFS info (device loop2): setting nodatasum [ 166.761798][ T4931] BTRFS info (device loop2): force zlib compression, level 3 [ 166.770553][ T4931] BTRFS info (device loop2): turning on flush-on-commit [ 166.779026][ T4931] BTRFS info (device loop2): enabling disk space caching [ 166.786509][ T4931] BTRFS error (device loop2): cannot disable free space tree [ 166.797740][ T4931] BTRFS error (device loop2): open_ctree failed [ 168.048710][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.061326][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.174176][ T4932] device bridge_slave_0 entered promiscuous mode [ 168.259016][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.276693][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.308234][ T4932] device bridge_slave_1 entered promiscuous mode [ 168.503670][ T4932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.581879][ T4932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.609858][ T4718] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.810816][ T3559] Bluetooth: hci2: command tx timeout [ 168.879788][ T4718] usb 3-1: Using ep0 maxpacket: 16 [ 169.000624][ T4718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 169.079698][ T4718] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 169.136124][ T4718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.230970][ T4718] usb 3-1: config 0 descriptor?? [ 169.322070][ T4932] team0: Port device team_slave_0 added [ 169.374221][ T4963] loop3: detected capacity change from 0 to 40427 [ 169.476918][ T4999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.367'. [ 169.522213][ T4932] team0: Port device team_slave_1 added [ 169.571431][ T4963] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.640154][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.647185][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.721922][ T4932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.880593][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.892379][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.911578][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 169.911597][ T27] audit: type=1326 audit(1720244473.892:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 169.948053][ T4932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.961478][ T4999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.990149][ T4999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.011249][ T4999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.025687][ T27] audit: type=1326 audit(1720244473.892:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 170.070066][ T4999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.108022][ T27] audit: type=1326 audit(1720244473.942:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94e5f74610 code=0x7ffc0000 [ 170.132556][ T4718] hid (null): invalid report_size 53675 [ 170.142166][ T4718] hid (null): unknown global tag 0xd [ 170.164104][ T4718] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 170.215267][ T4718] hid-generic 0003:0158:0100.0008: unexpected long global item [ 170.233512][ T27] audit: type=1326 audit(1720244473.942:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5f757db code=0x7ffc0000 [ 170.260331][ T4718] hid-generic: probe of 0003:0158:0100.0008 failed with error -22 [ 170.311142][ T27] audit: type=1326 audit(1720244473.942:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5f757db code=0x7ffc0000 [ 170.350215][ T27] audit: type=1326 audit(1720244473.992:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 170.378599][ T3598] usb 3-1: USB disconnect, device number 10 [ 170.473134][ T27] audit: type=1326 audit(1720244473.992:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94e5f74610 code=0x7ffc0000 [ 170.526724][ T27] audit: type=1326 audit(1720244473.992:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5f757db code=0x7ffc0000 [ 170.552758][ T4932] device hsr_slave_0 entered promiscuous mode [ 170.599216][ T27] audit: type=1326 audit(1720244473.992:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5f757db code=0x7ffc0000 [ 170.622163][ T4932] device hsr_slave_1 entered promiscuous mode [ 170.629107][ T4932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.653712][ T4932] Cannot create hsr debugfs directory [ 170.695118][ T27] audit: type=1326 audit(1720244474.082:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 170.751659][ T62] device hsr_slave_0 left promiscuous mode [ 170.764187][ T62] device hsr_slave_1 left promiscuous mode [ 170.784814][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.883758][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.892231][ T3567] Bluetooth: hci2: command tx timeout [ 170.970823][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.000539][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.070401][ T62] device bridge_slave_1 left promiscuous mode [ 171.077659][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.133710][ T62] device bridge_slave_0 left promiscuous mode [ 171.145984][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.377081][ T62] device veth1_macvtap left promiscuous mode [ 171.419864][ T62] device veth0_macvtap left promiscuous mode [ 171.530630][ T62] device veth1_vlan left promiscuous mode [ 171.603040][ T62] device veth0_vlan left promiscuous mode [ 172.133325][ T5023] loop0: detected capacity change from 0 to 32768 [ 172.162836][ T5023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.371 (5023) [ 172.214407][ T5023] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.228816][ T5023] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 172.238871][ T5023] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 172.256533][ T5023] BTRFS info (device loop0): trying to use backup root at mount time [ 172.271258][ T5023] BTRFS info (device loop0): setting nodatasum [ 172.277741][ T5023] BTRFS info (device loop0): force zlib compression, level 3 [ 172.285762][ T5023] BTRFS info (device loop0): turning on flush-on-commit [ 172.293412][ T5023] BTRFS info (device loop0): enabling disk space caching [ 172.301056][ T5023] BTRFS error (device loop0): cannot disable free space tree [ 172.309291][ T5023] BTRFS error (device loop0): open_ctree failed [ 172.336908][ T3545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (3545) [ 172.974333][ T3567] Bluetooth: hci2: command tx timeout [ 173.047782][ T5053] loop0: detected capacity change from 0 to 40427 [ 173.096719][ T5053] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.166958][ T5053] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.216938][ T3551] syz-executor: attempt to access beyond end of device [ 173.216938][ T3551] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 173.233234][ T62] team0 (unregistering): Port device team_slave_1 removed [ 173.291922][ T62] team0 (unregistering): Port device team_slave_0 removed [ 173.337447][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.396256][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.885974][ T62] bond0 (unregistering): Released all slaves [ 174.939817][ T3598] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 175.429617][ T3598] usb 3-1: Using ep0 maxpacket: 16 [ 176.404696][ T4932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.450630][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 176.462505][ T3598] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 176.472449][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.490559][ T3598] usb 3-1: config 0 descriptor?? [ 176.498300][ T4932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.519807][ T4932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.547634][ T4932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.746625][ T5072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.383'. [ 176.775901][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 176.775917][ T27] audit: type=1326 audit(1720244480.752:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 176.795403][ T4932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.894782][ T27] audit: type=1326 audit(1720244480.792:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 176.971808][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.985180][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.996123][ T27] audit: type=1326 audit(1720244480.802:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 177.012270][ T4932] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.080439][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.096395][ T27] audit: type=1326 audit(1720244480.802:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 177.212029][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.213518][ T27] audit: type=1326 audit(1720244480.802:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 177.231150][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.259930][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.267255][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.313482][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.338923][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.467351][ T5072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.492687][ T27] audit: type=1326 audit(1720244480.802:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 177.503032][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.530740][ T5072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.547683][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.566750][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.573962][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.601217][ T3598] hid (null): invalid report_size 53675 [ 177.610536][ T3598] hid (null): unknown global tag 0xd [ 177.630995][ T27] audit: type=1326 audit(1720244480.802:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 177.636113][ T3598] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 177.662559][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.683504][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.710785][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.734048][ T3598] hid-generic 0003:0158:0100.0009: unexpected long global item [ 177.747067][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.749369][ T27] audit: type=1326 audit(1720244480.802:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 177.770404][ T3598] hid-generic: probe of 0003:0158:0100.0009 failed with error -22 [ 177.828601][ T27] audit: type=1326 audit(1720244480.802:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 177.914527][ T27] audit: type=1326 audit(1720244480.802:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e5f75bd9 code=0x7ffc0000 [ 177.973830][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.984859][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.995431][ T3598] usb 3-1: USB disconnect, device number 11 [ 178.007796][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.017616][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.026395][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.045994][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.067003][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.087134][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.363949][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.488906][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.712980][ T4932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.610027][ T3595] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 181.892218][ T3595] usb 4-1: Using ep0 maxpacket: 16 [ 182.010036][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 182.049640][ T3595] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 182.151506][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.181693][ T3595] usb 4-1: config 0 descriptor?? [ 182.465766][ T5170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.405'. [ 182.491889][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.512442][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.529058][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 182.529074][ T27] audit: type=1326 audit(1720244486.502:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 182.597205][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.614758][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.618214][ T27] audit: type=1326 audit(1720244486.542:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 182.637741][ T4932] device veth0_vlan entered promiscuous mode [ 182.677257][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.690760][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.698466][ T27] audit: type=1326 audit(1720244486.542:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 182.715906][ T4932] device veth1_vlan entered promiscuous mode [ 182.753878][ T27] audit: type=1326 audit(1720244486.542:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 182.785524][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.797363][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.815763][ T27] audit: type=1326 audit(1720244486.542:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 182.818665][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.852361][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.869765][ T4932] device veth0_macvtap entered promiscuous mode [ 182.884932][ T27] audit: type=1326 audit(1720244486.542:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 182.898442][ T4932] device veth1_macvtap entered promiscuous mode [ 182.934323][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.945665][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.958562][ T5170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.964733][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.987628][ T27] audit: type=1326 audit(1720244486.542:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 182.999901][ T5170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.034993][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.051090][ T5170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.059664][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.236766][ T5170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.257435][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.283088][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.298491][ T3595] hid (null): invalid report_size 53675 [ 183.319953][ T27] audit: type=1326 audit(1720244486.542:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 183.324245][ T3595] hid (null): unknown global tag 0xd [ 183.566320][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.857817][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.930051][ T3595] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 183.952957][ T27] audit: type=1326 audit(1720244486.542:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 183.978999][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.000826][ T3595] hid-generic 0003:0158:0100.000A: unexpected long global item [ 184.008963][ T3595] hid-generic: probe of 0003:0158:0100.000A failed with error -22 [ 184.089683][ T27] audit: type=1326 audit(1720244486.542:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.3.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 184.116647][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.126613][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.137110][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.147122][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.157733][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.173001][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.183827][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.196824][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.212016][ T4932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.221279][ T4932] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.226286][ T3595] usb 4-1: USB disconnect, device number 10 [ 184.230619][ T4932] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.252496][ T4932] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.341020][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.360418][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.465673][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.475432][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.486291][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.495631][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.305889][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.339582][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.374482][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.628538][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.737741][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.021041][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.090054][ T3559] Bluetooth: hci4: command 0x0406 tx timeout [ 186.169963][ T3566] Bluetooth: hci3: command 0x0406 tx timeout [ 186.176157][ T3566] Bluetooth: hci0: command 0x0406 tx timeout [ 186.182517][ T3569] Bluetooth: hci1: command 0x0406 tx timeout [ 186.689757][ T3596] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 186.916095][ T5220] loop0: detected capacity change from 0 to 32768 [ 186.941259][ T5220] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.960494][ T5220] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 186.982640][ T5220] BTRFS info (device loop0): disabling free space tree [ 187.008304][ T5220] BTRFS info (device loop0): setting nodatacow, compression disabled [ 187.040262][ T5220] BTRFS info (device loop0): enabling disk space caching [ 187.059814][ T3596] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 187.074407][ T3596] usb 5-1: config 0 has no interface number 0 [ 187.082153][ T5220] BTRFS info (device loop0): use no compression [ 187.101414][ T3596] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 187.113310][ T5220] BTRFS info (device loop0): disabling disk space caching [ 187.137531][ T5220] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 187.159824][ T5220] BTRFS info (device loop0): trying to use backup root at mount time [ 187.189947][ T5220] BTRFS error (device loop0): cannot disable free space tree [ 187.240046][ T5220] BTRFS error (device loop0): open_ctree failed [ 187.269850][ T3596] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 187.309160][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 187.346775][ T3596] usb 5-1: Product: syz [ 187.377798][ T3596] usb 5-1: SerialNumber: syz [ 187.404734][ T3596] usb 5-1: config 0 descriptor?? [ 187.465008][ T3596] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 187.834810][ T4637] usb 5-1: USB disconnect, device number 8 [ 187.989654][ T3595] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 188.019605][ T3598] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.239767][ T3595] usb 3-1: Using ep0 maxpacket: 8 [ 188.269696][ T3598] usb 1-1: Using ep0 maxpacket: 16 [ 188.359943][ T3595] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 188.399692][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.400006][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 188.437730][ T3595] usb 3-1: config 0 descriptor?? [ 188.443095][ T3598] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 188.488699][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.500765][ T3595] hso 3-1:0.0: Can't find BULK IN endpoint [ 188.555762][ T3598] usb 1-1: config 0 descriptor?? [ 188.623577][ T5269] loop1: detected capacity change from 0 to 40427 [ 188.641737][ T5269] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 188.661674][ T5269] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 188.695907][ T4718] usb 3-1: USB disconnect, device number 12 [ 188.821974][ T5269] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.856550][ T5264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'. [ 188.923828][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 188.923849][ T27] audit: type=1326 audit(1720244492.902:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 189.336826][ T5269] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 189.376656][ T27] audit: type=1326 audit(1720244492.932:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 189.509182][ T5269] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.636917][ T27] audit: type=1326 audit(1720244492.942:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 189.799583][ T27] audit: type=1326 audit(1720244492.942:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 189.883850][ T27] audit: type=1326 audit(1720244492.942:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 189.924451][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.941119][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.949487][ T27] audit: type=1326 audit(1720244492.942:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 189.963152][ T3552] syz-executor: attempt to access beyond end of device [ 189.963152][ T3552] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 189.988437][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.028626][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.047458][ T27] audit: type=1326 audit(1720244492.942:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 190.107359][ T3598] hid (null): invalid report_size 53675 [ 190.126617][ T3598] hid (null): unknown global tag 0xd [ 190.167027][ T3598] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 190.174606][ T27] audit: type=1326 audit(1720244492.942:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 190.197716][ T3598] hid-generic 0003:0158:0100.000B: unexpected long global item [ 190.217707][ T3598] hid-generic: probe of 0003:0158:0100.000B failed with error -22 [ 190.280457][ T27] audit: type=1326 audit(1720244492.942:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 190.318728][ T3598] usb 1-1: USB disconnect, device number 12 [ 190.365557][ T27] audit: type=1326 audit(1720244492.942:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f3236775bd9 code=0x7ffc0000 [ 190.846973][ T5315] loop4: detected capacity change from 0 to 32768 [ 190.883446][ T5315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.431 (5315) [ 190.951570][ T5315] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.016520][ T5315] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 191.043467][ T5315] BTRFS info (device loop4): disabling free space tree [ 191.072538][ T5315] BTRFS info (device loop4): setting nodatacow, compression disabled [ 191.083711][ T5309] loop2: detected capacity change from 0 to 40427 [ 191.099691][ T5315] BTRFS info (device loop4): enabling disk space caching [ 191.127380][ T5315] BTRFS info (device loop4): use no compression [ 191.154308][ T5315] BTRFS info (device loop4): disabling disk space caching [ 191.192332][ T5315] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 191.214120][ T5309] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.220462][ T5315] BTRFS info (device loop4): trying to use backup root at mount time [ 191.220498][ T5315] BTRFS error (device loop4): cannot disable free space tree [ 191.236559][ T5315] BTRFS error (device loop4): open_ctree failed [ 191.888386][ T5309] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 192.629689][ T3598] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 192.703645][ T3554] syz-executor: attempt to access beyond end of device [ 192.703645][ T3554] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 193.030049][ T3598] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 193.047974][ T3598] usb 5-1: config 0 has no interface number 0 [ 193.074627][ T3598] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 193.240351][ T3598] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 193.274628][ T3598] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 193.401891][ T3598] usb 5-1: Product: syz [ 193.478939][ T3598] usb 5-1: SerialNumber: syz [ 193.661436][ T3598] usb 5-1: config 0 descriptor?? [ 193.732782][ T3598] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 193.939628][ T4718] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.093873][ T3596] usb 5-1: USB disconnect, device number 9 [ 194.179596][ T4718] usb 1-1: Using ep0 maxpacket: 8 [ 194.240632][ T5357] loop1: detected capacity change from 0 to 40427 [ 194.258726][ T5357] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 194.261875][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.274862][ T5357] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 194.279643][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.289697][ T4636] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 194.299941][ T4718] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 194.320435][ T4718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.335354][ T4718] usb 1-1: config 0 descriptor?? [ 194.343466][ T5357] F2FS-fs (loop1): Found nat_bits in checkpoint [ 194.380660][ T4718] hso 1-1:0.0: Can't find BULK IN endpoint [ 194.433027][ T5357] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 194.452023][ T5357] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 194.541766][ T4636] usb 4-1: Using ep0 maxpacket: 16 [ 194.682371][ T3598] usb 1-1: USB disconnect, device number 13 [ 194.770213][ T4636] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 194.808111][ T4636] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 194.883310][ T4636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.943229][ T4636] usb 4-1: config 0 descriptor?? [ 195.184068][ T5361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 195.239285][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 195.239302][ T27] audit: type=1326 audit(1720244499.212:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 195.425383][ T27] audit: type=1326 audit(1720244499.262:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 195.679519][ C0] sched: RT throttling activated [ 195.690588][ T27] audit: type=1326 audit(1720244499.262:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 195.713922][ T27] audit: type=1326 audit(1720244499.262:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 195.761197][ T27] audit: type=1326 audit(1720244499.262:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 196.632281][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.681483][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.715231][ T27] audit: type=1326 audit(1720244499.262:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 196.715431][ T5385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 196.760668][ T27] audit: type=1326 audit(1720244499.262:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 196.843140][ T27] audit: type=1326 audit(1720244499.262:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 196.867582][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.896847][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.950927][ T4636] hid (null): invalid report_size 53675 [ 196.957319][ T4636] hid (null): unknown global tag 0xd [ 196.999187][ T27] audit: type=1326 audit(1720244499.262:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 197.047446][ T4636] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 197.075370][ T4636] hid-generic 0003:0158:0100.000C: unexpected long global item [ 197.112399][ T4636] hid-generic: probe of 0003:0158:0100.000C failed with error -22 [ 197.134027][ T27] audit: type=1326 audit(1720244499.262:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5360 comm="syz.3.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cc0375bd9 code=0x7ffc0000 [ 197.203100][ T4636] usb 4-1: USB disconnect, device number 11 [ 197.440877][ T5388] device batadv0 entered promiscuous mode [ 197.665235][ T5377] loop2: detected capacity change from 0 to 32768 [ 197.717264][ T5377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.446 (5377) [ 197.793407][ T5377] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.860321][ T5377] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 197.915340][ T5377] BTRFS info (device loop2): disabling free space tree [ 197.933425][ T5377] BTRFS info (device loop2): setting nodatacow, compression disabled [ 197.986735][ T5377] BTRFS info (device loop2): enabling disk space caching [ 198.045042][ T5377] BTRFS info (device loop2): use no compression [ 198.084224][ T5377] BTRFS info (device loop2): disabling disk space caching [ 198.122115][ T5377] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 198.187282][ T5377] BTRFS info (device loop2): trying to use backup root at mount time [ 198.266968][ T5377] BTRFS error (device loop2): cannot disable free space tree [ 198.315158][ T5377] BTRFS error (device loop2): open_ctree failed [ 199.811806][ T5357] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 199.824528][ T5357] syz.1.442: attempt to access beyond end of device [ 199.824528][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 199.840635][ T5357] syz.1.442: attempt to access beyond end of device [ 199.840635][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.857954][ T5357] syz.1.442: attempt to access beyond end of device [ 199.857954][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 199.873224][ T5357] syz.1.442: attempt to access beyond end of device [ 199.873224][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.891424][ T5357] syz.1.442: attempt to access beyond end of device [ 199.891424][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 199.906221][ T5357] syz.1.442: attempt to access beyond end of device [ 199.906221][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.922623][ T5357] syz.1.442: attempt to access beyond end of device [ 199.922623][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 199.937616][ T5357] syz.1.442: attempt to access beyond end of device [ 199.937616][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.954274][ T5357] syz.1.442: attempt to access beyond end of device [ 199.954274][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 199.968971][ T5357] syz.1.442: attempt to access beyond end of device [ 199.968971][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.831967][ T5357] bio_check_eod: 2200 callbacks suppressed [ 204.831989][ T5357] syz.1.442: attempt to access beyond end of device [ 204.831989][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.852524][ T5357] syz.1.442: attempt to access beyond end of device [ 204.852524][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.868778][ T5357] syz.1.442: attempt to access beyond end of device [ 204.868778][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.883510][ T5357] syz.1.442: attempt to access beyond end of device [ 204.883510][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.899840][ T5357] syz.1.442: attempt to access beyond end of device [ 204.899840][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.914628][ T5357] syz.1.442: attempt to access beyond end of device [ 204.914628][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.930934][ T5357] syz.1.442: attempt to access beyond end of device [ 204.930934][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.945700][ T5357] syz.1.442: attempt to access beyond end of device [ 204.945700][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.954434][ T3565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.962257][ T5357] syz.1.442: attempt to access beyond end of device [ 204.962257][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.969790][ T3565] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.981138][ T5357] syz.1.442: attempt to access beyond end of device [ 204.981138][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.990027][ T3565] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.020091][ T3565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.027855][ T3565] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 205.035388][ T3567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.666243][ T5431] loop2: detected capacity change from 0 to 32768 [ 205.940364][ T5431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.463 (5431) [ 206.324256][ T5437] chnl_net:caif_netlink_parms(): no params data found [ 206.927268][ T5453] ======================================================= [ 206.927268][ T5453] WARNING: The mand mount option has been deprecated and [ 206.927268][ T5453] and is ignored by this kernel. Remove the mand [ 206.927268][ T5453] option from the mount to silence this warning. [ 206.927268][ T5453] ======================================================= [ 207.151387][ T3566] Bluetooth: hci5: command tx timeout [ 209.217047][ T3567] Bluetooth: hci5: command tx timeout [ 209.840328][ T5357] bio_check_eod: 2563 callbacks suppressed [ 209.840468][ T5357] syz.1.442: attempt to access beyond end of device [ 209.840468][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 209.872148][ T5357] syz.1.442: attempt to access beyond end of device [ 209.872148][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 209.889786][ T5357] syz.1.442: attempt to access beyond end of device [ 209.889786][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 209.914477][ T5357] syz.1.442: attempt to access beyond end of device [ 209.914477][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 209.930729][ T5357] syz.1.442: attempt to access beyond end of device [ 209.930729][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 209.956878][ T5357] syz.1.442: attempt to access beyond end of device [ 209.956878][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 209.974376][ T5357] syz.1.442: attempt to access beyond end of device [ 209.974376][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.000729][ T5357] syz.1.442: attempt to access beyond end of device [ 210.000729][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.022246][ T5357] syz.1.442: attempt to access beyond end of device [ 210.022246][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.038681][ T5357] syz.1.442: attempt to access beyond end of device [ 210.038681][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.163609][ T5437] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.186342][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.249220][ T5437] device bridge_slave_0 entered promiscuous mode [ 210.342758][ T5437] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.380101][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.388453][ T5437] device bridge_slave_1 entered promiscuous mode [ 211.695926][ T3567] Bluetooth: hci5: command tx timeout [ 212.713645][ T5437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.921061][ T5437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.751629][ T5437] team0: Port device team_slave_0 added [ 213.869812][ T3566] Bluetooth: hci5: command tx timeout [ 213.941139][ T5437] team0: Port device team_slave_1 added [ 214.244114][ T3930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.323271][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.339704][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.466585][ T5437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.541442][ T3930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.851368][ T5357] bio_check_eod: 2453 callbacks suppressed [ 214.851389][ T5357] syz.1.442: attempt to access beyond end of device [ 214.851389][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 214.854981][ T5437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.858098][ T5357] syz.1.442: attempt to access beyond end of device [ 214.858098][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 214.895488][ T5357] syz.1.442: attempt to access beyond end of device [ 214.895488][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 214.912746][ T5357] syz.1.442: attempt to access beyond end of device [ 214.912746][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 214.938450][ T5357] syz.1.442: attempt to access beyond end of device [ 214.938450][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 214.955558][ T5357] syz.1.442: attempt to access beyond end of device [ 214.955558][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 214.985913][ T5357] syz.1.442: attempt to access beyond end of device [ 214.985913][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.003323][ T5357] syz.1.442: attempt to access beyond end of device [ 215.003323][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.026477][ T5357] syz.1.442: attempt to access beyond end of device [ 215.026477][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.044041][ T5357] syz.1.442: attempt to access beyond end of device [ 215.044041][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.703497][ T5437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.827244][ T5437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.506625][ T3566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.516839][ T3566] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.526355][ T3565] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.535136][ T3566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.544270][ T3565] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.551768][ T3566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.641334][ T3566] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.651814][ T3566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.660827][ T3565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.670001][ T3565] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.677719][ T3565] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.685696][ T3566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.881514][ T3930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.135216][ T3930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.279342][ T5437] device hsr_slave_0 entered promiscuous mode [ 217.338461][ T5437] device hsr_slave_1 entered promiscuous mode [ 217.392168][ T5437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.425508][ T5437] Cannot create hsr debugfs directory [ 218.692970][ T3567] Bluetooth: hci0: command tx timeout [ 218.939757][ T3567] Bluetooth: hci6: command tx timeout [ 219.026295][ T5502] loop4: detected capacity change from 0 to 40427 [ 219.159812][ T5502] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 219.167650][ T5502] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 219.247735][ T5437] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.308608][ T5502] F2FS-fs (loop4): Found nat_bits in checkpoint [ 219.471971][ T5437] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.580616][ T5502] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 219.587801][ T5502] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 219.774196][ T5437] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.860107][ T5357] bio_check_eod: 2480 callbacks suppressed [ 219.860138][ T5357] syz.1.442: attempt to access beyond end of device [ 219.860138][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 219.881010][ T5357] syz.1.442: attempt to access beyond end of device [ 219.881010][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.897152][ T5357] syz.1.442: attempt to access beyond end of device [ 219.897152][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 219.911992][ T5357] syz.1.442: attempt to access beyond end of device [ 219.911992][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.928294][ T5357] syz.1.442: attempt to access beyond end of device [ 219.928294][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 219.943967][ T5357] syz.1.442: attempt to access beyond end of device [ 219.943967][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.960309][ T5357] syz.1.442: attempt to access beyond end of device [ 219.960309][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 219.975094][ T5357] syz.1.442: attempt to access beyond end of device [ 219.975094][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.991404][ T5357] syz.1.442: attempt to access beyond end of device [ 219.991404][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.058169][ T5357] syz.1.442: attempt to access beyond end of device [ 220.058169][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 221.679546][ T3567] Bluetooth: hci0: command tx timeout [ 221.685054][ T3567] Bluetooth: hci6: command tx timeout [ 223.689583][ T3567] Bluetooth: hci0: command tx timeout [ 224.402841][ T5502] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 224.696624][ T3567] Bluetooth: hci6: command tx timeout [ 224.870447][ T5357] bio_check_eod: 2838 callbacks suppressed [ 224.870469][ T5357] syz.1.442: attempt to access beyond end of device [ 224.870469][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 224.871922][ T5502] syz.4.484: attempt to access beyond end of device [ 224.871922][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 224.877049][ T5357] syz.1.442: attempt to access beyond end of device [ 224.877049][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 224.891022][ T5502] syz.4.484: attempt to access beyond end of device [ 224.891022][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 224.907103][ T5357] syz.1.442: attempt to access beyond end of device [ 224.907103][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 224.920722][ T5502] syz.4.484: attempt to access beyond end of device [ 224.920722][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 224.932145][ T5357] syz.1.442: attempt to access beyond end of device [ 224.932145][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 224.946049][ T5502] syz.4.484: attempt to access beyond end of device [ 224.946049][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 224.962720][ T5357] syz.1.442: attempt to access beyond end of device [ 224.962720][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 224.976181][ T5502] syz.4.484: attempt to access beyond end of device [ 224.976181][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 226.681549][ T3567] Bluetooth: hci0: command tx timeout [ 226.711850][ T5437] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.692154][ T3567] Bluetooth: hci6: command tx timeout [ 229.879997][ T5502] bio_check_eod: 5195 callbacks suppressed [ 229.880020][ T5502] syz.4.484: attempt to access beyond end of device [ 229.880020][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.880287][ T5357] syz.1.442: attempt to access beyond end of device [ 229.880287][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.886635][ T5502] syz.4.484: attempt to access beyond end of device [ 229.886635][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 229.900567][ T5357] syz.1.442: attempt to access beyond end of device [ 229.900567][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 229.916528][ T5502] syz.4.484: attempt to access beyond end of device [ 229.916528][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.929964][ T5357] syz.1.442: attempt to access beyond end of device [ 229.929964][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.941991][ T5502] syz.4.484: attempt to access beyond end of device [ 229.941991][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 229.955120][ T5357] syz.1.442: attempt to access beyond end of device [ 229.955120][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 229.971050][ T5502] syz.4.484: attempt to access beyond end of device [ 229.971050][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.985237][ T5357] syz.1.442: attempt to access beyond end of device [ 229.985237][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.891510][ T5502] bio_check_eod: 5184 callbacks suppressed [ 234.891534][ T5502] syz.4.484: attempt to access beyond end of device [ 234.891534][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.892851][ T5357] syz.1.442: attempt to access beyond end of device [ 234.892851][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.898159][ T5502] syz.4.484: attempt to access beyond end of device [ 234.898159][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.912092][ T5357] syz.1.442: attempt to access beyond end of device [ 234.912092][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.928004][ T5502] syz.4.484: attempt to access beyond end of device [ 234.928004][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.941462][ T5357] syz.1.442: attempt to access beyond end of device [ 234.941462][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.952917][ T5502] syz.4.484: attempt to access beyond end of device [ 234.952917][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.966697][ T5357] syz.1.442: attempt to access beyond end of device [ 234.966697][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.982632][ T5502] syz.4.484: attempt to access beyond end of device [ 234.982632][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.996897][ T5357] syz.1.442: attempt to access beyond end of device [ 234.996897][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.901454][ T5357] bio_check_eod: 5213 callbacks suppressed [ 239.901476][ T5357] syz.1.442: attempt to access beyond end of device [ 239.901476][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.901803][ T5502] syz.4.484: attempt to access beyond end of device [ 239.901803][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.909326][ T5357] syz.1.442: attempt to access beyond end of device [ 239.909326][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.923034][ T5502] syz.4.484: attempt to access beyond end of device [ 239.923034][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.938123][ T5357] syz.1.442: attempt to access beyond end of device [ 239.938123][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.951440][ T5502] syz.4.484: attempt to access beyond end of device [ 239.951440][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.962874][ T5357] syz.1.442: attempt to access beyond end of device [ 239.962874][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.976716][ T5502] syz.4.484: attempt to access beyond end of device [ 239.976716][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.992730][ T5357] syz.1.442: attempt to access beyond end of device [ 239.992730][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.006078][ T5502] syz.4.484: attempt to access beyond end of device [ 240.006078][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.909773][ T5357] bio_check_eod: 5174 callbacks suppressed [ 244.909795][ T5357] syz.1.442: attempt to access beyond end of device [ 244.909795][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.911904][ T5502] syz.4.484: attempt to access beyond end of device [ 244.911904][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.916374][ T5357] syz.1.442: attempt to access beyond end of device [ 244.916374][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 244.931119][ T5502] syz.4.484: attempt to access beyond end of device [ 244.931119][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 244.947044][ T5357] syz.1.442: attempt to access beyond end of device [ 244.947044][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.960623][ T5502] syz.4.484: attempt to access beyond end of device [ 244.960623][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.971857][ T5357] syz.1.442: attempt to access beyond end of device [ 244.971857][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 244.985649][ T5502] syz.4.484: attempt to access beyond end of device [ 244.985649][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 245.001833][ T5357] syz.1.442: attempt to access beyond end of device [ 245.001833][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.015134][ T5502] syz.4.484: attempt to access beyond end of device [ 245.015134][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.708148][ T3567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.717779][ T3567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.726048][ T3567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.708522][ T3567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.716257][ T3567] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 249.724033][ T3567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.920632][ T5357] bio_check_eod: 5198 callbacks suppressed [ 249.920654][ T5357] syz.1.442: attempt to access beyond end of device [ 249.920654][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.921252][ T5502] syz.4.484: attempt to access beyond end of device [ 249.921252][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.927247][ T5357] syz.1.442: attempt to access beyond end of device [ 249.927247][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 249.941914][ T5502] syz.4.484: attempt to access beyond end of device [ 249.941914][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 249.958081][ T5357] syz.1.442: attempt to access beyond end of device [ 249.958081][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.971157][ T5502] syz.4.484: attempt to access beyond end of device [ 249.971157][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.982516][ T5357] syz.1.442: attempt to access beyond end of device [ 249.982516][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 249.996312][ T5502] syz.4.484: attempt to access beyond end of device [ 249.996312][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.012320][ T5357] syz.1.442: attempt to access beyond end of device [ 250.012320][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 250.025701][ T5502] syz.4.484: attempt to access beyond end of device [ 250.025701][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 251.725527][ T3565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.705134][ T3565] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.720137][ T3565] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.691598][ T3566] Bluetooth: hci4: command tx timeout [ 253.705855][ T3566] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.718832][ T3566] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 254.692337][ T3566] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.713795][ T5489] chnl_net:caif_netlink_parms(): no params data found [ 254.929790][ T5357] bio_check_eod: 5253 callbacks suppressed [ 254.929813][ T5357] syz.1.442: attempt to access beyond end of device [ 254.929813][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 254.932376][ T5502] syz.4.484: attempt to access beyond end of device [ 254.932376][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 254.936483][ T5357] syz.1.442: attempt to access beyond end of device [ 254.936483][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 254.950346][ T5502] syz.4.484: attempt to access beyond end of device [ 254.950346][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 254.966192][ T5357] syz.1.442: attempt to access beyond end of device [ 254.966192][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 254.980352][ T5502] syz.4.484: attempt to access beyond end of device [ 254.980352][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 254.991539][ T5357] syz.1.442: attempt to access beyond end of device [ 254.991539][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.005392][ T5502] syz.4.484: attempt to access beyond end of device [ 255.005392][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.021326][ T5357] syz.1.442: attempt to access beyond end of device [ 255.021326][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.034773][ T5502] syz.4.484: attempt to access beyond end of device [ 255.034773][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.691587][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.697926][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.679539][ T3567] Bluetooth: hci4: command tx timeout [ 257.691685][ T3565] Bluetooth: hci7: command tx timeout [ 259.682370][ T3565] Bluetooth: hci4: command tx timeout [ 259.940761][ T5357] bio_check_eod: 5247 callbacks suppressed [ 259.940784][ T5357] syz.1.442: attempt to access beyond end of device [ 259.940784][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 259.941289][ T5502] syz.4.484: attempt to access beyond end of device [ 259.941289][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 259.947470][ T5357] syz.1.442: attempt to access beyond end of device [ 259.947470][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 259.961369][ T5502] syz.4.484: attempt to access beyond end of device [ 259.961369][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 259.977410][ T5357] syz.1.442: attempt to access beyond end of device [ 259.977410][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 259.991528][ T5502] syz.4.484: attempt to access beyond end of device [ 259.991528][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.002930][ T5357] syz.1.442: attempt to access beyond end of device [ 260.002930][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.016755][ T5502] syz.4.484: attempt to access beyond end of device [ 260.016755][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.033023][ T5357] syz.1.442: attempt to access beyond end of device [ 260.033023][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.046396][ T5502] syz.4.484: attempt to access beyond end of device [ 260.046396][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.689591][ T3565] Bluetooth: hci7: command tx timeout [ 261.699678][ T3565] Bluetooth: hci4: command tx timeout [ 263.698327][ T3565] Bluetooth: hci7: command tx timeout [ 264.703320][ T5437] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.949663][ T5357] bio_check_eod: 5171 callbacks suppressed [ 264.949684][ T5357] syz.1.442: attempt to access beyond end of device [ 264.949684][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 264.949904][ T5502] syz.4.484: attempt to access beyond end of device [ 264.949904][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 264.956263][ T5357] syz.1.442: attempt to access beyond end of device [ 264.956263][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 264.972404][ T5502] syz.4.484: attempt to access beyond end of device [ 264.972404][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 264.985842][ T5357] syz.1.442: attempt to access beyond end of device [ 264.985842][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 264.997806][ T5502] syz.4.484: attempt to access beyond end of device [ 264.997806][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.011878][ T5357] syz.1.442: attempt to access beyond end of device [ 265.011878][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.027963][ T5502] syz.4.484: attempt to access beyond end of device [ 265.027963][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.041684][ T5357] syz.1.442: attempt to access beyond end of device [ 265.041684][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.053926][ T5502] syz.4.484: attempt to access beyond end of device [ 265.053926][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.723147][ T5491] chnl_net:caif_netlink_parms(): no params data found [ 266.700114][ T3565] Bluetooth: hci7: command tx timeout [ 269.962141][ T5502] bio_check_eod: 5160 callbacks suppressed [ 269.962164][ T5502] syz.4.484: attempt to access beyond end of device [ 269.962164][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 269.962211][ T5357] syz.1.442: attempt to access beyond end of device [ 269.962211][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 269.968742][ T5502] syz.4.484: attempt to access beyond end of device [ 269.968742][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 269.982620][ T5357] syz.1.442: attempt to access beyond end of device [ 269.982620][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 269.998566][ T5502] syz.4.484: attempt to access beyond end of device [ 269.998566][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.012273][ T5357] syz.1.442: attempt to access beyond end of device [ 270.012273][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.024288][ T5502] syz.4.484: attempt to access beyond end of device [ 270.024288][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.038334][ T5357] syz.1.442: attempt to access beyond end of device [ 270.038334][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.054284][ T5502] syz.4.484: attempt to access beyond end of device [ 270.054284][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.067904][ T5357] syz.1.442: attempt to access beyond end of device [ 270.067904][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 274.970365][ T5502] bio_check_eod: 5184 callbacks suppressed [ 274.970388][ T5502] syz.4.484: attempt to access beyond end of device [ 274.970388][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 274.970646][ T5357] syz.1.442: attempt to access beyond end of device [ 274.970646][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 274.977113][ T5502] syz.4.484: attempt to access beyond end of device [ 274.977113][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 274.991470][ T5357] syz.1.442: attempt to access beyond end of device [ 274.991470][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.007613][ T5502] syz.4.484: attempt to access beyond end of device [ 275.007613][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.021309][ T5357] syz.1.442: attempt to access beyond end of device [ 275.021309][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.033030][ T5502] syz.4.484: attempt to access beyond end of device [ 275.033030][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.047366][ T5357] syz.1.442: attempt to access beyond end of device [ 275.047366][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.064079][ T5502] syz.4.484: attempt to access beyond end of device [ 275.064079][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.077009][ T5357] syz.1.442: attempt to access beyond end of device [ 275.077009][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 279.980013][ T5502] bio_check_eod: 5206 callbacks suppressed [ 279.980036][ T5502] syz.4.484: attempt to access beyond end of device [ 279.980036][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 279.980047][ T5357] syz.1.442: attempt to access beyond end of device [ 279.980047][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 279.980787][ T5357] syz.1.442: attempt to access beyond end of device [ 279.980787][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 279.988725][ T5502] syz.4.484: attempt to access beyond end of device [ 279.988725][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.002218][ T5357] syz.1.442: attempt to access beyond end of device [ 280.002218][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.014123][ T5502] syz.4.484: attempt to access beyond end of device [ 280.014123][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.027985][ T5357] syz.1.442: attempt to access beyond end of device [ 280.027985][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.043943][ T5502] syz.4.484: attempt to access beyond end of device [ 280.043943][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.058773][ T5357] syz.1.442: attempt to access beyond end of device [ 280.058773][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.069926][ T5502] syz.4.484: attempt to access beyond end of device [ 280.069926][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 284.700751][ T3567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.712359][ T3567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.721263][ T3567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.989870][ T5502] bio_check_eod: 5145 callbacks suppressed [ 284.989893][ T5502] syz.4.484: attempt to access beyond end of device [ 284.989893][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 284.991484][ T5357] syz.1.442: attempt to access beyond end of device [ 284.991484][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 284.998578][ T5502] syz.4.484: attempt to access beyond end of device [ 284.998578][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 285.009954][ T5357] syz.1.442: attempt to access beyond end of device [ 285.009954][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 285.023924][ T5502] syz.4.484: attempt to access beyond end of device [ 285.023924][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 285.039837][ T5357] syz.1.442: attempt to access beyond end of device [ 285.039837][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 285.053234][ T5502] syz.4.484: attempt to access beyond end of device [ 285.053234][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 285.064568][ T5357] syz.1.442: attempt to access beyond end of device [ 285.064568][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 285.079059][ T5502] syz.4.484: attempt to access beyond end of device [ 285.079059][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 285.094312][ T5357] syz.1.442: attempt to access beyond end of device [ 285.094312][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 286.698796][ T3566] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.710401][ T3569] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.718145][ T3566] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.689630][ T3567] Bluetooth: hci2: command 0x0406 tx timeout [ 289.999762][ T5357] bio_check_eod: 5205 callbacks suppressed [ 289.999783][ T5357] syz.1.442: attempt to access beyond end of device [ 289.999783][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.000500][ T5502] syz.4.484: attempt to access beyond end of device [ 290.000500][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.006456][ T5357] syz.1.442: attempt to access beyond end of device [ 290.006456][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 290.020356][ T5502] syz.4.484: attempt to access beyond end of device [ 290.020356][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 290.036828][ T5357] syz.1.442: attempt to access beyond end of device [ 290.036828][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.050396][ T5502] syz.4.484: attempt to access beyond end of device [ 290.050396][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.062122][ T5357] syz.1.442: attempt to access beyond end of device [ 290.062122][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 290.075977][ T5502] syz.4.484: attempt to access beyond end of device [ 290.075977][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 290.091960][ T5357] syz.1.442: attempt to access beyond end of device [ 290.091960][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.106104][ T5502] syz.4.484: attempt to access beyond end of device [ 290.106104][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 290.679602][ T3565] Bluetooth: hci5: command tx timeout [ 293.698532][ T3567] Bluetooth: hci5: command tx timeout [ 295.010422][ T5502] bio_check_eod: 5159 callbacks suppressed [ 295.010444][ T5502] syz.4.484: attempt to access beyond end of device [ 295.010444][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 295.010451][ T5357] syz.1.442: attempt to access beyond end of device [ 295.010451][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 295.011194][ T5357] syz.1.442: attempt to access beyond end of device [ 295.011194][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 295.017120][ T5502] syz.4.484: attempt to access beyond end of device [ 295.017120][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 295.033061][ T5357] syz.1.442: attempt to access beyond end of device [ 295.033061][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 295.047061][ T5502] syz.4.484: attempt to access beyond end of device [ 295.047061][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 295.058389][ T5357] syz.1.442: attempt to access beyond end of device [ 295.058389][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 295.072425][ T5502] syz.4.484: attempt to access beyond end of device [ 295.072425][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 295.088315][ T5357] syz.1.442: attempt to access beyond end of device [ 295.088315][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 295.102864][ T5502] syz.4.484: attempt to access beyond end of device [ 295.102864][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 296.689971][ T3567] Bluetooth: hci5: command tx timeout [ 299.693074][ T3567] Bluetooth: hci5: command tx timeout [ 300.021117][ T5502] bio_check_eod: 5212 callbacks suppressed [ 300.021138][ T5502] syz.4.484: attempt to access beyond end of device [ 300.021138][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.021257][ T5357] syz.1.442: attempt to access beyond end of device [ 300.021257][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.027824][ T5502] syz.4.484: attempt to access beyond end of device [ 300.027824][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 300.041772][ T5357] syz.1.442: attempt to access beyond end of device [ 300.041772][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 300.058054][ T5502] syz.4.484: attempt to access beyond end of device [ 300.058054][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.071664][ T5357] syz.1.442: attempt to access beyond end of device [ 300.071664][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.083111][ T5502] syz.4.484: attempt to access beyond end of device [ 300.083111][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 300.096914][ T5357] syz.1.442: attempt to access beyond end of device [ 300.096914][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 300.113805][ T5502] syz.4.484: attempt to access beyond end of device [ 300.113805][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 300.128078][ T5357] syz.1.442: attempt to access beyond end of device [ 300.128078][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 304.707478][ T3567] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 304.721497][ T3567] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 305.031285][ T5357] bio_check_eod: 5244 callbacks suppressed [ 305.031312][ T5357] syz.1.442: attempt to access beyond end of device [ 305.031312][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.031433][ T5502] syz.4.484: attempt to access beyond end of device [ 305.031433][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.037887][ T5357] syz.1.442: attempt to access beyond end of device [ 305.037887][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 305.051736][ T5502] syz.4.484: attempt to access beyond end of device [ 305.051736][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 305.067695][ T5357] syz.1.442: attempt to access beyond end of device [ 305.067695][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.081110][ T5502] syz.4.484: attempt to access beyond end of device [ 305.081110][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.092400][ T5357] syz.1.442: attempt to access beyond end of device [ 305.092400][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 305.106310][ T5502] syz.4.484: attempt to access beyond end of device [ 305.106310][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 305.122308][ T5357] syz.1.442: attempt to access beyond end of device [ 305.122308][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.136028][ T5502] syz.4.484: attempt to access beyond end of device [ 305.136028][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 305.688427][ T3567] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 305.696521][ T3567] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 305.705281][ T3567] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 305.718639][ T3567] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 309.695692][ T3565] Bluetooth: hci8: command tx timeout [ 310.039777][ T5502] bio_check_eod: 5161 callbacks suppressed [ 310.039808][ T5502] syz.4.484: attempt to access beyond end of device [ 310.039808][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 310.042244][ T5357] syz.1.442: attempt to access beyond end of device [ 310.042244][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.048513][ T5502] syz.4.484: attempt to access beyond end of device [ 310.048513][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.059878][ T5357] syz.1.442: attempt to access beyond end of device [ 310.059878][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 310.073847][ T5502] syz.4.484: attempt to access beyond end of device [ 310.073847][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 310.089859][ T5357] syz.1.442: attempt to access beyond end of device [ 310.089859][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.103386][ T5502] syz.4.484: attempt to access beyond end of device [ 310.103386][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.114753][ T5357] syz.1.442: attempt to access beyond end of device [ 310.114753][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 310.128547][ T5502] syz.4.484: attempt to access beyond end of device [ 310.128547][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 310.144440][ T5357] syz.1.442: attempt to access beyond end of device [ 310.144440][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 310.699227][ T3567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.708965][ T3567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.726467][ T3567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.706938][ T3567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.718327][ T3567] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 312.689553][ T3566] Bluetooth: hci8: command tx timeout [ 312.707972][ T3567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.050255][ T5502] bio_check_eod: 5156 callbacks suppressed [ 315.050278][ T5502] syz.4.484: attempt to access beyond end of device [ 315.050278][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.051791][ T5357] syz.1.442: attempt to access beyond end of device [ 315.051791][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.057293][ T5502] syz.4.484: attempt to access beyond end of device [ 315.057293][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 315.072083][ T5357] syz.1.442: attempt to access beyond end of device [ 315.072083][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 315.087917][ T5502] syz.4.484: attempt to access beyond end of device [ 315.087917][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.101335][ T5357] syz.1.442: attempt to access beyond end of device [ 315.101335][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.112666][ T5502] syz.4.484: attempt to access beyond end of device [ 315.112666][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 315.126619][ T5357] syz.1.442: attempt to access beyond end of device [ 315.126619][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 315.142578][ T5502] syz.4.484: attempt to access beyond end of device [ 315.142578][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.156160][ T5357] syz.1.442: attempt to access beyond end of device [ 315.156160][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 315.700184][ T3565] Bluetooth: hci0: command tx timeout [ 315.706341][ T3565] Bluetooth: hci8: command tx timeout [ 317.689827][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.696186][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.691770][ T3565] Bluetooth: hci0: command tx timeout [ 318.697268][ T3565] Bluetooth: hci8: command tx timeout [ 320.060818][ T5357] bio_check_eod: 5210 callbacks suppressed [ 320.060840][ T5357] syz.1.442: attempt to access beyond end of device [ 320.060840][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 320.062231][ T5502] syz.4.484: attempt to access beyond end of device [ 320.062231][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 320.067409][ T5357] syz.1.442: attempt to access beyond end of device [ 320.067409][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 320.081505][ T5502] syz.4.484: attempt to access beyond end of device [ 320.081505][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 320.098264][ T5357] syz.1.442: attempt to access beyond end of device [ 320.098264][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 320.111498][ T5502] syz.4.484: attempt to access beyond end of device [ 320.111498][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 320.122730][ T5357] syz.1.442: attempt to access beyond end of device [ 320.122730][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 320.136641][ T5502] syz.4.484: attempt to access beyond end of device [ 320.136641][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 320.152723][ T5357] syz.1.442: attempt to access beyond end of device [ 320.152723][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 320.166234][ T5502] syz.4.484: attempt to access beyond end of device [ 320.166234][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 321.689569][ T3565] Bluetooth: hci0: command tx timeout [ 321.725884][ T3569] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 322.711044][ T3569] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 322.719907][ T3569] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.689975][ T3569] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 323.700024][ T3569] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 323.710338][ T3569] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 323.718899][ T3566] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.689841][ T3559] Bluetooth: hci0: command tx timeout [ 324.702208][ T3566] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 324.709749][ T3566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.714969][ T3559] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 324.725577][ T3566] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 325.069590][ T5502] bio_check_eod: 5287 callbacks suppressed [ 325.069612][ T5502] syz.4.484: attempt to access beyond end of device [ 325.069612][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.069638][ T5357] syz.1.442: attempt to access beyond end of device [ 325.069638][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.076191][ T5502] syz.4.484: attempt to access beyond end of device [ 325.076191][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 325.090133][ T5357] syz.1.442: attempt to access beyond end of device [ 325.090133][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 325.106707][ T5502] syz.4.484: attempt to access beyond end of device [ 325.106707][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.120537][ T5357] syz.1.442: attempt to access beyond end of device [ 325.120537][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.130864][ T5502] syz.4.484: attempt to access beyond end of device [ 325.130864][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 325.144770][ T5357] syz.1.442: attempt to access beyond end of device [ 325.144770][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 325.160758][ T5502] syz.4.484: attempt to access beyond end of device [ 325.160758][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.174094][ T5357] syz.1.442: attempt to access beyond end of device [ 325.174094][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 325.721957][ T3566] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 328.681018][ T3566] Bluetooth: hci6: command tx timeout [ 329.697750][ T3566] Bluetooth: hci9: command tx timeout [ 330.079576][ T5502] bio_check_eod: 5224 callbacks suppressed [ 330.079597][ T5502] syz.4.484: attempt to access beyond end of device [ 330.079597][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 330.079725][ T5357] syz.1.442: attempt to access beyond end of device [ 330.079725][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 330.088310][ T5502] syz.4.484: attempt to access beyond end of device [ 330.088310][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 330.099895][ T5357] syz.1.442: attempt to access beyond end of device [ 330.099895][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 330.113742][ T5502] syz.4.484: attempt to access beyond end of device [ 330.113742][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 330.130862][ T5357] syz.1.442: attempt to access beyond end of device [ 330.130862][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 330.143923][ T5502] syz.4.484: attempt to access beyond end of device [ 330.143923][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 330.155311][ T5357] syz.1.442: attempt to access beyond end of device [ 330.155311][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 330.169118][ T5502] syz.4.484: attempt to access beyond end of device [ 330.169118][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 330.185104][ T5357] syz.1.442: attempt to access beyond end of device [ 330.185104][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 331.694692][ T3566] Bluetooth: hci6: command tx timeout [ 332.700192][ T3566] Bluetooth: hci9: command tx timeout [ 334.689503][ T3566] Bluetooth: hci6: command tx timeout [ 335.089688][ T5357] bio_check_eod: 5251 callbacks suppressed [ 335.089711][ T5357] syz.1.442: attempt to access beyond end of device [ 335.089711][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 335.090057][ T5502] syz.4.484: attempt to access beyond end of device [ 335.090057][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 335.096276][ T5357] syz.1.442: attempt to access beyond end of device [ 335.096276][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 335.112249][ T5502] syz.4.484: attempt to access beyond end of device [ 335.112249][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 335.125688][ T5357] syz.1.442: attempt to access beyond end of device [ 335.125688][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 335.137176][ T5502] syz.4.484: attempt to access beyond end of device [ 335.137176][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 335.151724][ T5357] syz.1.442: attempt to access beyond end of device [ 335.151724][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 335.167303][ T5502] syz.4.484: attempt to access beyond end of device [ 335.167303][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 335.180727][ T5357] syz.1.442: attempt to access beyond end of device [ 335.180727][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 335.192223][ T5502] syz.4.484: attempt to access beyond end of device [ 335.192223][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 335.689504][ T3566] Bluetooth: hci9: command tx timeout [ 337.690522][ T3566] Bluetooth: hci6: command tx timeout [ 338.689536][ T3567] Bluetooth: hci9: command tx timeout [ 340.099672][ T5502] bio_check_eod: 5296 callbacks suppressed [ 340.099694][ T5502] syz.4.484: attempt to access beyond end of device [ 340.099694][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 340.099929][ T5357] syz.1.442: attempt to access beyond end of device [ 340.099929][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 340.106290][ T5502] syz.4.484: attempt to access beyond end of device [ 340.106290][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 340.122286][ T5357] syz.1.442: attempt to access beyond end of device [ 340.122286][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 340.135723][ T5502] syz.4.484: attempt to access beyond end of device [ 340.135723][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 340.147017][ T5357] syz.1.442: attempt to access beyond end of device [ 340.147017][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 340.160768][ T5502] syz.4.484: attempt to access beyond end of device [ 340.160768][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 340.163618][ T5502] syz.4.484: attempt to access beyond end of device [ 340.163618][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 340.177659][ T5357] syz.1.442: attempt to access beyond end of device [ 340.177659][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 340.188978][ T5502] syz.4.484: attempt to access beyond end of device [ 340.188978][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 342.721576][ T3566] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 343.697092][ T3566] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 343.710372][ T3566] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 343.719529][ T3566] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 344.698978][ T3566] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 344.707040][ T3566] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.109839][ T5357] bio_check_eod: 5189 callbacks suppressed [ 345.109859][ T5357] syz.1.442: attempt to access beyond end of device [ 345.109859][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 345.110212][ T5502] syz.4.484: attempt to access beyond end of device [ 345.110212][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 345.116434][ T5357] syz.1.442: attempt to access beyond end of device [ 345.116434][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 345.130309][ T5502] syz.4.484: attempt to access beyond end of device [ 345.130309][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 345.146275][ T5357] syz.1.442: attempt to access beyond end of device [ 345.146275][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 345.159906][ T5502] syz.4.484: attempt to access beyond end of device [ 345.159906][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 345.171269][ T5357] syz.1.442: attempt to access beyond end of device [ 345.171269][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 345.185727][ T5502] syz.4.484: attempt to access beyond end of device [ 345.185727][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 345.201978][ T5357] syz.1.442: attempt to access beyond end of device [ 345.201978][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 345.215528][ T5502] syz.4.484: attempt to access beyond end of device [ 345.215528][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 347.689804][ T28] INFO: task syz.1.442:5368 blocked for more than 146 seconds. [ 347.697798][ T28] Not tainted 6.1.97-syzkaller #0 [ 347.704333][ T3567] Bluetooth: hci10: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 348.690748][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.710879][ T28] task:syz.1.442 state:D stack:26384 pid:5368 ppid:3552 flags:0x00004004 [ 350.120586][ T5502] bio_check_eod: 5243 callbacks suppressed [ 350.120608][ T5502] syz.4.484: attempt to access beyond end of device [ 350.120608][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 350.121089][ T5357] syz.1.442: attempt to access beyond end of device [ 350.121089][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 350.127331][ T5502] syz.4.484: attempt to access beyond end of device [ 350.127331][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 350.141188][ T5357] syz.1.442: attempt to access beyond end of device [ 350.141188][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 350.157155][ T5502] syz.4.484: attempt to access beyond end of device [ 350.157155][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 350.170642][ T5357] syz.1.442: attempt to access beyond end of device [ 350.170642][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 350.182094][ T5502] syz.4.484: attempt to access beyond end of device [ 350.182094][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 350.197052][ T5357] syz.1.442: attempt to access beyond end of device [ 350.197052][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 350.212688][ T5502] syz.4.484: attempt to access beyond end of device [ 350.212688][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 350.226116][ T5357] syz.1.442: attempt to access beyond end of device [ 350.226116][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 350.689596][ T3567] Bluetooth: hci10: command tx timeout [ 352.701009][ T28] Call Trace: [ 352.704420][ T28] [ 352.707384][ T28] __schedule+0x142d/0x4550 [ 352.712999][ T28] ? __sched_text_start+0x8/0x8 [ 352.717918][ T28] ? print_irqtrace_events+0x210/0x210 [ 352.723860][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 353.697532][ T3567] Bluetooth: hci10: command tx timeout [ 353.699010][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 353.716135][ T28] schedule+0xbf/0x180 [ 354.699613][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 354.705422][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 355.129558][ T5357] bio_check_eod: 5224 callbacks suppressed [ 355.129580][ T5357] syz.1.442: attempt to access beyond end of device [ 355.129580][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 355.131205][ T5502] syz.4.484: attempt to access beyond end of device [ 355.131205][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 355.138313][ T5357] syz.1.442: attempt to access beyond end of device [ 355.138313][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 355.149748][ T5502] syz.4.484: attempt to access beyond end of device [ 355.149748][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 355.163629][ T5357] syz.1.442: attempt to access beyond end of device [ 355.163629][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 355.179568][ T5502] syz.4.484: attempt to access beyond end of device [ 355.179568][ T5502] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 355.192986][ T5357] syz.1.442: attempt to access beyond end of device [ 355.192986][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 355.204439][ T5502] syz.4.484: attempt to access beyond end of device [ 355.204439][ T5502] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 355.219107][ T5357] syz.1.442: attempt to access beyond end of device [ 355.219107][ T5357] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 355.221908][ T5357] syz.1.442: attempt to access beyond end of device [ 355.221908][ T5357] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 355.707874][ T28] ? down_write_killable_nested+0x90/0x90 [ 355.713867][ T28] ? read_lock_is_recursive+0x10/0x10 [ 356.689500][ T3566] Bluetooth: hci10: command tx timeout [ 356.691250][ T28] ? ima_lsm_policy_change+0x620/0x620 [ 356.704527][ T28] ? rwsem_write_trylock+0x166/0x210 [ 356.719544][ T28] ? clear_nonspinnable+0x60/0x60 [ 356.724755][ T28] process_measurement+0x446/0x21b0