last executing test programs: 49.204829097s ago: executing program 2 (id=4448): syz_usb_connect$uac1(0x0, 0xc1, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @as_header={0x7}, @as_header={0x7}, @as_header={0x7}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "839253"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "8a72012f619991247e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "", "0f3f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x1, 0x71, {0x7, 0x25, 0x1, 0x102, 0x40, 0x8}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa}, 0xbf, &(0x7f0000000180)={0x5, 0xf, 0xbf, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "10123ee0edf71955ca288abaf2b151f3"}, @generic={0xa6, 0x10, 0x0, "c68f076287737e3601cd9076313000b57a84d31489e6c7316e5f57bd1a8b9e032bedddb73216ba827d25965448f106245f5fdc59659a58a65dc1022fa78d764611f5a059d74f48c694147fed9c2e18d0130c1df7740e453ea7d74b392e7f35e7dfd7d159e9ed48348dd1a7dc45b82c65543fd4d12192bbbff5b61ca60b37050bedc1c528d2efc351da341ada6f0e901a46bc6585431cbda419bfbc49f6e1e0a9566870"}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x16, &(0x7f0000000280)=@string={0x16, 0x3, "f50cbb4ff4ea190a2f02a8fe7925c8df9b6c4ba0"}}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}, {0x6d, &(0x7f0000000340)=@string={0x6d, 0x3, "f5e0c2ea3bfb4a90eef6005e4dd437b85aa63cee0450baa685175139621b8a8cd5ebd2064681472342ca1d8c1c01c744c91d4cc7acea104a3f17a1cb6fdd594df12b083e4f83af0cb515a4b680f69cd100f72ffb978ba266b6c71f6ff25b00e0ea67f752f4f654cfaa6ab8"}}, {0xcc, &(0x7f00000003c0)=@string={0xcc, 0x3, "008dcfd4fb50eae4cd12a129f1dafaf35956f605065ec7e914b9c5328969fb65076fef84ac32e36d0640becced8e1db27a34c8dba0528b85eb0aada3553a2f599fef4c39caab8515bea97f640cdbbf1aa9189660c3f58a6b81e7cfcd718bf18b9a03fdd5cc81e9e0e9122aa3df9df4a267c72b8355f93c698c781f8d45c8fb9fc19840ac8fa9690ee33022e66c14d5b6991677623846decb63efcb3618da506dfad1b9ee0d7e838144b74a6af29f5e5d8f1b0e0ac7ee125ffa997e8841f845d627f868f267fb6f803544"}}]}) 47.360280429s ago: executing program 2 (id=4451): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x800, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) gettid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x10, 0x8000, 0x200, 0x3, {{0x37, 0x4, 0x2, 0x3, 0xdc, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @cipso={0x86, 0x2c, 0x0, [{0x1, 0x10, "b1c477729992bce20e65bc0ae63b"}, {0x2, 0x9, "a9ea393a40838d"}, {0x0, 0xd, "a5289f539fc62418d2b5a1"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x31}, @timestamp_addr={0x44, 0x2c, 0x66, 0x1, 0x3, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x3ff}, {@local, 0x5ef}, {@remote, 0x8}, {@multicast2}]}, @timestamp_prespec={0x44, 0x54, 0xeb, 0x3, 0x6, [{@broadcast, 0x7}, {@empty, 0x8006}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@local, 0x80000000}, {@empty, 0x3f}, {@multicast2, 0x7}, {@local, 0x85}, {@broadcast}]}, @timestamp_addr={0x44, 0xc, 0x2b, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}]}]}}}}}) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 42.897394189s ago: executing program 2 (id=4461): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) socketpair(0x0, 0xa, 0x1, &(0x7f0000000100)) syz_io_uring_setup(0x13c7, &(0x7f0000000280), &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'}) 40.386105801s ago: executing program 2 (id=4465): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000034001680300001802c000c"], 0x68}}, 0x0) 39.861665007s ago: executing program 2 (id=4468): r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="67b8ed77ab82513664511ea67d1fcaadffba39938d78be1ff85280771cf63d5f423eadaf2193d1e15762b9fe3a3f3c7d8a18f88d43f98558a0422d07ccaab56ad8ab2b9b747b61f26421cc72cc01f6ca35858dbe4b83312410696970ed243f36e1d5630000000000", @ANYRES32, @ANYRES8, @ANYBLOB="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", @ANYRESHEX], 0x9, 0x2af, &(0x7f0000001a40)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(r0, &(0x7f0000000680)='./file0/file0\x00', 0x8900) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 37.867100251s ago: executing program 2 (id=4473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000001d00"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0xfffffffc) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xc064, &(0x7f0000000840)=ANY=[@ANYBLOB="66643d2121262228946197cbfc6fb3ed65d5fc211f5d4917cdb360fee0fe55d485df9d3ae7534a3367c4b46cd1b27b025f1432b1cb6183", @ANYRESHEX, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,max_read=0x0000000080000000,default_permi', @ANYBLOB=',obj_role=\',fscontext=root,context=root']) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x800, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) unshare(0x64000600) 32.601541385s ago: executing program 4 (id=4498): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d000"/16, 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="a0", 0x1}, {&(0x7f00000000c0)="cb", 0x1}], 0x2}, 0x0) 31.512160996s ago: executing program 4 (id=4499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r0, r2, 0x2f, 0x8, 0x4, @prog_id}, 0x20) 30.038528264s ago: executing program 4 (id=4502): r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="67b8ed77ab82513664511ea67d1fcaadffba39938d78be1ff85280771cf63d5f423eadaf2193d1e15762b9fe3a3f3c7d8a18f88d43f98558a0422d07ccaab56ad8ab2b9b747b61f26421cc72cc01f6ca35858dbe4b83312410696970ed243f36e1d5630000000000", @ANYRES32, @ANYRES8, @ANYBLOB="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", @ANYRESHEX], 0x9, 0x2af, &(0x7f0000001a40)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(r0, &(0x7f0000000680)='./file0/file0\x00', 0x8900) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 26.911153119s ago: executing program 4 (id=4507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xb0, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x5c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 26.472293246s ago: executing program 4 (id=4512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0xd0}) 25.390884294s ago: executing program 4 (id=4517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000300)=ANY=[], 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 17.039767138s ago: executing program 1 (id=4541): syz_usbip_server_init(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x44, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0x40286608, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 12.829883722s ago: executing program 1 (id=4551): socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) userfaultfd(0x0) socket$inet_tcp(0x2, 0x1, 0x0) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) 12.346266319s ago: executing program 1 (id=4555): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 11.761115068s ago: executing program 1 (id=4559): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff215}, {}, 0x8}}]}}]}, 0x58}}, 0x0) 11.316808673s ago: executing program 1 (id=4561): syz_usbip_server_init(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x44, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r9, 0x40286608, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 8.740729254s ago: executing program 0 (id=4571): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff215}, {}, 0x8}}]}}]}, 0x58}}, 0x0) 8.550926621s ago: executing program 1 (id=4573): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0xfa}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000cfb80000000000003bf230fb1dbb7c54b9695e0000080003000000", @ANYRES32=r4, @ANYBLOB='\b\x009\x00\x00\x00\x00\x00'], 0x24}}, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x11, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a0004000000000000000000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, r9, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.301640214s ago: executing program 0 (id=4575): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0xfffffffb, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.827067096s ago: executing program 0 (id=4576): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.564139455s ago: executing program 0 (id=4583): syz_usbip_server_init(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r10, 0x40286608, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 4.180150249s ago: executing program 5 (id=4587): r0 = io_uring_setup(0x2cd, &(0x7f00000003c0)={0x0, 0x29ba, 0x0, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @result={0x0, 0x20000000}}], 0x1c) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04230d00c900", @ANYRESHEX], 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r5}) shutdown(r2, 0x1) syz_emit_ethernet(0xd8, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0x1, "e15f", "129dca", 0x9100, "ad9ce46c42d52c881c4981bd7bcbc7caa90b585bf7162b657e20356a4dbd06fa8a098625f1432ebce1c105e1d1cdab2e247563a3978a248bf043e75b979ca82e7953de3e77ef1444c5cbbf0597dddef975b7a0ef75f319307f35235a444b2f1ce2a5dd8e5e1932adb23a53ca951171a5e1631720fe721e2f053e216aba7783192f8dbefe6ff2d07d747872dbd76f6098ef803c9ed0165db496ffadf93a7b229e230616b5e030ca28d1aa0ef08645bee558af458783f7a09a292a683bb898760e52"}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b100700000000000000030109021200010000000009040000004d2f9c00"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) pwritev(r7, &(0x7f0000001500)=[{&(0x7f00000000c0)="e3", 0x1}, {0x0}], 0x2, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000580)=ANY=[], 0x0, 0x0}) 3.759453598s ago: executing program 5 (id=4588): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=0xffff7b6e, 0x4) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) 3.680000292s ago: executing program 5 (id=4589): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/mcfilter6\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000160a05000000000000000000020000000c00054000000000000000010900020073797a373dece33d7e6a315040c7bd3c40362932000000000900020073797a300000000030000000020a0102000000000000000005000000080002400000000008000240000000010c0004400000000000000003140000"], 0x90}, 0x1, 0x0, 0x0, 0x40040}, 0x48810) read$char_usb(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0x4112, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x80089203, 0x200000000000000) write$binfmt_elf32(r3, &(0x7f0000003d00)=ANY=[@ANYBLOB="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"], 0x1000) r6 = openat$proc_capi20(0xffffff9c, &(0x7f0000000740), 0x0, 0x0) read$FUSE(r6, &(0x7f0000001cc0)={0x2020}, 0x2020) 3.40039893s ago: executing program 3 (id=4590): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 3.251226945s ago: executing program 3 (id=4591): socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) userfaultfd(0x0) socket$inet_tcp(0x2, 0x1, 0x0) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) 2.95644676s ago: executing program 3 (id=4592): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2.670031477s ago: executing program 3 (id=4593): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="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"}) 2.509961369s ago: executing program 5 (id=4594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) 2.384524122s ago: executing program 3 (id=4595): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="63c91267aaea53ce"], 0x8) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0) 2.383778607s ago: executing program 5 (id=4596): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.215705188s ago: executing program 5 (id=4597): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r3) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="82", 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, r5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r6, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x20000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3103000000000000000008000000", @ANYRES32], 0x24}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0002030109021b000100000000090400000190f19c000905840000000000006658a6a9e75d21f4eeef2505693b99d371cfda436d58c8b181143e2f579626ecf7d9445c30e19c814d2cd3993078260c59c79cde0edef900000000000005e944ba68bfe96cbe6f556df6568cf0b8c3aa60df27fb05e1e9a9d31452ea18f0839d4a39b555081415c8f56bb0"], 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="a8", 0x1}) close(r4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x40) fchdir(r2) syz_open_procfs(0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) creat(&(0x7f0000000000)='./file0\x00', 0x99) fchdir(r8) r9 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) 415.110315ms ago: executing program 3 (id=4598): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4001, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000340)) 414.752383ms ago: executing program 0 (id=4599): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=0xffff7b6e, 0x4) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) 0s ago: executing program 0 (id=4600): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0xfa}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, 0x0, 0x4011) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB, @ANYRES32=r3, @ANYBLOB='\b\x009\x00\x00\x00'], 0x24}}, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x11, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a00"], 0x40}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, r6, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x50}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000100)={0x0, 0x2, 0xb, 0x2, 0x5, 0xd, 0x7, 0x1, 0x8, 0x0, 0xcae, 0x4}) kernel console output (not intermixed with test programs): interface not active [ 1097.235786][T19557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.262339][T19557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.370327][T19557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.449300][T19583] team0: Port device team_slave_0 added [ 1097.522706][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.550341][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.587296][ T5198] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1097.594043][T19583] team0: Port device team_slave_1 added [ 1097.765131][ T5198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.795603][ T5198] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.822798][ T5198] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1097.844543][ T5198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1097.863722][ T5198] usb 3-1: SerialNumber: syz [ 1097.890972][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.925876][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.073038][T19557] hsr_slave_0: entered promiscuous mode [ 1098.115942][ T5198] usb 3-1: 0:2 : does not exist [ 1098.153504][ T5198] usb 3-1: unit 255 not found! [ 1098.160785][T19557] hsr_slave_1: entered promiscuous mode [ 1098.180401][T19557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1098.197389][ T5198] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1098.212473][T19557] Cannot create hsr debugfs directory [ 1098.227304][T19583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.235478][ T5198] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1098.237945][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.268785][ T5198] usb 3-1: USB disconnect, device number 70 [ 1098.268983][ C0] vkms_vblank_simulate: vblank timer overrun [ 1098.302208][T19583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.465009][T19583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.495526][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.570686][T19583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.668097][T19583] hsr_slave_0: entered promiscuous mode [ 1099.703909][T19583] hsr_slave_1: entered promiscuous mode [ 1099.722903][T19583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1099.742464][T19583] Cannot create hsr debugfs directory [ 1099.760156][ T5169] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1099.980342][ T5169] usb 3-1: Using ep0 maxpacket: 16 [ 1100.020921][ T5169] usb 3-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 1100.059850][ T5169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.089988][ T5169] usb 3-1: Product: syz [ 1100.094258][ T5169] usb 3-1: Manufacturer: syz [ 1100.098838][ T5169] usb 3-1: SerialNumber: syz [ 1100.150670][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1100.178821][ T5169] usb 3-1: config 0 descriptor?? [ 1100.237654][T19723] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4145'. [ 1100.278495][ T53] team0: left allmulticast mode [ 1100.287462][ T53] team_slave_0: left allmulticast mode [ 1100.293560][ T53] team_slave_1: left allmulticast mode [ 1100.299201][ T53] team0: left promiscuous mode [ 1100.304347][ T53] team_slave_0: left promiscuous mode [ 1100.311030][ T53] team_slave_1: left promiscuous mode [ 1100.316884][ T53] bridge0: port 3(team0) entered disabled state [ 1100.417448][ T53] bridge_slave_1: left allmulticast mode [ 1100.439020][ T5169] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 1100.461521][ T53] bridge_slave_1: left promiscuous mode [ 1100.497857][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.540407][ T5169] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1100.577734][ T53] bridge_slave_0: left allmulticast mode [ 1100.592536][ T5169] dib0700: firmware download failed at 7 with -22 [ 1100.620364][ T53] bridge_slave_0: left promiscuous mode [ 1100.626126][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.995140][T12867] bio_check_eod: 32684 callbacks suppressed [ 1100.995163][T12867] syz.1.2026: attempt to access beyond end of device [ 1100.995163][T12867] loop1: rw=3, sector=29749800801608, nr_sectors = 8388600 limit=2048 [ 1101.046722][T12867] syz.1.2026: attempt to access beyond end of device [ 1101.046722][T12867] loop1: rw=3, sector=29749809190208, nr_sectors = 8388600 limit=2048 [ 1101.062961][T12867] syz.1.2026: attempt to access beyond end of device [ 1101.062961][T12867] loop1: rw=3, sector=29749817578808, nr_sectors = 8388600 limit=2048 [ 1101.090818][T12867] syz.1.2026: attempt to access beyond end of device [ 1101.090818][T12867] loop1: rw=3, sector=29749825967408, nr_sectors = 8388600 limit=2048 [ 1101.106890][T12867] syz.1.2026: attempt to access beyond end of device [ 1101.106890][T12867] loop1: rw=3, sector=29749834356008, nr_sectors = 8388600 limit=2048 [ 1101.122639][T12867] syz.1.2026: attempt to access beyond end of device [ 1101.122639][T12867] loop1: rw=3, sector=29749842744608, nr_sectors = 8388600 limit=2048 [ 1101.150253][T12867] syz.1.2026: attempt to access beyond end of device [ 1101.150253][T12867] loop1: rw=3, sector=29749851133208, nr_sectors = 8388600 limit=2048 [ 1101.174389][T12867] syz.1.2026: attempt to access beyond end of device [ 1101.174389][T12867] loop1: rw=3, sector=29749859521808, nr_sectors = 8388600 limit=2048 [ 1101.194398][T12867] syz.1.2026: attempt to access beyond end of device [ 1101.194398][T12867] loop1: rw=3, sector=29749867910408, nr_sectors = 8388600 limit=2048 [ 1101.217701][T12867] syz.1.2026: attempt to access beyond end of device [ 1101.217701][T12867] loop1: rw=3, sector=29749876299008, nr_sectors = 8388600 limit=2048 [ 1102.551447][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.576232][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.597801][ T53] bond0 (unregistering): Released all slaves [ 1102.741609][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4151'. [ 1102.864922][ T53] tipc: Disabling bearer [ 1102.893478][ T53] tipc: Left network mode [ 1102.914502][ T25] usb 3-1: USB disconnect, device number 71 [ 1103.100926][ T47] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1103.171918][ T53] IPVS: stopping master sync thread 14811 ... [ 1103.330142][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 1103.370167][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1103.398491][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1103.470954][ T47] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1c.48 [ 1103.480402][ T5198] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1103.496444][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.507023][ T47] usb 2-1: Product: syz [ 1103.511380][ T47] usb 2-1: Manufacturer: syz [ 1103.516299][ T47] usb 2-1: SerialNumber: syz [ 1103.553928][ T47] usb 2-1: config 0 descriptor?? [ 1103.687981][ T5198] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1103.698562][ T5198] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1103.710331][ T5198] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1103.719443][ T5198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1103.728661][ T53] hsr_slave_0: left promiscuous mode [ 1103.732336][ T5198] usb 1-1: SerialNumber: syz [ 1103.759003][ T53] hsr_slave_1: left promiscuous mode [ 1103.787547][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.809175][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.810234][ T47] ath6kl: Failed to submit usb control message: -71 [ 1103.828264][ T47] ath6kl: unable to send the bmi data to the device: -71 [ 1103.835579][ T47] ath6kl: Unable to send get target info: -71 [ 1103.836608][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.845427][ T47] ath6kl: Failed to init ath6kl core: -71 [ 1103.885291][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.890860][ T47] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1103.940282][ T47] usb 2-1: USB disconnect, device number 47 [ 1103.966314][ T53] veth1_macvtap: left promiscuous mode [ 1103.966423][ T5198] usb 1-1: 0:2 : does not exist [ 1103.987168][ T53] veth0_macvtap: left promiscuous mode [ 1103.995386][ T5198] usb 1-1: unit 5 not found! [ 1103.997372][ T53] veth1_vlan: left promiscuous mode [ 1104.052417][ T5198] usb 1-1: USB disconnect, device number 62 [ 1105.023496][T19772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.009063][T12867] bio_check_eod: 61571 callbacks suppressed [ 1106.009089][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.009089][T12867] loop1: rw=3, sector=30266379178208, nr_sectors = 8388600 limit=2048 [ 1106.069095][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.069095][T12867] loop1: rw=3, sector=30266387566808, nr_sectors = 8388600 limit=2048 [ 1106.116395][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.116395][T12867] loop1: rw=3, sector=30266395955408, nr_sectors = 8388600 limit=2048 [ 1106.132250][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.132250][T12867] loop1: rw=3, sector=30266404344008, nr_sectors = 8388600 limit=2048 [ 1106.147849][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.147849][T12867] loop1: rw=3, sector=30266412732608, nr_sectors = 8388600 limit=2048 [ 1106.166527][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.166527][T12867] loop1: rw=3, sector=30266421121208, nr_sectors = 8388600 limit=2048 [ 1106.183699][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.183699][T12867] loop1: rw=3, sector=30266429509808, nr_sectors = 8388600 limit=2048 [ 1106.198764][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.198764][T12867] loop1: rw=3, sector=30266437898408, nr_sectors = 8388600 limit=2048 [ 1106.256978][ T5198] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1106.269923][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.269923][T12867] loop1: rw=3, sector=30266446287008, nr_sectors = 8388600 limit=2048 [ 1106.285965][T12867] syz.1.2026: attempt to access beyond end of device [ 1106.285965][T12867] loop1: rw=3, sector=30266454675608, nr_sectors = 8388600 limit=2048 [ 1106.462138][ T5198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.472585][ T5198] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1106.483492][ T5198] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1106.508166][ T5198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1106.525285][ T5198] usb 3-1: SerialNumber: syz [ 1106.567073][ T53] team0 (unregistering): Port device team_slave_1 removed [ 1106.647302][ T53] team0 (unregistering): Port device team_slave_0 removed [ 1106.745012][ T5198] usb 3-1: 0:2 : does not exist [ 1106.778513][ T5198] usb 3-1: USB disconnect, device number 72 [ 1107.306157][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4163'. [ 1108.790228][ T47] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1109.194421][T19557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1109.230231][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 1109.238269][T19557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1109.239696][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1109.261428][T19557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1109.264181][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1109.288703][ T47] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1c.48 [ 1109.298457][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.306575][ T47] usb 4-1: Product: syz [ 1109.317401][ T47] usb 4-1: Manufacturer: syz [ 1109.330281][ T47] usb 4-1: SerialNumber: syz [ 1109.337473][ T47] usb 4-1: config 0 descriptor?? [ 1109.371530][T19557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1109.571602][ T47] ath6kl: Failed to submit usb control message: -71 [ 1109.578322][ T47] ath6kl: unable to send the bmi data to the device: -71 [ 1109.600127][ T47] ath6kl: Unable to send get target info: -71 [ 1109.620685][ T47] ath6kl: Failed to init ath6kl core: -71 [ 1109.630746][ T47] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1109.637651][T19583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1109.676206][ T47] usb 4-1: USB disconnect, device number 46 [ 1109.682325][T19583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1109.703890][T19820] loop2: detected capacity change from 0 to 256 [ 1109.730436][T19820] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1109.734497][T19583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1110.237276][T19583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1110.352387][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4179'. [ 1110.674688][T19557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.763801][T19557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.796329][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.803618][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.836511][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.843764][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.083540][T12867] bio_check_eod: 49431 callbacks suppressed [ 1111.083567][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.083567][T12867] loop1: rw=3, sector=30681119950808, nr_sectors = 8388600 limit=2048 [ 1111.240368][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.240368][T12867] loop1: rw=3, sector=30681128339408, nr_sectors = 8388600 limit=2048 [ 1111.333258][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.333258][T12867] loop1: rw=3, sector=30681136728008, nr_sectors = 8388600 limit=2048 [ 1111.407004][T19583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.417454][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.417454][T12867] loop1: rw=3, sector=30681145116608, nr_sectors = 8388600 limit=2048 [ 1111.492090][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.492090][T12867] loop1: rw=3, sector=30681153505208, nr_sectors = 8388600 limit=2048 [ 1111.493286][T19583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.563578][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.563578][T12867] loop1: rw=3, sector=30681161893808, nr_sectors = 8388600 limit=2048 [ 1111.603680][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.603680][T12867] loop1: rw=3, sector=30681170282408, nr_sectors = 8388600 limit=2048 [ 1111.622675][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.622675][T12867] loop1: rw=3, sector=30681178671008, nr_sectors = 8388600 limit=2048 [ 1111.653019][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.660227][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.692600][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.699731][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.729612][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.729612][T12867] loop1: rw=3, sector=30681187059608, nr_sectors = 8388600 limit=2048 [ 1111.803113][T12867] syz.1.2026: attempt to access beyond end of device [ 1111.803113][T12867] loop1: rw=3, sector=30681195448208, nr_sectors = 8388600 limit=2048 [ 1112.161121][T19557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.788647][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1113.541174][T19875] loop2: detected capacity change from 0 to 256 [ 1113.669854][T19875] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1113.796091][T19881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.828916][T19557] veth0_vlan: entered promiscuous mode [ 1114.113671][T19583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.226969][T19884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4196'. [ 1114.686484][T19557] veth1_vlan: entered promiscuous mode [ 1114.785375][T19557] veth0_macvtap: entered promiscuous mode [ 1114.819583][T19557] veth1_macvtap: entered promiscuous mode [ 1114.881362][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.920174][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.950483][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.985829][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.003235][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.024093][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.042936][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.055493][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.067454][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.079030][T19902] loop2: detected capacity change from 0 to 256 [ 1115.082696][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.109282][T19557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.135454][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.151647][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.166130][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.219331][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.229396][ T29] audit: type=1800 audit(1721901326.860:317): pid=19902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4201" name="bus" dev="loop2" ino=1048772 res=0 errno=0 [ 1115.270179][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.293632][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.293662][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.293685][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.293705][T19557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.293726][T19557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.301164][T19557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.318333][T19557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.318384][T19557] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.318423][T19557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.318461][T19557] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.406453][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.406528][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.698024][T19583] veth0_vlan: entered promiscuous mode [ 1115.832155][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4205'. [ 1115.870282][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.887114][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.916603][T19583] veth1_vlan: entered promiscuous mode [ 1115.977362][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.003214][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.065436][T19583] veth0_macvtap: entered promiscuous mode [ 1116.090218][T12867] bio_check_eod: 21152 callbacks suppressed [ 1116.090241][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.090241][T12867] loop1: rw=3, sector=30858639504008, nr_sectors = 8388600 limit=2048 [ 1116.105447][T19583] veth1_macvtap: entered promiscuous mode [ 1116.156117][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.156117][T12867] loop1: rw=3, sector=30858647892608, nr_sectors = 8388600 limit=2048 [ 1116.228841][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.265220][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.297372][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.310125][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.310125][T12867] loop1: rw=3, sector=30858656281208, nr_sectors = 8388600 limit=2048 [ 1116.326332][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.351913][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.410427][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.423896][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.423896][T12867] loop1: rw=3, sector=30858664669808, nr_sectors = 8388600 limit=2048 [ 1116.462679][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.473238][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.483185][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.493747][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.503610][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1116.522821][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.538509][T19927] loop2: detected capacity change from 0 to 256 [ 1116.546482][T19583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.556281][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.556281][T12867] loop1: rw=3, sector=30858673058408, nr_sectors = 8388600 limit=2048 [ 1116.574803][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.574803][T12867] loop1: rw=3, sector=30858681447008, nr_sectors = 8388600 limit=2048 [ 1116.589660][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.589660][T12867] loop1: rw=3, sector=30858689835608, nr_sectors = 8388600 limit=2048 [ 1116.605197][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.605197][T12867] loop1: rw=3, sector=30858698224208, nr_sectors = 8388600 limit=2048 [ 1116.625070][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.625070][T12867] loop1: rw=3, sector=30858706612808, nr_sectors = 8388600 limit=2048 [ 1116.644583][T19927] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1116.674817][T19924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1116.892640][T12867] syz.1.2026: attempt to access beyond end of device [ 1116.892640][T12867] loop1: rw=3, sector=30858715001408, nr_sectors = 8388600 limit=2048 [ 1117.090470][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.157665][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.212902][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.268374][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.328085][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.403673][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.454401][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.470658][ T5182] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1117.499018][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.518884][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.529412][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.539272][T19583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1117.550404][T19583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1117.562579][T19583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.589047][T19583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.610690][T19583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.619411][T19583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.653097][T19583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.694581][ T5182] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.725772][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4216'. [ 1117.734636][ T5182] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.736342][ T5182] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1117.789002][ T5182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1117.819901][ T5182] usb 4-1: SerialNumber: syz [ 1117.979599][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.015524][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.071204][ T5182] usb 4-1: 0:2 : does not exist [ 1118.076875][ T5182] usb 4-1: unit 255 not found! [ 1118.112152][ T5182] usb 4-1: USB disconnect, device number 47 [ 1118.185595][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.208598][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.230463][T19958] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1118.237002][T19958] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1118.307728][T19958] vhci_hcd vhci_hcd.0: Device attached [ 1118.588052][ T47] usb 9-1: new high-speed USB device number 5 using vhci_hcd [ 1118.643277][T19964] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 1119.014168][T19959] vhci_hcd: connection reset by peer [ 1119.078413][ T2476] vhci_hcd: stop threads [ 1119.114001][ T2476] vhci_hcd: release socket [ 1119.130506][ T2476] vhci_hcd: disconnect device [ 1119.696923][T19980] loop2: detected capacity change from 0 to 256 [ 1119.759255][T19980] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1120.667511][T19989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4229'. [ 1121.601899][T19987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1121.625163][T12867] bio_check_eod: 22865 callbacks suppressed [ 1121.625183][T12867] syz.1.2026: attempt to access beyond end of device [ 1121.625183][T12867] loop1: rw=3, sector=31050528729008, nr_sectors = 8388600 limit=2048 [ 1121.648081][T19989] veth0_vlan: entered allmulticast mode [ 1121.750550][T12867] syz.1.2026: attempt to access beyond end of device [ 1121.750550][T12867] loop1: rw=3, sector=31050537117608, nr_sectors = 8388600 limit=2048 [ 1121.836780][T12867] syz.1.2026: attempt to access beyond end of device [ 1121.836780][T12867] loop1: rw=3, sector=31050545506208, nr_sectors = 8388600 limit=2048 [ 1121.862395][T12867] syz.1.2026: attempt to access beyond end of device [ 1121.862395][T12867] loop1: rw=3, sector=31050553894808, nr_sectors = 8388600 limit=2048 [ 1121.934612][T12867] syz.1.2026: attempt to access beyond end of device [ 1121.934612][T12867] loop1: rw=3, sector=31050562283408, nr_sectors = 8388600 limit=2048 [ 1122.030295][T19998] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4230'. [ 1122.043894][T12867] syz.1.2026: attempt to access beyond end of device [ 1122.043894][T12867] loop1: rw=3, sector=31050570672008, nr_sectors = 8388600 limit=2048 [ 1122.144784][T20006] fuse: Invalid rootmode [ 1122.166779][T12867] syz.1.2026: attempt to access beyond end of device [ 1122.166779][T12867] loop1: rw=3, sector=31050579060608, nr_sectors = 8388600 limit=2048 [ 1122.203190][T12867] syz.1.2026: attempt to access beyond end of device [ 1122.203190][T12867] loop1: rw=3, sector=31050587449208, nr_sectors = 8388600 limit=2048 [ 1122.248748][T12867] syz.1.2026: attempt to access beyond end of device [ 1122.248748][T12867] loop1: rw=3, sector=31050595837808, nr_sectors = 8388600 limit=2048 [ 1122.315237][T12867] syz.1.2026: attempt to access beyond end of device [ 1122.315237][T12867] loop1: rw=3, sector=31050604226408, nr_sectors = 8388600 limit=2048 [ 1123.043550][T20033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4247'. [ 1123.316318][T20039] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4250'. [ 1123.730577][ T47] vhci_hcd: vhci_device speed not set [ 1125.458515][T20085] netlink: 'syz.2.4266': attribute type 29 has an invalid length. [ 1125.504946][T20085] netlink: 'syz.2.4266': attribute type 29 has an invalid length. [ 1125.654125][T20087] veth0_vlan: entered allmulticast mode [ 1125.784740][T20089] loop2: detected capacity change from 0 to 256 [ 1125.822368][T20089] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1126.804869][T12867] bio_check_eod: 20708 callbacks suppressed [ 1126.804911][T12867] syz.1.2026: attempt to access beyond end of device [ 1126.804911][T12867] loop1: rw=3, sector=31224323743808, nr_sectors = 8388600 limit=2048 [ 1127.382631][T20072] loop4: detected capacity change from 0 to 32768 [ 1127.456371][T20072] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4261 (20072) [ 1127.512005][T12867] syz.1.2026: attempt to access beyond end of device [ 1127.512005][T12867] loop1: rw=3, sector=31224332132408, nr_sectors = 8388600 limit=2048 [ 1127.561761][T12867] syz.1.2026: attempt to access beyond end of device [ 1127.561761][T12867] loop1: rw=3, sector=31224340521008, nr_sectors = 8388600 limit=2048 [ 1127.576802][T20072] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1127.618757][T20072] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 1127.641269][T20072] BTRFS info (device loop4): using free-space-tree [ 1127.669649][T12867] syz.1.2026: attempt to access beyond end of device [ 1127.669649][T12867] loop1: rw=3, sector=31224348909608, nr_sectors = 8388600 limit=2048 [ 1127.694937][T12867] syz.1.2026: attempt to access beyond end of device [ 1127.694937][T12867] loop1: rw=3, sector=31224357298208, nr_sectors = 8388600 limit=2048 [ 1127.746922][T12867] syz.1.2026: attempt to access beyond end of device [ 1127.746922][T12867] loop1: rw=3, sector=31224365686808, nr_sectors = 8388600 limit=2048 [ 1127.763071][T12867] syz.1.2026: attempt to access beyond end of device [ 1127.763071][T12867] loop1: rw=3, sector=31224374075408, nr_sectors = 8388600 limit=2048 [ 1127.779100][T12867] syz.1.2026: attempt to access beyond end of device [ 1127.779100][T12867] loop1: rw=3, sector=31224382464008, nr_sectors = 8388600 limit=2048 [ 1127.875196][T12867] syz.1.2026: attempt to access beyond end of device [ 1127.875196][T12867] loop1: rw=3, sector=31224390852608, nr_sectors = 8388600 limit=2048 [ 1127.891642][T20072] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1127.941050][T20072] BTRFS error (device loop4): open_ctree failed [ 1127.970344][T12867] syz.1.2026: attempt to access beyond end of device [ 1127.970344][T12867] loop1: rw=3, sector=31224399241208, nr_sectors = 8388600 limit=2048 [ 1129.329975][ T29] audit: type=1326 audit(1721901340.970:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.2.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1129.397645][ T29] audit: type=1326 audit(1721901340.970:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.2.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1129.500626][ T29] audit: type=1326 audit(1721901340.980:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.2.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1129.796372][ T29] audit: type=1326 audit(1721901340.980:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.2.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1129.893923][ T29] audit: type=1326 audit(1721901340.980:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20158 comm="syz.2.4289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1130.025684][ T29] audit: type=1326 audit(1721901341.540:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1130.135707][ T5169] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1130.161394][ T29] audit: type=1326 audit(1721901341.570:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1130.186312][ T29] audit: type=1326 audit(1721901341.570:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1130.213253][ T29] audit: type=1326 audit(1721901341.570:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1130.240313][ T29] audit: type=1326 audit(1721901341.570:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20169 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7098d75f19 code=0x7ffc0000 [ 1130.432206][ T5169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.450124][ T5169] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1130.480121][ T5169] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1130.489639][ T5169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.538967][ T5169] usb 5-1: config 0 descriptor?? [ 1130.970164][ T5171] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1131.011621][ T5169] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1131.041491][ T5169] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 1131.082140][ T5169] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1131.131482][T20174] loop3: detected capacity change from 0 to 1024 [ 1131.158204][T20189] vlan2: entered promiscuous mode [ 1131.195397][T20190] loop2: detected capacity change from 0 to 1024 [ 1131.237496][ T5171] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.260054][ T5171] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1131.312287][ T5171] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1131.322060][ T5169] usb 5-1: USB disconnect, device number 55 [ 1131.345330][ T5171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1131.401001][ T5171] usb 2-1: SerialNumber: syz [ 1131.479816][T20176] loop5: detected capacity change from 0 to 32768 [ 1131.507947][T20176] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4296 (20176) [ 1131.811329][T12867] bio_check_eod: 20546 callbacks suppressed [ 1131.811355][T12867] syz.1.2026: attempt to access beyond end of device [ 1131.811355][T12867] loop1: rw=3, sector=31396751416808, nr_sectors = 8388600 limit=2048 [ 1131.825500][ T5171] usb 2-1: 0:2 : does not exist [ 1131.848422][T20176] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1131.858179][T12867] syz.1.2026: attempt to access beyond end of device [ 1131.858179][T12867] loop1: rw=3, sector=31396759805408, nr_sectors = 8388600 limit=2048 [ 1131.873299][T12867] syz.1.2026: attempt to access beyond end of device [ 1131.873299][T12867] loop1: rw=3, sector=31396768194008, nr_sectors = 8388600 limit=2048 [ 1131.908880][T20176] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 1131.940237][T20176] BTRFS info (device loop5): using free-space-tree [ 1131.963561][T12867] syz.1.2026: attempt to access beyond end of device [ 1131.963561][T12867] loop1: rw=3, sector=31396776582608, nr_sectors = 8388600 limit=2048 [ 1132.038588][T12867] syz.1.2026: attempt to access beyond end of device [ 1132.038588][T12867] loop1: rw=3, sector=31396784971208, nr_sectors = 8388600 limit=2048 [ 1132.144472][T12867] syz.1.2026: attempt to access beyond end of device [ 1132.144472][T12867] loop1: rw=3, sector=31396793359808, nr_sectors = 8388600 limit=2048 [ 1132.240312][T12867] syz.1.2026: attempt to access beyond end of device [ 1132.240312][T12867] loop1: rw=3, sector=31396801748408, nr_sectors = 8388600 limit=2048 [ 1132.279491][T20176] BTRFS info (device loop5): rebuilding free space tree [ 1132.354873][T12867] syz.1.2026: attempt to access beyond end of device [ 1132.354873][T12867] loop1: rw=3, sector=31396810137008, nr_sectors = 8388600 limit=2048 [ 1132.452097][T12867] syz.1.2026: attempt to access beyond end of device [ 1132.452097][T12867] loop1: rw=3, sector=31396818525608, nr_sectors = 8388600 limit=2048 [ 1132.490108][ T5171] usb 2-1: USB disconnect, device number 48 [ 1132.501303][T12867] syz.1.2026: attempt to access beyond end of device [ 1132.501303][T12867] loop1: rw=3, sector=31396826914208, nr_sectors = 8388600 limit=2048 [ 1132.613697][T19583] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1132.831826][T20228] loop3: detected capacity change from 0 to 256 [ 1133.478115][ C0] eth0: bad gso: type: 1, size: 1408 [ 1134.320430][T17608] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1134.530512][T17608] usb 5-1: Using ep0 maxpacket: 8 [ 1134.542212][T17608] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1134.572124][T17608] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1134.607178][T17608] usb 5-1: config 1 has no interface number 1 [ 1134.631577][T17608] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1134.720968][T17608] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1134.761569][T17608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.824700][T17608] usb 5-1: Manufacturer: ೵侻ਙȯﺨ╹沛ꁋ [ 1135.154185][T17608] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1135.211404][T17608] usb 5-1: USB disconnect, device number 56 [ 1135.321369][ T5171] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1135.492588][ T5171] usb 4-1: device descriptor read/64, error -71 [ 1135.768598][T20272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4326'. [ 1135.790245][ T5171] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1135.808037][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4326'. [ 1135.823483][T20274] loop4: detected capacity change from 0 to 256 [ 1135.870137][T17608] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1135.881705][T20274] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1136.130331][ T5171] usb 4-1: device descriptor read/64, error -71 [ 1136.234632][T17608] usb 6-1: Using ep0 maxpacket: 8 [ 1136.242109][T17608] usb 6-1: descriptor type invalid, skip [ 1136.247768][T17608] usb 6-1: descriptor type invalid, skip [ 1136.270167][ T5171] usb usb4-port1: attempt power cycle [ 1136.310273][T17608] usb 6-1: config 1 has an invalid interface number: 3 but max is 2 [ 1136.318325][T17608] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.372662][T17608] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1136.428713][T17608] usb 6-1: config 1 has no interface number 1 [ 1136.440083][T17608] usb 6-1: too many endpoints for config 1 interface 3 altsetting 0: 225, using maximum allowed: 30 [ 1136.481146][T17608] usb 6-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1136.569406][T17608] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1136.590329][T17608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.630185][T17608] usb 6-1: Product: syz [ 1136.634462][T17608] usb 6-1: Manufacturer: syz [ 1136.639075][T17608] usb 6-1: SerialNumber: syz [ 1136.830274][T12867] bio_check_eod: 35463 callbacks suppressed [ 1136.830299][T12867] syz.1.2026: attempt to access beyond end of device [ 1136.830299][T12867] loop1: rw=3, sector=31694320224608, nr_sectors = 8388600 limit=2048 [ 1136.860257][ T5171] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1136.875300][T12867] syz.1.2026: attempt to access beyond end of device [ 1136.875300][T12867] loop1: rw=3, sector=31694328613208, nr_sectors = 8388600 limit=2048 [ 1136.920962][ T5171] usb 4-1: device descriptor read/8, error -71 [ 1136.940172][T12867] syz.1.2026: attempt to access beyond end of device [ 1136.940172][T12867] loop1: rw=3, sector=31694337001808, nr_sectors = 8388600 limit=2048 [ 1136.980193][T12867] syz.1.2026: attempt to access beyond end of device [ 1136.980193][T12867] loop1: rw=3, sector=31694345390408, nr_sectors = 8388600 limit=2048 [ 1137.040183][T12867] syz.1.2026: attempt to access beyond end of device [ 1137.040183][T12867] loop1: rw=3, sector=31694353779008, nr_sectors = 8388600 limit=2048 [ 1137.070491][T12867] syz.1.2026: attempt to access beyond end of device [ 1137.070491][T12867] loop1: rw=3, sector=31694362167608, nr_sectors = 8388600 limit=2048 [ 1137.136722][T12867] syz.1.2026: attempt to access beyond end of device [ 1137.136722][T12867] loop1: rw=3, sector=31694370556208, nr_sectors = 8388600 limit=2048 [ 1137.180953][ T25] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1137.193762][T12867] syz.1.2026: attempt to access beyond end of device [ 1137.193762][T12867] loop1: rw=3, sector=31694378944808, nr_sectors = 8388600 limit=2048 [ 1137.222698][ T5171] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1137.274788][T12867] syz.1.2026: attempt to access beyond end of device [ 1137.274788][T12867] loop1: rw=3, sector=31694387333408, nr_sectors = 8388600 limit=2048 [ 1137.303897][ T5171] usb 4-1: device descriptor read/8, error -71 [ 1137.349826][T12867] syz.1.2026: attempt to access beyond end of device [ 1137.349826][T12867] loop1: rw=3, sector=31694395722008, nr_sectors = 8388600 limit=2048 [ 1137.440556][ T5171] usb usb4-port1: unable to enumerate USB device [ 1137.494179][T17608] usb 6-1: 0:2 : does not exist [ 1138.018915][T20296] loop2: detected capacity change from 0 to 256 [ 1138.020166][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1138.026865][T20296] exfat: Unknown parameter 'dm00000000000230' [ 1138.050167][T17608] hub 6-1:1.3: bad descriptor, ignoring hub [ 1138.066569][T17608] hub 6-1:1.3: probe with driver hub failed with error -5 [ 1138.069880][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1138.086216][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1138.097223][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1138.108556][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1138.133470][T17608] usb 6-1: USB disconnect, device number 53 [ 1138.180187][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1138.199513][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.816470][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 1138.824852][ T25] usbtmc 1-1:16.0: can't read capabilities [ 1139.010869][T20311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4340'. [ 1139.021024][ T5182] usb 1-1: USB disconnect, device number 63 [ 1139.028606][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4340'. [ 1139.171120][T17608] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1139.438357][T20317] loop3: detected capacity change from 0 to 256 [ 1139.456276][T17608] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.477740][T17608] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1139.497893][T17608] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1139.511862][T20319] loop2: detected capacity change from 0 to 256 [ 1139.518527][T17608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1139.539117][T17608] usb 2-1: SerialNumber: syz [ 1139.545950][T20319] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1140.094678][T20322] loop3: detected capacity change from 0 to 512 [ 1140.104948][T20322] EXT4-fs: Ignoring removed i_version option [ 1140.727276][T17608] usb 2-1: 0:2 : does not exist [ 1140.741651][T17608] usb 2-1: unit 255 not found! [ 1140.770543][T17608] usb 2-1: USB disconnect, device number 49 [ 1140.880527][T13478] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1141.110485][T13478] usb 6-1: Using ep0 maxpacket: 32 [ 1141.127600][T13478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1141.148628][T13478] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1141.159186][T13478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.166306][T20347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4353'. [ 1141.182339][T13478] usb 6-1: Product: syz [ 1141.186496][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4353'. [ 1141.214490][T13478] usb 6-1: Manufacturer: syz [ 1141.219124][T13478] usb 6-1: SerialNumber: syz [ 1141.234426][T13478] usb 6-1: config 0 descriptor?? [ 1141.250282][T13478] as10x_usb: device has been detected [ 1141.261047][T13478] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1141.314600][T13478] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1141.336903][T13478] as10x_usb: error during firmware upload part1 [ 1141.350934][T13478] Registered device Abilis Systems DVB-Titan [ 1141.414096][T20352] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1141.426646][T20352] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1141.455203][T13478] usb 6-1: USB disconnect, device number 54 [ 1141.501963][T13478] Unregistered device Abilis Systems DVB-Titan [ 1141.772581][T13478] as10x_usb: device has been disconnected [ 1141.780867][T20352] vhci_hcd vhci_hcd.0: Device attached [ 1141.840074][T12867] bio_check_eod: 30617 callbacks suppressed [ 1141.840103][T12867] syz.1.2026: attempt to access beyond end of device [ 1141.840103][T12867] loop1: rw=3, sector=31951237876808, nr_sectors = 8388600 limit=2048 [ 1141.875426][T20359] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 1142.162222][ T5171] usb 11-1: new high-speed USB device number 4 using vhci_hcd [ 1142.214805][T12867] syz.1.2026: attempt to access beyond end of device [ 1142.214805][T12867] loop1: rw=3, sector=31951246265408, nr_sectors = 8388600 limit=2048 [ 1142.525365][T12867] syz.1.2026: attempt to access beyond end of device [ 1142.525365][T12867] loop1: rw=3, sector=31951254654008, nr_sectors = 8388600 limit=2048 [ 1142.551027][T20353] vhci_hcd: connection reset by peer [ 1142.561706][T12867] syz.1.2026: attempt to access beyond end of device [ 1142.561706][T12867] loop1: rw=3, sector=31951263042608, nr_sectors = 8388600 limit=2048 [ 1142.577769][T12867] syz.1.2026: attempt to access beyond end of device [ 1142.577769][T12867] loop1: rw=3, sector=31951271431208, nr_sectors = 8388600 limit=2048 [ 1142.592760][ T2476] vhci_hcd: stop threads [ 1142.597030][ T2476] vhci_hcd: release socket [ 1142.601682][ T2476] vhci_hcd: disconnect device [ 1142.605419][T12867] syz.1.2026: attempt to access beyond end of device [ 1142.605419][T12867] loop1: rw=3, sector=31951279819808, nr_sectors = 8388600 limit=2048 [ 1142.635803][T12867] syz.1.2026: attempt to access beyond end of device [ 1142.635803][T12867] loop1: rw=3, sector=31951288208408, nr_sectors = 8388600 limit=2048 [ 1142.695467][T12867] syz.1.2026: attempt to access beyond end of device [ 1142.695467][T12867] loop1: rw=3, sector=31951296597008, nr_sectors = 8388600 limit=2048 [ 1142.761966][T12867] syz.1.2026: attempt to access beyond end of device [ 1142.761966][T12867] loop1: rw=3, sector=31951304985608, nr_sectors = 8388600 limit=2048 [ 1142.792861][T12867] syz.1.2026: attempt to access beyond end of device [ 1142.792861][T12867] loop1: rw=3, sector=31951313374208, nr_sectors = 8388600 limit=2048 [ 1143.060871][T17608] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1143.130331][T13478] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1143.220804][T17608] usb 3-1: device descriptor read/64, error -71 [ 1143.314840][T20381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4366'. [ 1143.342550][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4366'. [ 1143.360205][T13478] usb 6-1: Using ep0 maxpacket: 8 [ 1143.382093][T13478] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1143.410924][T13478] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1143.435733][T13478] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1143.462216][T13478] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1143.492579][T13478] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1143.512059][T13478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.534155][T17608] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1143.713352][T17608] usb 3-1: device descriptor read/64, error -71 [ 1143.761896][T13478] usb 6-1: GET_CAPABILITIES returned 0 [ 1143.772318][T13478] usbtmc 6-1:16.0: can't read capabilities [ 1143.860958][T17608] usb usb3-port1: attempt power cycle [ 1143.981498][T13478] usb 6-1: USB disconnect, device number 55 [ 1144.300396][T17608] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1144.342155][T17608] usb 3-1: device descriptor read/8, error -71 [ 1144.620164][T17608] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1144.660962][T17608] usb 3-1: device descriptor read/8, error -71 [ 1144.801860][T17608] usb usb3-port1: unable to enumerate USB device [ 1144.949867][T20406] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4375'. [ 1145.298328][ C0] eth0: bad gso: type: 1, size: 1408 [ 1145.451160][T20417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4380'. [ 1145.500183][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 1145.572897][T20421] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1145.579459][T20421] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1145.632646][T20421] vhci_hcd vhci_hcd.0: Device attached [ 1146.024945][T20424] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 1146.410361][T20422] vhci_hcd: connection closed [ 1146.430786][ T35] vhci_hcd: stop threads [ 1146.494349][ T35] vhci_hcd: release socket [ 1146.526393][ T35] vhci_hcd: disconnect device [ 1146.740188][ T5182] vhci_hcd: vhci_device speed not set [ 1146.853945][T12867] bio_check_eod: 46024 callbacks suppressed [ 1146.853969][T12867] syz.1.2026: attempt to access beyond end of device [ 1146.853969][T12867] loop1: rw=3, sector=32337398689208, nr_sectors = 8388600 limit=2048 [ 1146.884738][T20444] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4388'. [ 1146.953567][T12867] syz.1.2026: attempt to access beyond end of device [ 1146.953567][T12867] loop1: rw=3, sector=32337407077808, nr_sectors = 8388600 limit=2048 [ 1146.968584][T12867] syz.1.2026: attempt to access beyond end of device [ 1146.968584][T12867] loop1: rw=3, sector=32337415466408, nr_sectors = 8388600 limit=2048 [ 1146.994941][T12867] syz.1.2026: attempt to access beyond end of device [ 1146.994941][T12867] loop1: rw=3, sector=32337423855008, nr_sectors = 8388600 limit=2048 [ 1147.047868][T12867] syz.1.2026: attempt to access beyond end of device [ 1147.047868][T12867] loop1: rw=3, sector=32337432243608, nr_sectors = 8388600 limit=2048 [ 1147.062798][T12867] syz.1.2026: attempt to access beyond end of device [ 1147.062798][T12867] loop1: rw=3, sector=32337440632208, nr_sectors = 8388600 limit=2048 [ 1147.085572][T12867] syz.1.2026: attempt to access beyond end of device [ 1147.085572][T12867] loop1: rw=3, sector=32337449020808, nr_sectors = 8388600 limit=2048 [ 1147.135482][T12867] syz.1.2026: attempt to access beyond end of device [ 1147.135482][T12867] loop1: rw=3, sector=32337457409408, nr_sectors = 8388600 limit=2048 [ 1147.239299][T12867] syz.1.2026: attempt to access beyond end of device [ 1147.239299][T12867] loop1: rw=3, sector=32337465798008, nr_sectors = 8388600 limit=2048 [ 1147.323717][T12867] syz.1.2026: attempt to access beyond end of device [ 1147.323717][T12867] loop1: rw=3, sector=32337474186608, nr_sectors = 8388600 limit=2048 [ 1147.401342][ T5171] vhci_hcd: vhci_device speed not set [ 1147.880305][ T5198] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1147.881198][T17607] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1148.223286][ T5198] usb 1-1: Using ep0 maxpacket: 8 [ 1148.350332][T17607] usb 2-1: Using ep0 maxpacket: 8 [ 1148.546586][T17607] usb 2-1: descriptor type invalid, skip [ 1148.557502][T17607] usb 2-1: descriptor type invalid, skip [ 1148.652001][ T5198] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1148.821993][ T5198] usb 1-1: config 0 has no interface number 0 [ 1148.858990][ T5198] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1148.883301][T17607] usb 2-1: config 1 has an invalid interface number: 3 but max is 2 [ 1148.914243][T17607] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.930343][ T5198] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1148.969378][ T5198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.978397][T17607] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1149.015409][ T5198] usb 1-1: config 0 descriptor?? [ 1149.020144][T17607] usb 2-1: config 1 has no interface number 1 [ 1149.026486][T17607] usb 2-1: too many endpoints for config 1 interface 3 altsetting 0: 225, using maximum allowed: 30 [ 1149.043297][ T5198] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1149.083291][T17607] usb 2-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1149.164516][ T4496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1149.166177][T17607] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1149.183373][ T4496] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1149.194925][ T4496] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1149.200082][T17607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.209865][T17607] usb 2-1: Product: syz [ 1149.217552][ T4496] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1149.224882][T17607] usb 2-1: Manufacturer: syz [ 1149.229633][T17607] usb 2-1: SerialNumber: syz [ 1149.229894][ T4496] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1149.235160][T20468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4396'. [ 1149.250425][ T5198] usb 1-1: USB disconnect, device number 64 [ 1149.268171][ T4496] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1150.500212][T13478] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1150.540175][ T5198] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1150.712496][T13478] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.752475][T13478] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1150.783903][ T5198] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1150.800275][T13478] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1150.817877][ T5198] usb 1-1: config 0 has no interface number 0 [ 1150.837116][ T5198] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1150.850221][T13478] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1150.869985][T13478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.880187][ T5198] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1150.913741][ T5198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.932486][T20475] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1150.965387][T20494] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1150.971952][T20494] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1150.991636][T13478] hub 6-1:1.0: bad descriptor, ignoring hub [ 1150.998734][ T5198] usb 1-1: config 0 descriptor?? [ 1151.031505][T13478] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1151.039718][ T5198] usb 1-1: can't set config #0, error -71 [ 1151.050078][T13478] cdc_wdm 6-1:1.0: skipping garbage [ 1151.055310][T13478] cdc_wdm 6-1:1.0: skipping garbage [ 1151.062482][ T5198] usb 1-1: USB disconnect, device number 65 [ 1151.107681][T20494] vhci_hcd vhci_hcd.0: Device attached [ 1151.150333][T13478] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1151.176944][T13478] cdc_wdm 6-1:1.0: Unknown control protocol [ 1151.196883][T20466] chnl_net:caif_netlink_parms(): no params data found [ 1151.251329][T13478] usb 6-1: USB disconnect, device number 56 [ 1151.339111][T10921] Bluetooth: hci7: command tx timeout [ 1151.360361][T17607] usb 2-1: 0:2 : does not exist [ 1151.380156][ T47] usb 15-1: new high-speed USB device number 7 using vhci_hcd [ 1151.516278][T20503] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 1151.781431][T17607] hub 2-1:1.3: bad descriptor, ignoring hub [ 1151.788653][T17607] hub 2-1:1.3: probe with driver hub failed with error -5 [ 1151.823034][T20495] vhci_hcd: connection reset by peer [ 1151.838978][ T12] vhci_hcd: stop threads [ 1151.841554][T17607] usb 2-1: USB disconnect, device number 50 [ 1151.843409][ T5198] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1151.860314][T12867] bio_check_eod: 17260 callbacks suppressed [ 1151.860641][T12867] syz.1.2026: attempt to access beyond end of device [ 1151.860641][T12867] loop1: rw=3, sector=32482269811208, nr_sectors = 8388600 limit=2048 [ 1151.873291][ T12] vhci_hcd: release socket [ 1151.887436][T12867] syz.1.2026: attempt to access beyond end of device [ 1151.887436][T12867] loop1: rw=3, sector=32482278199808, nr_sectors = 8388600 limit=2048 [ 1151.943800][ T12] vhci_hcd: disconnect device [ 1151.959853][T12867] syz.1.2026: attempt to access beyond end of device [ 1151.959853][T12867] loop1: rw=3, sector=32482286588408, nr_sectors = 8388600 limit=2048 [ 1151.976424][T12867] syz.1.2026: attempt to access beyond end of device [ 1151.976424][T12867] loop1: rw=3, sector=32482294977008, nr_sectors = 8388600 limit=2048 [ 1151.993068][T12867] syz.1.2026: attempt to access beyond end of device [ 1151.993068][T12867] loop1: rw=3, sector=32482303365608, nr_sectors = 8388600 limit=2048 [ 1152.011132][T12867] syz.1.2026: attempt to access beyond end of device [ 1152.011132][T12867] loop1: rw=3, sector=32482311754208, nr_sectors = 8388600 limit=2048 [ 1152.026566][T12867] syz.1.2026: attempt to access beyond end of device [ 1152.026566][T12867] loop1: rw=3, sector=32482320142808, nr_sectors = 8388600 limit=2048 [ 1152.044810][T12867] syz.1.2026: attempt to access beyond end of device [ 1152.044810][T12867] loop1: rw=3, sector=32482328531408, nr_sectors = 8388600 limit=2048 [ 1152.061338][ T5198] usb 1-1: Using ep0 maxpacket: 32 [ 1152.073272][ T5198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1152.083486][T12867] syz.1.2026: attempt to access beyond end of device [ 1152.083486][T12867] loop1: rw=3, sector=32482336920008, nr_sectors = 8388600 limit=2048 [ 1152.099508][T12867] syz.1.2026: attempt to access beyond end of device [ 1152.099508][T12867] loop1: rw=3, sector=32482345308608, nr_sectors = 8388600 limit=2048 [ 1152.117362][ T5198] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1152.134317][ T5198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.142568][T13478] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1152.162227][T20466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.172399][ T5198] usb 1-1: Product: syz [ 1152.172515][T20466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.176565][ T5198] usb 1-1: Manufacturer: syz [ 1152.189578][T20466] bridge_slave_0: entered allmulticast mode [ 1152.199047][T20466] bridge_slave_0: entered promiscuous mode [ 1152.216375][T20466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.228186][ T5198] usb 1-1: SerialNumber: syz [ 1152.230240][T20466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.244381][ T5198] usb 1-1: config 0 descriptor?? [ 1152.250286][T20466] bridge_slave_1: entered allmulticast mode [ 1152.258035][T20466] bridge_slave_1: entered promiscuous mode [ 1152.273996][ T5198] as10x_usb: device has been detected [ 1152.301166][ T5198] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1152.334723][T13478] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.359558][ C0] eth0: bad gso: type: 1, size: 1408 [ 1152.365431][T13478] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1152.394013][ T5198] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1152.413414][T13478] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1152.451866][ T5198] as10x_usb: error during firmware upload part1 [ 1152.466467][T13478] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1152.483909][ T5198] Registered device Abilis Systems DVB-Titan [ 1152.499372][T13478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.511089][T20466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.520746][ T5198] usb 1-1: USB disconnect, device number 66 [ 1152.558413][T20466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.580575][T13478] usb 6-1: can't set config #1, error -71 [ 1152.605448][ T5198] Unregistered device Abilis Systems DVB-Titan [ 1152.621312][T13478] usb 6-1: USB disconnect, device number 57 [ 1152.634170][ T5198] as10x_usb: device has been disconnected [ 1152.798579][T20514] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4409'. [ 1152.829224][T20466] team0: Port device team_slave_0 added [ 1153.205305][T20466] team0: Port device team_slave_1 added [ 1153.450168][T10921] Bluetooth: hci7: command tx timeout [ 1153.945809][T20466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.002264][T20466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.038987][T20466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.068078][T20466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.075479][T20466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.105627][T20466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.549958][T20466] hsr_slave_0: entered promiscuous mode [ 1154.633435][T20466] hsr_slave_1: entered promiscuous mode [ 1154.660324][T20466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1154.710540][T20466] Cannot create hsr debugfs directory [ 1154.920277][ T5198] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1155.130130][ T5198] usb 1-1: Using ep0 maxpacket: 8 [ 1155.155780][ T5198] usb 1-1: descriptor type invalid, skip [ 1155.194544][ T5198] usb 1-1: descriptor type invalid, skip [ 1155.218699][ T5198] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 1155.247595][ T5198] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.286685][ T5198] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1155.308106][ T5198] usb 1-1: config 1 has no interface number 1 [ 1155.340249][ T5198] usb 1-1: too many endpoints for config 1 interface 3 altsetting 0: 225, using maximum allowed: 30 [ 1155.397940][ T5198] usb 1-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1155.475537][ T5198] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1155.490184][ T5198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.492343][T10921] Bluetooth: hci7: command tx timeout [ 1155.507681][ T5198] usb 1-1: Product: syz [ 1155.512716][ T5198] usb 1-1: Manufacturer: syz [ 1155.517528][ T5198] usb 1-1: SerialNumber: syz [ 1156.520464][ T47] vhci_hcd: vhci_device speed not set [ 1156.678434][T20466] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.876020][T12867] bio_check_eod: 21928 callbacks suppressed [ 1156.876047][T12867] syz.1.2026: attempt to access beyond end of device [ 1156.876047][T12867] loop1: rw=3, sector=32666298918008, nr_sectors = 8388600 limit=2048 [ 1157.082648][T12867] syz.1.2026: attempt to access beyond end of device [ 1157.082648][T12867] loop1: rw=3, sector=32666307306608, nr_sectors = 8388600 limit=2048 [ 1157.114785][T20565] loop5: detected capacity change from 0 to 128 [ 1157.137490][T12867] syz.1.2026: attempt to access beyond end of device [ 1157.137490][T12867] loop1: rw=3, sector=32666315695208, nr_sectors = 8388600 limit=2048 [ 1157.143453][T20466] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.182258][ T5198] usb 1-1: 0:2 : does not exist [ 1157.201251][T20565] vfat: Unknown parameter 'usefreE' [ 1157.282650][T12867] syz.1.2026: attempt to access beyond end of device [ 1157.282650][T12867] loop1: rw=3, sector=32666324083808, nr_sectors = 8388600 limit=2048 [ 1157.320560][T12867] syz.1.2026: attempt to access beyond end of device [ 1157.320560][T12867] loop1: rw=3, sector=32666332472408, nr_sectors = 8388600 limit=2048 [ 1157.372166][ T5198] hub 1-1:1.3: bad descriptor, ignoring hub [ 1157.398857][ T5198] hub 1-1:1.3: probe with driver hub failed with error -5 [ 1157.404834][T12867] syz.1.2026: attempt to access beyond end of device [ 1157.404834][T12867] loop1: rw=3, sector=32666340861008, nr_sectors = 8388600 limit=2048 [ 1157.476964][T12867] syz.1.2026: attempt to access beyond end of device [ 1157.476964][T12867] loop1: rw=3, sector=32666349249608, nr_sectors = 8388600 limit=2048 [ 1157.521876][T12867] syz.1.2026: attempt to access beyond end of device [ 1157.521876][T12867] loop1: rw=3, sector=32666357638208, nr_sectors = 8388600 limit=2048 [ 1157.531392][ T5198] usb 1-1: USB disconnect, device number 67 [ 1157.571017][T10921] Bluetooth: hci7: command tx timeout [ 1157.679984][T12867] syz.1.2026: attempt to access beyond end of device [ 1157.679984][T12867] loop1: rw=3, sector=32666366026808, nr_sectors = 8388600 limit=2048 [ 1157.745370][T20466] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.763811][T12867] syz.1.2026: attempt to access beyond end of device [ 1157.763811][T12867] loop1: rw=3, sector=32666374415408, nr_sectors = 8388600 limit=2048 [ 1159.660170][ T47] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1159.748518][T20466] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.880163][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 1159.892461][ T47] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.957006][ T47] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.310941][ T47] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1160.541780][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1160.555962][ T47] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1160.580486][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.621591][ T47] usb 4-1: config 0 descriptor?? [ 1160.840291][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 1160.860299][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1160.894273][T20466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1160.930601][ T47] usb 4-1: USB disconnect, device number 52 [ 1161.001019][T20466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1161.040656][T20466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1161.057573][T20592] loop5: detected capacity change from 0 to 256 [ 1161.077729][T20592] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1161.140989][T20466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1162.386764][T12867] bio_check_eod: 12657 callbacks suppressed [ 1162.386790][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.386790][T12867] loop1: rw=3, sector=32772557314208, nr_sectors = 8388600 limit=2048 [ 1162.697455][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.697455][T12867] loop1: rw=3, sector=32772565702808, nr_sectors = 8388600 limit=2048 [ 1162.762042][T20466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.784405][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.784405][T12867] loop1: rw=3, sector=32772574091408, nr_sectors = 8388600 limit=2048 [ 1162.799276][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.799276][T12867] loop1: rw=3, sector=32772582480008, nr_sectors = 8388600 limit=2048 [ 1162.817190][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.817190][T12867] loop1: rw=3, sector=32772590868608, nr_sectors = 8388600 limit=2048 [ 1162.832269][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.832269][T12867] loop1: rw=3, sector=32772599257208, nr_sectors = 8388600 limit=2048 [ 1162.847764][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.847764][T12867] loop1: rw=3, sector=32772607645808, nr_sectors = 8388600 limit=2048 [ 1162.863097][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.863097][T12867] loop1: rw=3, sector=32772616034408, nr_sectors = 8388600 limit=2048 [ 1162.882530][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.882530][T12867] loop1: rw=3, sector=32772624423008, nr_sectors = 8388600 limit=2048 [ 1162.897465][T12867] syz.1.2026: attempt to access beyond end of device [ 1162.897465][T12867] loop1: rw=3, sector=32772632811608, nr_sectors = 8388600 limit=2048 [ 1162.927578][T20466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.962456][ T924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.969668][ T924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.064408][ T924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.071654][ T924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.790145][T17608] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1163.922459][T20466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.993440][T17608] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1164.017570][T20597] loop3: detected capacity change from 0 to 32768 [ 1164.057365][T17608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1164.099476][T17608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1164.138023][T17608] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1164.150301][T13478] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1164.179485][T17608] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1164.211131][T17608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.258016][T17608] usb 2-1: config 0 descriptor?? [ 1164.299099][T20616] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1164.364012][T13478] usb 6-1: Using ep0 maxpacket: 16 [ 1164.401017][ T924] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1164.409661][T13478] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.461115][T13478] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.498658][T13478] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1164.544149][T13478] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1164.574766][T13478] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1164.631026][T13478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.660388][ T924] usb 3-1: Using ep0 maxpacket: 8 [ 1164.667993][T13478] usb 6-1: config 0 descriptor?? [ 1164.674865][ T924] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1164.695902][ T924] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1164.726491][ T924] usb 3-1: config 1 has no interface number 1 [ 1164.765405][ T924] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1164.818283][T20616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.840773][T20616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.846952][ T924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1164.908465][T20616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.919916][ T924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.959258][T20616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.965828][ T924] usb 3-1: Manufacturer: ೵侻ਙȯﺨ╹沛ꁋ [ 1165.031594][T17608] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1165.075721][T17608] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1165.119819][T17608] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1165.156886][T17608] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 1165.217984][T17608] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 1165.231027][T20466] veth0_vlan: entered promiscuous mode [ 1165.237354][ T924] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1165.240644][T20616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.287772][T17608] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1165.309768][T20466] veth1_vlan: entered promiscuous mode [ 1165.330157][ T5198] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1165.347370][T13478] usbhid 6-1:0.0: can't add hid device: -71 [ 1165.355354][T20616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.409560][T13478] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1165.419935][ T924] usb 3-1: USB disconnect, device number 77 [ 1165.440805][T20466] veth0_macvtap: entered promiscuous mode [ 1165.463808][T13478] usb 6-1: USB disconnect, device number 58 [ 1165.509746][T20466] veth1_macvtap: entered promiscuous mode [ 1165.595745][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.620683][ T5198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.640558][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.660061][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.672060][ T5198] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1165.694480][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.718441][ T5198] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1165.725991][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.770198][ T5198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1165.781970][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.799038][ T5198] usb 4-1: SerialNumber: syz [ 1165.825472][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.865598][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1165.896244][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1165.930132][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.068310][ T5198] usb 4-1: 0:2 : does not exist [ 1166.080236][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.103144][ T5198] usb 4-1: unit 5 not found! [ 1166.113234][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.136976][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.188738][ T5198] usb 4-1: USB disconnect, device number 53 [ 1166.202215][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.263466][T20466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.296946][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.308248][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.318356][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.328975][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.339160][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.349710][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.367932][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.378856][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.390133][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.411231][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.421524][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.445418][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.458046][T20466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.469407][T20466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.558471][T20466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.690595][ T5169] usb 2-1: reset high-speed USB device number 51 using dummy_hcd [ 1166.735181][T20636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4450'. [ 1166.864892][T20466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.920450][T20466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.929207][T20466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.863608][T12867] bio_check_eod: 25461 callbacks suppressed [ 1167.863634][T12867] syz.1.2026: attempt to access beyond end of device [ 1167.863634][T12867] loop1: rw=3, sector=32986223344808, nr_sectors = 8388600 limit=2048 [ 1167.864502][T17608] usb 2-1: USB disconnect, device number 51 [ 1167.869602][T12867] syz.1.2026: attempt to access beyond end of device [ 1167.869602][T12867] loop1: rw=3, sector=32986231733408, nr_sectors = 8388600 limit=2048 [ 1167.910250][T12867] syz.1.2026: attempt to access beyond end of device [ 1167.910250][T12867] loop1: rw=3, sector=32986240122008, nr_sectors = 8388600 limit=2048 [ 1167.925093][T12867] syz.1.2026: attempt to access beyond end of device [ 1167.925093][T12867] loop1: rw=3, sector=32986248510608, nr_sectors = 8388600 limit=2048 [ 1168.160238][T20466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.169219][T12867] syz.1.2026: attempt to access beyond end of device [ 1168.169219][T12867] loop1: rw=3, sector=32986256899208, nr_sectors = 8388600 limit=2048 [ 1168.214088][T12867] syz.1.2026: attempt to access beyond end of device [ 1168.214088][T12867] loop1: rw=3, sector=32986265287808, nr_sectors = 8388600 limit=2048 [ 1169.141086][T12867] syz.1.2026: attempt to access beyond end of device [ 1169.141086][T12867] loop1: rw=3, sector=32986273676408, nr_sectors = 8388600 limit=2048 [ 1169.473237][T12867] syz.1.2026: attempt to access beyond end of device [ 1169.473237][T12867] loop1: rw=3, sector=32986282065008, nr_sectors = 8388600 limit=2048 [ 1169.991303][T12867] syz.1.2026: attempt to access beyond end of device [ 1169.991303][T12867] loop1: rw=3, sector=32986290453608, nr_sectors = 8388600 limit=2048 [ 1170.100843][T12867] syz.1.2026: attempt to access beyond end of device [ 1170.100843][T12867] loop1: rw=3, sector=32986298842208, nr_sectors = 8388600 limit=2048 [ 1170.442495][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.488879][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.619337][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.630817][ T5198] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1170.687519][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.888126][ T5198] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1170.932492][ T5198] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1172.580886][ T5198] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1172.590171][ T5198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1172.600105][ T5198] usb 6-1: SerialNumber: syz [ 1172.849138][ T5198] usb 6-1: 0:2 : does not exist [ 1172.937338][T12867] bio_check_eod: 3901 callbacks suppressed [ 1172.937362][T12867] syz.1.2026: attempt to access beyond end of device [ 1172.937362][T12867] loop1: rw=3, sector=33019031159408, nr_sectors = 8388600 limit=2048 [ 1172.963689][T12867] syz.1.2026: attempt to access beyond end of device [ 1172.963689][T12867] loop1: rw=3, sector=33019039548008, nr_sectors = 8388600 limit=2048 [ 1172.969540][ T5198] usb 6-1: unit 255 not found! [ 1173.004698][T17607] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1173.060936][ T5198] usb 6-1: USB disconnect, device number 59 [ 1173.070192][T12867] syz.1.2026: attempt to access beyond end of device [ 1173.070192][T12867] loop1: rw=3, sector=33019047936608, nr_sectors = 8388600 limit=2048 [ 1173.120649][T20682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4465'. [ 1173.191024][T20684] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4466'. [ 1173.207223][T12867] syz.1.2026: attempt to access beyond end of device [ 1173.207223][T12867] loop1: rw=3, sector=33019056325208, nr_sectors = 8388600 limit=2048 [ 1173.222219][T17607] usb 4-1: Using ep0 maxpacket: 16 [ 1173.258193][T17607] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.281015][T12867] syz.1.2026: attempt to access beyond end of device [ 1173.281015][T12867] loop1: rw=3, sector=33019064713808, nr_sectors = 8388600 limit=2048 [ 1173.298057][T12867] syz.1.2026: attempt to access beyond end of device [ 1173.298057][T12867] loop1: rw=3, sector=33019073102408, nr_sectors = 8388600 limit=2048 [ 1173.316749][T12867] syz.1.2026: attempt to access beyond end of device [ 1173.316749][T12867] loop1: rw=3, sector=33019081491008, nr_sectors = 8388600 limit=2048 [ 1173.328720][T17607] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.359935][T12867] syz.1.2026: attempt to access beyond end of device [ 1173.359935][T12867] loop1: rw=3, sector=33019089879608, nr_sectors = 8388600 limit=2048 [ 1173.381163][T20688] loop2: detected capacity change from 0 to 256 [ 1173.389669][T17607] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1173.408024][T20688] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1173.440343][T12867] syz.1.2026: attempt to access beyond end of device [ 1173.440343][T12867] loop1: rw=3, sector=33019098268208, nr_sectors = 8388600 limit=2048 [ 1174.072576][T12867] syz.1.2026: attempt to access beyond end of device [ 1174.072576][T12867] loop1: rw=3, sector=33019106656808, nr_sectors = 8388600 limit=2048 [ 1174.343027][T17607] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1174.357060][T17607] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1174.366332][T17607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.332007][T17607] usb 4-1: config 0 descriptor?? [ 1175.337672][T17607] usb 4-1: can't set config #0, error -71 [ 1175.349025][T17607] usb 4-1: USB disconnect, device number 54 [ 1175.920143][T17607] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1176.145875][T17607] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1176.194168][T17607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1176.221388][T20719] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4480'. [ 1176.255683][T17607] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1176.300061][T17607] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1176.355346][T17607] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1176.380211][T17607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.428828][T17607] usb 4-1: config 0 descriptor?? [ 1176.454139][T20706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1176.500145][ T924] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1176.916453][ T924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.006123][ T924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1177.078681][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.090201][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.112472][ T924] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1177.124370][ T924] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1177.133715][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.187452][T20718] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1177.863257][ T924] hub 6-1:1.0: bad descriptor, ignoring hub [ 1177.869224][ T924] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1177.902480][ T924] cdc_wdm 6-1:1.0: skipping garbage [ 1177.930262][ T924] cdc_wdm 6-1:1.0: skipping garbage [ 1177.950168][T12867] bio_check_eod: 7911 callbacks suppressed [ 1177.950188][T12867] syz.1.2026: attempt to access beyond end of device [ 1177.950188][T12867] loop1: rw=3, sector=33085477260008, nr_sectors = 8388600 limit=2048 [ 1178.000344][ T924] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1178.006269][ T924] cdc_wdm 6-1:1.0: Unknown control protocol [ 1178.081079][ T924] usb 6-1: USB disconnect, device number 60 [ 1178.109494][T12867] syz.1.2026: attempt to access beyond end of device [ 1178.109494][T12867] loop1: rw=3, sector=33085485648608, nr_sectors = 8388600 limit=2048 [ 1178.150175][T12867] syz.1.2026: attempt to access beyond end of device [ 1178.150175][T12867] loop1: rw=3, sector=33085494037208, nr_sectors = 8388600 limit=2048 [ 1178.231551][T12867] syz.1.2026: attempt to access beyond end of device [ 1178.231551][T12867] loop1: rw=3, sector=33085502425808, nr_sectors = 8388600 limit=2048 [ 1178.233344][T20706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.308555][T12867] syz.1.2026: attempt to access beyond end of device [ 1178.308555][T12867] loop1: rw=3, sector=33085510814408, nr_sectors = 8388600 limit=2048 [ 1178.317478][T20706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.353459][T20706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.614614][T12867] syz.1.2026: attempt to access beyond end of device [ 1178.614614][T12867] loop1: rw=3, sector=33085519203008, nr_sectors = 8388600 limit=2048 [ 1178.661942][T20706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.751154][T12867] syz.1.2026: attempt to access beyond end of device [ 1178.751154][T12867] loop1: rw=3, sector=33085527591608, nr_sectors = 8388600 limit=2048 [ 1178.807024][T12867] syz.1.2026: attempt to access beyond end of device [ 1178.807024][T12867] loop1: rw=3, sector=33085535980208, nr_sectors = 8388600 limit=2048 [ 1179.059984][ T924] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1179.105991][T12867] syz.1.2026: attempt to access beyond end of device [ 1179.105991][T12867] loop1: rw=3, sector=33085544368808, nr_sectors = 8388600 limit=2048 [ 1179.253333][T12867] syz.1.2026: attempt to access beyond end of device [ 1179.253333][T12867] loop1: rw=3, sector=33085552757408, nr_sectors = 8388600 limit=2048 [ 1179.295346][ T924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.316064][T20745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.347511][ T924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1179.362115][T20745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.442459][ T924] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1179.528779][ T924] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1179.557075][T17607] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 1179.581949][T17607] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 1179.589409][T17607] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 1179.597542][T17607] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 1179.608883][T17607] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 1179.750959][T17607] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1179.828119][T17607] usb 4-1: USB disconnect, device number 55 [ 1179.866159][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.053302][ T924] usb 6-1: can't set config #1, error -71 [ 1180.070588][ T924] usb 6-1: USB disconnect, device number 61 [ 1180.271406][T20762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4493'. [ 1182.990375][T12867] bio_check_eod: 11545 callbacks suppressed [ 1182.990402][T12867] syz.1.2026: attempt to access beyond end of device [ 1182.990402][T12867] loop1: rw=3, sector=33182407533008, nr_sectors = 8388600 limit=2048 [ 1183.090746][T12867] syz.1.2026: attempt to access beyond end of device [ 1183.090746][T12867] loop1: rw=3, sector=33182415921608, nr_sectors = 8388600 limit=2048 [ 1183.247475][T12867] syz.1.2026: attempt to access beyond end of device [ 1183.247475][T12867] loop1: rw=3, sector=33182424310208, nr_sectors = 8388600 limit=2048 [ 1183.320899][T12867] syz.1.2026: attempt to access beyond end of device [ 1183.320899][T12867] loop1: rw=3, sector=33182432698808, nr_sectors = 8388600 limit=2048 [ 1183.378250][T20788] loop4: detected capacity change from 0 to 256 [ 1183.420204][T12867] syz.1.2026: attempt to access beyond end of device [ 1183.420204][T12867] loop1: rw=3, sector=33182441087408, nr_sectors = 8388600 limit=2048 [ 1183.445610][T12867] syz.1.2026: attempt to access beyond end of device [ 1183.445610][T12867] loop1: rw=3, sector=33182449476008, nr_sectors = 8388600 limit=2048 [ 1183.463380][T20788] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1183.474973][T12867] syz.1.2026: attempt to access beyond end of device [ 1183.474973][T12867] loop1: rw=3, sector=33182457864608, nr_sectors = 8388600 limit=2048 [ 1184.940193][T12867] syz.1.2026: attempt to access beyond end of device [ 1184.940193][T12867] loop1: rw=3, sector=33182466253208, nr_sectors = 8388600 limit=2048 [ 1184.955101][T12867] syz.1.2026: attempt to access beyond end of device [ 1184.955101][T12867] loop1: rw=3, sector=33182474641808, nr_sectors = 8388600 limit=2048 [ 1185.647802][T12867] syz.1.2026: attempt to access beyond end of device [ 1185.647802][T12867] loop1: rw=3, sector=33182483030408, nr_sectors = 8388600 limit=2048 [ 1187.940211][T20821] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1187.946788][T20821] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1188.062956][T20821] vhci_hcd vhci_hcd.0: Device attached [ 1188.077185][T12867] bio_check_eod: 5397 callbacks suppressed [ 1188.077205][T12867] syz.1.2026: attempt to access beyond end of device [ 1188.077205][T12867] loop1: rw=3, sector=33227764693208, nr_sectors = 8388600 limit=2048 [ 1188.174476][T12867] syz.1.2026: attempt to access beyond end of device [ 1188.174476][T12867] loop1: rw=3, sector=33227773081808, nr_sectors = 8388600 limit=2048 [ 1188.551885][T20822] vhci_hcd: connection closed [ 1188.552480][ T142] vhci_hcd: stop threads [ 1188.575116][T12867] syz.1.2026: attempt to access beyond end of device [ 1188.575116][T12867] loop1: rw=3, sector=33227781470408, nr_sectors = 8388600 limit=2048 [ 1188.580335][ T142] vhci_hcd: release socket [ 1188.674555][ T142] vhci_hcd: disconnect device [ 1188.730528][ T25] usb 15-1: new high-speed USB device number 8 using vhci_hcd [ 1188.754735][ T25] usb 15-1: enqueue for inactive port 0 [ 1188.901543][T12867] syz.1.2026: attempt to access beyond end of device [ 1188.901543][T12867] loop1: rw=3, sector=33227789859008, nr_sectors = 8388600 limit=2048 [ 1188.951060][ T25] vhci_hcd: vhci_device speed not set [ 1189.071585][T12867] syz.1.2026: attempt to access beyond end of device [ 1189.071585][T12867] loop1: rw=3, sector=33227798247608, nr_sectors = 8388600 limit=2048 [ 1189.181361][ T4496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1189.195913][ T4496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1189.205314][ T4496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1189.225100][ T4496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1189.238642][ T4496] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1189.250508][ T4496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1189.260658][T12867] syz.1.2026: attempt to access beyond end of device [ 1189.260658][T12867] loop1: rw=3, sector=33227806636208, nr_sectors = 8388600 limit=2048 [ 1189.374635][T12867] syz.1.2026: attempt to access beyond end of device [ 1189.374635][T12867] loop1: rw=3, sector=33227815024808, nr_sectors = 8388600 limit=2048 [ 1189.391084][T12867] syz.1.2026: attempt to access beyond end of device [ 1189.391084][T12867] loop1: rw=3, sector=33227823413408, nr_sectors = 8388600 limit=2048 [ 1189.431187][T12867] syz.1.2026: attempt to access beyond end of device [ 1189.431187][T12867] loop1: rw=3, sector=33227831802008, nr_sectors = 8388600 limit=2048 [ 1189.452394][T20839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4520'. [ 1189.484373][T12867] syz.1.2026: attempt to access beyond end of device [ 1189.484373][T12867] loop1: rw=3, sector=33227840190608, nr_sectors = 8388600 limit=2048 [ 1190.101867][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.577766][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.959184][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.091198][T20863] loop5: detected capacity change from 0 to 128 [ 1191.150377][T20863] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1191.325113][ T4496] Bluetooth: hci3: command tx timeout [ 1191.448150][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.080314][ T12] team0: left allmulticast mode [ 1192.096503][ T12] team_slave_0: left allmulticast mode [ 1192.109369][ T12] team_slave_1: left allmulticast mode [ 1192.120216][T17607] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1192.144215][ T12] team0: left promiscuous mode [ 1192.175647][ T12] team_slave_0: left promiscuous mode [ 1192.215690][ T12] team_slave_1: left promiscuous mode [ 1192.238926][ T12] bridge0: port 4(team0) entered disabled state [ 1192.264399][ T12] macvlan2: left allmulticast mode [ 1192.276807][ T12] macvlan2: left promiscuous mode [ 1192.292664][ T12] bridge0: port 3(macvlan2) entered disabled state [ 1192.325037][ T12] bridge_slave_1: left allmulticast mode [ 1192.335557][ T12] bridge_slave_1: left promiscuous mode [ 1192.350114][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.363658][T17607] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1192.377775][ T12] bridge_slave_0: left allmulticast mode [ 1192.393156][ T12] bridge_slave_0: left promiscuous mode [ 1192.410389][T17607] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1192.429371][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.448472][T17607] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1192.478256][T17607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.602388][T20873] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1193.094858][T12867] bio_check_eod: 17298 callbacks suppressed [ 1193.094884][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.094884][T12867] loop1: rw=3, sector=33372954582008, nr_sectors = 8388600 limit=2048 [ 1193.146215][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.146215][T12867] loop1: rw=3, sector=33372962970608, nr_sectors = 8388600 limit=2048 [ 1193.161580][ T924] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1193.183291][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.183291][T12867] loop1: rw=3, sector=33372971359208, nr_sectors = 8388600 limit=2048 [ 1193.269319][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.269319][T12867] loop1: rw=3, sector=33372979747808, nr_sectors = 8388600 limit=2048 [ 1193.347769][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.347769][T12867] loop1: rw=3, sector=33372988136408, nr_sectors = 8388600 limit=2048 [ 1193.390424][ T924] usb 2-1: Using ep0 maxpacket: 8 [ 1193.390556][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.390556][T12867] loop1: rw=3, sector=33372996525008, nr_sectors = 8388600 limit=2048 [ 1193.410753][ T4496] Bluetooth: hci3: command tx timeout [ 1193.438943][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.438943][T12867] loop1: rw=3, sector=33373004913608, nr_sectors = 8388600 limit=2048 [ 1193.460394][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.460394][T12867] loop1: rw=3, sector=33373013302208, nr_sectors = 8388600 limit=2048 [ 1193.475410][ T924] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1193.484373][ T924] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1193.494533][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.494533][T12867] loop1: rw=3, sector=33373021690808, nr_sectors = 8388600 limit=2048 [ 1193.509542][ T924] usb 2-1: config 1 has no interface number 1 [ 1193.515872][ T924] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1193.533198][T12867] syz.1.2026: attempt to access beyond end of device [ 1193.533198][T12867] loop1: rw=3, sector=33373030079408, nr_sectors = 8388600 limit=2048 [ 1193.565355][ T924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1193.589136][ T924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.909950][T19583] sysv_free_block: trying to free block not in datazone [ 1193.913076][ T924] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1193.923824][T19583] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1193.991714][ T924] usb 2-1: USB disconnect, device number 52 [ 1194.638118][T20881] mmap: syz.0.4531 (20881) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1194.713253][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.746490][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.792499][ T12] bond0 (unregistering): Released all slaves [ 1194.920315][T20840] chnl_net:caif_netlink_parms(): no params data found [ 1195.318754][ T5198] usb 1-1: USB disconnect, device number 68 [ 1195.480303][ T4496] Bluetooth: hci3: command tx timeout [ 1195.560630][T20840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.586944][T20840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.613101][T20840] bridge_slave_0: entered allmulticast mode [ 1195.626313][T20840] bridge_slave_0: entered promiscuous mode [ 1195.652321][T20840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.666297][T20840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.682168][T20840] bridge_slave_1: entered allmulticast mode [ 1195.702806][T20840] bridge_slave_1: entered promiscuous mode [ 1195.859098][ T12] hsr_slave_0: left promiscuous mode [ 1195.870393][ T5198] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1195.888517][ T12] hsr_slave_1: left promiscuous mode [ 1195.903276][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.919305][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.947050][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.962837][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.082159][ T12] veth1_macvtap: left promiscuous mode [ 1196.089797][ T12] veth0_macvtap: left promiscuous mode [ 1196.106594][ T5198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.120365][ T12] veth1_vlan: left promiscuous mode [ 1196.125814][ T12] veth0_vlan: left promiscuous mode [ 1196.132590][ T5198] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1196.163763][ T5198] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1196.173798][ T5198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1196.189917][ T5198] usb 4-1: SerialNumber: syz [ 1196.350312][T20908] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1196.356965][T20908] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1196.413437][ T5198] usb 4-1: 0:2 : does not exist [ 1196.418425][ T5198] usb 4-1: unit 12 not found! [ 1196.465360][ T5198] usb 4-1: USB disconnect, device number 56 [ 1196.513253][T20908] vhci_hcd vhci_hcd.0: Device attached [ 1196.800194][T13478] usb 11-1: new high-speed USB device number 5 using vhci_hcd [ 1197.103133][T20911] vhci_hcd: connection reset by peer [ 1197.137391][ T1278] vhci_hcd: stop threads [ 1197.151619][ T1278] vhci_hcd: release socket [ 1197.190250][ T1278] vhci_hcd: disconnect device [ 1197.562656][ T4496] Bluetooth: hci3: command tx timeout [ 1198.120150][T12867] bio_check_eod: 45090 callbacks suppressed [ 1198.120176][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.120176][T12867] loop1: rw=3, sector=33751280442008, nr_sectors = 8388600 limit=2048 [ 1198.213030][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.213030][T12867] loop1: rw=3, sector=33751288830608, nr_sectors = 8388600 limit=2048 [ 1198.243068][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.243068][T12867] loop1: rw=3, sector=33751297219208, nr_sectors = 8388600 limit=2048 [ 1198.310141][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.310141][T12867] loop1: rw=3, sector=33751305607808, nr_sectors = 8388600 limit=2048 [ 1198.363084][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.363084][T12867] loop1: rw=3, sector=33751313996408, nr_sectors = 8388600 limit=2048 [ 1198.421539][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.421539][T12867] loop1: rw=3, sector=33751322385008, nr_sectors = 8388600 limit=2048 [ 1198.471915][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.471915][T12867] loop1: rw=3, sector=33751330773608, nr_sectors = 8388600 limit=2048 [ 1198.510358][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.510358][T12867] loop1: rw=3, sector=33751339162208, nr_sectors = 8388600 limit=2048 [ 1198.548126][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1198.555994][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.555994][T12867] loop1: rw=3, sector=33751347550808, nr_sectors = 8388600 limit=2048 [ 1198.610109][T12867] syz.1.2026: attempt to access beyond end of device [ 1198.610109][T12867] loop1: rw=3, sector=33751355939408, nr_sectors = 8388600 limit=2048 [ 1198.826119][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1198.890991][T10921] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1198.901306][T10921] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1198.913830][T10921] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1198.923749][T10921] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1198.935702][T10921] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1198.946450][T10921] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1199.010344][ T5182] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1199.203991][ T5182] usb 4-1: Using ep0 maxpacket: 16 [ 1199.219744][ T5182] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1199.270350][ T5182] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1199.279439][ T5182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.309418][ T5182] usb 4-1: config 0 descriptor?? [ 1199.338253][ T5182] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 1199.601925][ T4537] bcm5974 4-1:0.0: could not read from device [ 1199.619509][T20926] bcm5974 4-1:0.0: could not read from device [ 1199.638964][ T5182] usb 4-1: USB disconnect, device number 57 [ 1199.656224][ T4537] bcm5974 4-1:0.0: could not read from device [ 1200.149131][T20910] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1200.553517][T20934] capability: warning: `syz.0.4549' uses 32-bit capabilities (legacy support in use) [ 1200.614746][T20840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.661427][T20840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.696905][T20938] vlan2: entered promiscuous mode [ 1201.004128][T10921] Bluetooth: hci8: command tx timeout [ 1201.289531][T20840] team0: Port device team_slave_0 added [ 1201.368561][T20840] team0: Port device team_slave_1 added [ 1201.509525][T20840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.525628][T20840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.577820][T20840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.637624][T20955] sch_tbf: burst 0 is lower than device lo mtu (1590) ! [ 1201.656048][T20840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.680531][T20840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.727356][T20840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.791982][T20957] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1201.813307][T20957] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1201.822804][T20957] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1201.836561][T20957] overlayfs: missing 'lowerdir' [ 1201.935596][T20840] hsr_slave_0: entered promiscuous mode [ 1201.944745][T20840] hsr_slave_1: entered promiscuous mode [ 1201.962220][T13478] vhci_hcd: vhci_device speed not set [ 1202.056577][T20960] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1202.063157][T20960] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1202.105704][T20960] vhci_hcd vhci_hcd.0: Device attached [ 1202.435864][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.552533][T13478] usb 11-1: device descriptor read/64, error -110 [ 1202.712866][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.817823][T20927] chnl_net:caif_netlink_parms(): no params data found [ 1202.830129][T13478] usb 11-1: new high-speed USB device number 6 using vhci_hcd [ 1202.968210][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.089860][T10921] Bluetooth: hci8: command tx timeout [ 1203.122134][T12867] bio_check_eod: 52540 callbacks suppressed [ 1203.122156][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.122156][T12867] loop1: rw=3, sector=34192101372008, nr_sectors = 8388600 limit=2048 [ 1203.156540][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.156540][T12867] loop1: rw=3, sector=34192109760608, nr_sectors = 8388600 limit=2048 [ 1203.182087][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.182087][T12867] loop1: rw=3, sector=34192118149208, nr_sectors = 8388600 limit=2048 [ 1203.198041][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.198041][T12867] loop1: rw=3, sector=34192126537808, nr_sectors = 8388600 limit=2048 [ 1203.234941][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.234941][T12867] loop1: rw=3, sector=34192134926408, nr_sectors = 8388600 limit=2048 [ 1203.253177][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.270944][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.270944][T12867] loop1: rw=3, sector=34192143315008, nr_sectors = 8388600 limit=2048 [ 1203.287742][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.287742][T12867] loop1: rw=3, sector=34192151703608, nr_sectors = 8388600 limit=2048 [ 1203.306392][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.306392][T12867] loop1: rw=3, sector=34192160092208, nr_sectors = 8388600 limit=2048 [ 1203.327144][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.327144][T12867] loop1: rw=3, sector=34192168480808, nr_sectors = 8388600 limit=2048 [ 1203.390547][T17607] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1203.514272][T12867] syz.1.2026: attempt to access beyond end of device [ 1203.514272][T12867] loop1: rw=3, sector=34192176869408, nr_sectors = 8388600 limit=2048 [ 1203.640227][T17607] usb 6-1: Using ep0 maxpacket: 16 [ 1203.646150][T20961] vhci_hcd: connection reset by peer [ 1203.712424][T17607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1203.857389][ T2476] vhci_hcd: stop threads [ 1203.891083][ T2476] vhci_hcd: release socket [ 1203.932017][T17607] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1203.992321][ T2476] vhci_hcd: disconnect device [ 1204.023990][T17607] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1204.050140][T17607] usb 6-1: Product: syz [ 1204.060123][T17607] usb 6-1: SerialNumber: syz [ 1204.080199][T17607] usb 6-1: config 0 descriptor?? [ 1204.099503][T17607] em28xx 6-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1204.119094][T17607] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1204.275237][T20927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.295470][T20927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.311757][T20927] bridge_slave_0: entered allmulticast mode [ 1204.329229][T20927] bridge_slave_0: entered promiscuous mode [ 1204.359298][T20927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.391007][T20927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.428653][T20927] bridge_slave_1: entered allmulticast mode [ 1204.442999][T17607] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1204.444533][T20927] bridge_slave_1: entered promiscuous mode [ 1204.533981][T17607] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1204.569188][T17607] em28xx 6-1:0.0: board has no eeprom [ 1204.670659][T17607] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1204.704029][T17607] em28xx 6-1:0.0: dvb set to bulk mode. [ 1204.724300][ T5169] em28xx 6-1:0.0: Binding DVB extension [ 1204.747052][T17607] usb 6-1: USB disconnect, device number 62 [ 1204.762174][T20927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.767875][T17607] em28xx 6-1:0.0: Disconnecting em28xx [ 1204.805038][T20995] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1204.873668][ T5169] em28xx 6-1:0.0: Registering input extension [ 1204.890679][T17607] em28xx 6-1:0.0: Closing input extension [ 1204.928264][T17607] em28xx 6-1:0.0: Freeing device [ 1204.961969][T20927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.050129][ T924] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1205.160712][T10921] Bluetooth: hci8: command tx timeout [ 1205.253048][ T924] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1205.284696][ T924] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1205.296092][ T924] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1205.307466][ T924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.346024][T20998] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1205.479383][ T12] bridge_slave_1: left allmulticast mode [ 1205.500103][ T12] bridge_slave_1: left promiscuous mode [ 1205.505834][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.535538][ T12] bridge_slave_0: left allmulticast mode [ 1205.542532][ T12] bridge_slave_0: left promiscuous mode [ 1205.552749][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.690505][ T5173] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1205.892727][ T5173] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.926499][ T5173] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1205.940104][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.981529][ T5173] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1206.598531][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1206.617993][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.694192][ T12] bond0 (unregistering): Released all slaves [ 1206.747462][T20927] team0: Port device team_slave_0 added [ 1206.831179][T20927] team0: Port device team_slave_1 added [ 1207.018879][ T5173] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1207.052819][ T5173] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1207.091963][ T5173] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1207.112998][ T5173] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 1207.133541][ T5173] usb 1-1: USB disconnect, device number 69 [ 1207.241987][T10921] Bluetooth: hci8: command tx timeout [ 1207.286108][T20927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.297068][T20927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.323804][T20927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.339851][T20927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.347321][T20927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.396891][T20927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.787459][ T12] hsr_slave_0: left promiscuous mode [ 1207.794968][ T12] hsr_slave_1: left promiscuous mode [ 1207.819313][T21023] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1207.825877][T21023] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1207.843041][T21023] vhci_hcd vhci_hcd.0: Device attached [ 1207.941613][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.953514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.999446][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.040151][T21031] netlink: 'syz.5.4585': attribute type 4 has an invalid length. [ 1208.048192][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.081745][T21031] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4585'. [ 1208.135015][T12867] bio_check_eod: 46453 callbacks suppressed [ 1208.135039][T12867] syz.1.2026: attempt to access beyond end of device [ 1208.135039][T12867] loop1: rw=3, sector=34581860893808, nr_sectors = 8388600 limit=2048 [ 1208.155910][T12867] syz.1.2026: attempt to access beyond end of device [ 1208.155910][T12867] loop1: rw=3, sector=34581869282408, nr_sectors = 8388600 limit=2048 [ 1208.174433][T12867] syz.1.2026: attempt to access beyond end of device [ 1208.174433][T12867] loop1: rw=3, sector=34581877671008, nr_sectors = 8388600 limit=2048 [ 1208.293020][ T12] veth1_macvtap: left promiscuous mode [ 1208.392214][ T12] veth0_macvtap: left promiscuous mode [ 1208.498607][ T12] veth1_vlan: left promiscuous mode [ 1208.596168][ T12] veth0_vlan: left promiscuous mode [ 1208.650626][T21024] vhci_hcd: connection closed [ 1208.681028][ T53] vhci_hcd: stop threads [ 1208.742355][T12867] syz.1.2026: attempt to access beyond end of device [ 1208.742355][T12867] loop1: rw=3, sector=34581886059608, nr_sectors = 8388600 limit=2048 [ 1208.843513][ T53] vhci_hcd: release socket [ 1208.848355][ T53] vhci_hcd: disconnect device [ 1208.933710][T13478] vhci_hcd: vhci_device speed not set [ 1208.966520][T12867] syz.1.2026: attempt to access beyond end of device [ 1208.966520][T12867] loop1: rw=3, sector=34581894448208, nr_sectors = 8388600 limit=2048 [ 1209.023096][T12867] syz.1.2026: attempt to access beyond end of device [ 1209.023096][T12867] loop1: rw=3, sector=34581902836808, nr_sectors = 8388600 limit=2048 [ 1209.052678][T12867] syz.1.2026: attempt to access beyond end of device [ 1209.052678][T12867] loop1: rw=3, sector=34581911225408, nr_sectors = 8388600 limit=2048 [ 1209.095719][T12867] syz.1.2026: attempt to access beyond end of device [ 1209.095719][T12867] loop1: rw=3, sector=34581919614008, nr_sectors = 8388600 limit=2048 [ 1209.182874][T12867] syz.1.2026: attempt to access beyond end of device [ 1209.182874][T12867] loop1: rw=3, sector=34581928002608, nr_sectors = 8388600 limit=2048 [ 1209.237246][T12867] syz.1.2026: attempt to access beyond end of device [ 1209.237246][T12867] loop1: rw=3, sector=34581936391208, nr_sectors = 8388600 limit=2048 [ 1209.487831][ T5169] usb 2-1: USB disconnect, device number 53 [ 1209.640471][T10921] Bluetooth: hci0: command 0x0406 tx timeout [ 1211.130208][ T5169] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1211.195586][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1211.284988][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1211.348976][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.361620][ T5169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.373424][ T5169] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 1211.395771][ T5169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.413449][ T5169] usb 4-1: config 0 descriptor?? [ 1211.500275][ T5173] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1211.681626][ T5173] usb 6-1: Using ep0 maxpacket: 16 [ 1211.689154][ T5173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1211.727855][ T5173] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1211.737265][ T5173] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1211.770977][ T5173] usb 6-1: Product: syz [ 1211.775233][ T5173] usb 6-1: SerialNumber: syz [ 1211.792384][ T5173] usb 6-1: config 0 descriptor?? [ 1211.808393][ T5173] em28xx 6-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1211.837310][ T5173] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1211.855662][ T5169] apple 0003:05AC:0262.0028: unknown main item tag 0x5 [ 1211.903990][ T5169] apple 0003:05AC:0262.0028: hidraw0: USB HID v0.00 Device [HID 05ac:0262] on usb-dummy_hcd.3-1/input0 [ 1212.067682][T13478] usb 4-1: USB disconnect, device number 58 [ 1212.498320][T20927] hsr_slave_0: entered promiscuous mode [ 1212.521346][T20927] hsr_slave_1: entered promiscuous mode [ 1212.533691][T20927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1212.550127][T20927] Cannot create hsr debugfs directory [ 1212.678927][T20840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1212.818774][T20840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1212.863243][T20840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1212.912287][ T5173] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1213.143775][ T5173] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1213.151921][ T5173] em28xx 6-1:0.0: board has no eeprom [ 1213.160743][T12867] bio_check_eod: 59516 callbacks suppressed [ 1213.160762][T12867] syz.1.2026: attempt to access beyond end of device [ 1213.160762][T12867] loop1: rw=3, sector=35081200697408, nr_sectors = 8388600 limit=2048 [ 1213.257599][ T5173] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1213.265593][ T5173] em28xx 6-1:0.0: dvb set to bulk mode. [ 1217.149427][T17608] em28xx 6-1:0.0: Binding DVB extension [ 1217.171984][ T30] INFO: task segctord:12874 blocked for more than 143 seconds. [ 1217.179559][ T30] Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 1217.211489][T21068] Bluetooth: hci1: command 0x0406 tx timeout [ 1217.238633][T12867] syz.1.2026: attempt to access beyond end of device [ 1217.238633][T12867] loop1: rw=3, sector=35081209086008, nr_sectors = 8388600 limit=2048 [ 1217.280831][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1217.324718][ T5173] usb 6-1: USB disconnect, device number 63 [ 1217.400331][ T30] task:segctord state:D stack:27280 pid:12874 tgid:12874 ppid:2 flags:0x00004000 [ 1217.432547][ T5173] em28xx 6-1:0.0: Disconnecting em28xx [ 1217.537115][ T30] Call Trace: [ 1217.558880][T12867] syz.1.2026: attempt to access beyond end of device [ 1217.558880][T12867] loop1: rw=3, sector=35081217474608, nr_sectors = 8388600 limit=2048 [ 1217.575290][T12867] syz.1.2026: attempt to access beyond end of device [ 1217.575290][T12867] loop1: rw=3, sector=35081225863208, nr_sectors = 8388600 limit=2048 [ 1217.592316][T12867] syz.1.2026: attempt to access beyond end of device [ 1217.592316][T12867] loop1: rw=3, sector=35081234251808, nr_sectors = 8388600 limit=2048 [ 1217.607243][T12867] syz.1.2026: attempt to access beyond end of device [ 1217.607243][T12867] loop1: rw=3, sector=35081242640408, nr_sectors = 8388600 limit=2048 [ 1217.622055][T12867] syz.1.2026: attempt to access beyond end of device [ 1217.622055][T12867] loop1: rw=3, sector=35081251029008, nr_sectors = 8388600 limit=2048 [ 1217.624008][ T30] [ 1217.636829][T12867] syz.1.2026: attempt to access beyond end of device [ 1217.636829][T12867] loop1: rw=3, sector=35081259417608, nr_sectors = 8388600 limit=2048 [ 1217.657346][T12867] syz.1.2026: attempt to access beyond end of device [ 1217.657346][T12867] loop1: rw=3, sector=35081267806208, nr_sectors = 8388600 limit=2048 [ 1217.672132][T12867] syz.1.2026: attempt to access beyond end of device [ 1217.672132][T12867] loop1: rw=3, sector=35081276194808, nr_sectors = 8388600 limit=2048 [ 1217.724128][ T30] __schedule+0x1800/0x4a60 [ 1217.728728][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.761323][T17608] em28xx 6-1:0.0: Registering input extension [ 1217.767673][ T5173] em28xx 6-1:0.0: Closing input extension [ 1217.773489][ T30] ? __pfx___schedule+0x10/0x10 [ 1217.778377][ T30] ? __pfx_lock_release+0x10/0x10 [ 1217.820050][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1217.821668][ T5173] em28xx 6-1:0.0: Freeing device [ 1217.826123][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1217.860067][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1217.865244][ T30] ? schedule+0x90/0x320 [ 1217.869686][ T30] schedule+0x14b/0x320 [ 1217.880388][ T5171] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1217.890099][ T30] schedule_preempt_disabled+0x13/0x30 [ 1217.895594][ T30] rwsem_down_write_slowpath+0xeeb/0x13b0 [ 1217.920096][ T30] ? rwsem_down_write_slowpath+0xa06/0x13b0 [ 1217.926056][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1217.940076][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1217.945159][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1217.960107][ T30] down_write+0x1d7/0x220 [ 1217.972075][ T30] ? __pfx_down_write+0x10/0x10 [ 1217.976971][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1218.002478][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1218.008148][ T30] ? trace_nilfs2_transaction_transition+0x9e/0x230 [ 1218.030078][ T30] nilfs_transaction_lock+0x25d/0x4f0 [ 1218.035506][ T30] nilfs_segctor_thread+0x551/0x11b0 [ 1218.050153][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1218.056538][ T30] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 1218.070060][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1218.075989][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1218.104656][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1218.111815][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1218.117486][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1218.148933][ T30] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 1218.160365][ T30] kthread+0x2f2/0x390 [ 1218.164470][ T30] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 1218.170313][T12867] bio_check_eod: 7810 callbacks suppressed [ 1218.170333][T12867] syz.1.2026: attempt to access beyond end of device [ 1218.170333][T12867] loop1: rw=3, sector=35146799549408, nr_sectors = 8388600 limit=2048 [ 1218.200073][ T30] ? __pfx_kthread+0x10/0x10 [ 1218.202602][T12867] syz.1.2026: attempt to access beyond end of device [ 1218.202602][T12867] loop1: rw=3, sector=35146807938008, nr_sectors = 8388600 limit=2048 [ 1218.207893][ T30] ret_from_fork+0x4d/0x80 [ 1218.227576][ T30] ? __pfx_kthread+0x10/0x10 [ 1218.232377][ T30] ret_from_fork_asm+0x1a/0x30 [ 1218.237200][ T30] [ 1218.240534][ T30] [ 1218.240534][ T30] Showing all locks held in the system: [ 1218.246296][T20840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1218.248385][ T30] 1 lock held by pool_workqueue_/3: [ 1218.307988][ T30] #0: ffff8880b943ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1218.346689][ T30] 4 locks held by kworker/u8:1/12: [ 1218.371065][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1218.382794][T21084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1218.391614][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1218.400419][T12867] syz.1.2026: attempt to access beyond end of device [ 1218.400419][T12867] loop1: rw=3, sector=35146816326608, nr_sectors = 8388600 limit=2048 [ 1218.403997][ T30] #2: ffffffff8f5f9190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1218.428417][T21084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1218.460525][T21084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1218.472232][T21084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1218.484039][T21084] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1218.500281][T21084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1218.500308][T12867] syz.1.2026: attempt to access beyond end of device [ 1218.500308][T12867] loop1: rw=3, sector=35146824715208, nr_sectors = 8388600 limit=2048 [ 1218.524761][ T30] #3: ffffffff8f605d08 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 1218.580401][ T30] 1 lock held by khungtaskd/30: [ 1218.585302][ T30] #0: ffffffff8e337660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1218.620148][T12867] syz.1.2026: attempt to access beyond end of device [ 1218.620148][T12867] loop1: rw=3, sector=35146833103808, nr_sectors = 8388600 limit=2048 [ 1218.670334][ T30] 3 locks held by kworker/u8:2/35: [ 1218.675509][ T30] #0: ffff888029c21948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1218.721007][T12867] syz.1.2026: attempt to access beyond end of device [ 1218.721007][T12867] loop1: rw=3, sector=35146841492408, nr_sectors = 8388600 limit=2048 [ 1218.750078][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1218.770083][ T30] #2: ffffffff8f605d08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1218.779712][ T30] 3 locks held by kworker/u8:3/53: [ 1218.790356][T12867] syz.1.2026: attempt to access beyond end of device [ 1218.790356][T12867] loop1: rw=3, sector=35146849881008, nr_sectors = 8388600 limit=2048 [ 1218.812358][ T30] 5 locks held by kworker/u9:1/4496: [ 1218.817727][ T30] #0: ffff8880588f3148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1218.850116][ T30] #1: ffffc9000cd4fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1218.870037][ T30] #2: ffff88806591cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1218.870386][T12867] syz.1.2026: attempt to access beyond end of device [ 1218.870386][T12867] loop1: rw=3, sector=35146858269608, nr_sectors = 8388600 limit=2048 [ 1218.880193][ T30] #3: ffff88806591c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 1218.919973][ T30] #4: ffffffff8e33ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1218.970034][ T30] 2 locks held by getty/4854: [ 1218.974778][ T30] #0: ffff88802a45d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1218.984815][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1218.988476][T12867] syz.1.2026: attempt to access beyond end of device [ 1218.988476][T12867] loop1: rw=3, sector=35146866658208, nr_sectors = 8388600 limit=2048 [ 1218.995043][ T30] 3 locks held by kworker/0:6/5169: [ 1218.995064][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1219.021618][T12867] syz.1.2026: attempt to access beyond end of device [ 1219.021618][T12867] loop1: rw=3, sector=35146875046808, nr_sectors = 8388600 limit=2048 [ 1219.028843][ T30] #1: ffffc9000362fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1219.071504][ T30] #2: ffffffff8f605d08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1219.081254][ T30] 5 locks held by kworker/0:7/5171: [ 1219.086499][ T30] #0: ffff88801c6a5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1219.098085][ T30] #1: ffffc900048e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1219.110218][ T30] #2: ffff888023731190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1219.119211][ T30] #3: ffff888023734518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b6/0x5150 [ 1219.130244][ T30] #4: ffff888021870b68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f4/0x5150 [ 1219.140066][ T30] 2 locks held by kworker/1:4/5182: [ 1219.145332][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1219.157973][ T30] #1: ffffc900048d7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1219.171241][ T30] 2 locks held by syz.1.2026/12867: [ 1219.176522][ T30] 1 lock held by segctord/12874: [ 1219.181527][ T30] #0: ffff88805af932a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25d/0x4f0 [ 1219.192729][ T30] 1 lock held by syz-executor/18616: [ 1219.198055][ T30] #0: ffffffff8f605d08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1219.207287][ T30] 1 lock held by syz-executor/18937: [ 1219.224759][ T30] #0: ffffffff8f605d08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1219.235780][ T30] 2 locks held by syz-executor/20840: [ 1219.241909][ T30] #0: ffffffff8f605d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1219.252991][ T30] #1: ffffffff8e33ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1219.265524][ T30] 1 lock held by syz-executor/20927: [ 1219.272471][ T30] #0: ffffffff8f605d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1219.283534][ T30] 2 locks held by kworker/u8:6/21037: [ 1219.288944][ T30] 1 lock held by syz.5.4597/21062: [ 1219.294175][ T30] #0: ffffffff8e33c900 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 1219.304251][ T30] 1 lock held by syz.0.4600/21079: [ 1219.309396][ T30] #0: ffffffff8f605d08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1219.318613][ T30] 1 lock held by syz-executor/21082: [ 1219.324888][ T30] #0: ffffffff8f605d08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1219.336808][ T30] [ 1219.339251][ T30] ============================================= [ 1219.339251][ T30] [ 1219.457868][ T30] NMI backtrace for cpu 0 [ 1219.462258][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 1219.472452][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1219.482523][ T30] Call Trace: [ 1219.485813][ T30] [ 1219.488754][ T30] dump_stack_lvl+0x241/0x360 [ 1219.493472][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.498699][ T30] ? __pfx__printk+0x10/0x10 [ 1219.503328][ T30] ? vprintk_emit+0x631/0x770 [ 1219.508202][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1219.513256][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1219.518254][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1219.523760][ T30] ? _printk+0xd5/0x120 [ 1219.527940][ T30] ? __pfx__printk+0x10/0x10 [ 1219.532578][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1219.537468][ T30] ? __pfx__printk+0x10/0x10 [ 1219.542086][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.547746][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1219.552803][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1219.558821][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1219.564839][ T30] watchdog+0xfee/0x1030 [ 1219.569105][ T30] ? watchdog+0x1ea/0x1030 [ 1219.573546][ T30] ? __pfx_watchdog+0x10/0x10 [ 1219.578239][ T30] kthread+0x2f2/0x390 [ 1219.582330][ T30] ? __pfx_watchdog+0x10/0x10 [ 1219.587033][ T30] ? __pfx_kthread+0x10/0x10 [ 1219.591632][ T30] ret_from_fork+0x4d/0x80 [ 1219.596063][ T30] ? __pfx_kthread+0x10/0x10 [ 1219.600659][ T30] ret_from_fork_asm+0x1a/0x30 [ 1219.605479][ T30] [ 1219.609530][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1219.615255][ C1] NMI backtrace for cpu 1 [ 1219.615271][ C1] CPU: 1 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 1219.615298][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1219.615313][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1219.615352][ C1] RIP: 0010:rcu_read_lock_sched_held+0x0/0x130 [ 1219.615389][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e9 d7 ac 26 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 83 ec [ 1219.615408][ C1] RSP: 0018:ffffc90000bd7668 EFLAGS: 00000002 [ 1219.615429][ C1] RAX: 0000000000000001 RBX: ffffffff8e367920 RCX: ffff88801ba81e00 [ 1219.615446][ C1] RDX: 0000000000000000 RSI: ffffffff8bcae720 RDI: ffffffff8c206820 [ 1219.615463][ C1] RBP: 000000016fba3800 R08: ffffffff8faf6b6f R09: 1ffffffff1f5ed6d [ 1219.615480][ C1] R10: dffffc0000000000 R11: fffffbfff1f5ed6e R12: ffff88801ba90000 [ 1219.615497][ C1] R13: dffffc0000000000 R14: 00000000001ea4da R15: ffff88801ba81e00 [ 1219.615518][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 1219.615537][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1219.615554][ C1] CR2: 00007fad21235000 CR3: 000000000e134000 CR4: 0000000000350ef0 [ 1219.615574][ C1] Call Trace: [ 1219.615584][ C1] [ 1219.615593][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1219.615630][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1219.615665][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1219.615708][ C1] ? nmi_handle+0x2a/0x5a0 [ 1219.615744][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1219.615774][ C1] ? nmi_handle+0x151/0x5a0 [ 1219.615796][ C1] ? nmi_handle+0x2a/0x5a0 [ 1219.615820][ C1] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 1219.615857][ C1] ? default_do_nmi+0x63/0x160 [ 1219.615880][ C1] ? exc_nmi+0x123/0x1f0 [ 1219.615901][ C1] ? end_repeat_nmi+0xf/0x53 [ 1219.615935][ C1] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 1219.615971][ C1] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 1219.616009][ C1] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 1219.616045][ C1] [ 1219.616053][ C1] [ 1219.616061][ C1] update_curr_task+0x121/0x370 [ 1219.616090][ C1] update_curr+0x55a/0xac0 [ 1219.616133][ C1] dequeue_entity+0x85/0x13e0 [ 1219.616156][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.616181][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.616206][ C1] ? sched_clock+0x4a/0x70 [ 1219.616235][ C1] ? sched_clock_cpu+0x76/0x490 [ 1219.616266][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.616292][ C1] ? rcu_is_watching+0x15/0xb0 [ 1219.616328][ C1] dequeue_task_fair+0x189/0xd20 [ 1219.616372][ C1] __schedule+0x60e/0x4a60 [ 1219.616412][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.616441][ C1] ? __pfx___schedule+0x10/0x10 [ 1219.616464][ C1] ? schedule+0x90/0x320 [ 1219.616486][ C1] ? __pfx_lock_release+0x10/0x10 [ 1219.616516][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1219.616546][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.616571][ C1] ? kthread_data+0x52/0xd0 [ 1219.616603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.616628][ C1] ? wq_worker_sleeping+0x66/0x240 [ 1219.616663][ C1] ? schedule+0x90/0x320 [ 1219.616691][ C1] schedule+0x14b/0x320 [ 1219.616715][ C1] toggle_allocation_gate+0x16a/0x250 [ 1219.616751][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1219.616787][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1219.616831][ C1] ? process_scheduled_works+0x945/0x1830 [ 1219.616861][ C1] process_scheduled_works+0xa2e/0x1830 [ 1219.616915][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1219.616955][ C1] ? assign_work+0x364/0x3d0 [ 1219.616989][ C1] worker_thread+0x86d/0xd40 [ 1219.617027][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1219.617054][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1219.617091][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1219.617123][ C1] kthread+0x2f2/0x390 [ 1219.617144][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1219.617174][ C1] ? __pfx_kthread+0x10/0x10 [ 1219.617196][ C1] ret_from_fork+0x4d/0x80 [ 1219.617231][ C1] ? __pfx_kthread+0x10/0x10 [ 1219.617252][ C1] ret_from_fork_asm+0x1a/0x30 [ 1219.617298][ C1] [ 1219.675958][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1219.675980][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12381-gc33ffdb70cc6 #0 [ 1219.676013][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1219.676030][ T30] Call Trace: [ 1219.676042][ T30] [ 1219.676054][ T30] dump_stack_lvl+0x241/0x360 [ 1219.676098][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.676135][ T30] ? __pfx__printk+0x10/0x10 [ 1219.676175][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.676207][ T30] ? vscnprintf+0x5d/0x90 [ 1219.676249][ T30] panic+0x349/0x860 [ 1219.676280][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.676330][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1219.676374][ T30] ? __pfx_panic+0x10/0x10 [ 1219.676404][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1219.676441][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.676471][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1219.676511][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.676541][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1219.676571][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1219.676612][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1219.676655][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.676685][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1219.676730][ T30] watchdog+0x102d/0x1030 [ 1219.676771][ T30] ? watchdog+0x1ea/0x1030 [ 1219.676817][ T30] ? __pfx_watchdog+0x10/0x10 [ 1219.676854][ T30] kthread+0x2f2/0x390 [ 1219.676881][ T30] ? __pfx_watchdog+0x10/0x10 [ 1219.676918][ T30] ? __pfx_kthread+0x10/0x10 [ 1219.676944][ T30] ret_from_fork+0x4d/0x80 [ 1219.676982][ T30] ? __pfx_kthread+0x10/0x10 [ 1219.677008][ T30] ret_from_fork_asm+0x1a/0x30 [ 1219.677063][ T30] [ 1219.680524][ T30] Kernel Offset: disabled [ 1220.202193][ T30] Rebooting in 86400 seconds..