last executing test programs: 1m11.010286441s ago: executing program 2 (id=300): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') getdents64(r0, &(0x7f0000000200)=""/171, 0xab) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 1m9.956660367s ago: executing program 2 (id=302): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1f0a00c30001bcf2f39ecf0f1d2391401d71e40c1c330fd92cfa5be673e044231a7f38639e3b93e704e6c72250beec6ba27e033df06cae5ef267682a56512467a6282a0414265a1669c148a844"], 0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capset(&(0x7f0000000100), 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3e3, @time}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x240, &(0x7f0000000a40)="$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") syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x402) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./bus\x00') ftruncate(0xffffffffffffffff, 0x0) 1m7.598950149s ago: executing program 2 (id=308): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x1ff, 0xee}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x40000000000000fd}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 1m7.077237371s ago: executing program 2 (id=310): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000001b40)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000000500000095000000000000009500a505000000009d626e70e9673322c7b85ffaf65c66ad587d51e8e0c4dfe91759b3f0f9f5ae8e3f9b82270eae11be2c6b3322403a0e3a6ac538f90427f5672fe15e688d62cec17c4a6f411694008948951a47de9b1a3edb8696448c0169532ec1422053b8636554129da48fa59cffe396b8d33b1e214015bc797bea7bc32a0dd1b228af1f0a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 1m6.835399211s ago: executing program 2 (id=312): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="4c64d3c152103dc36ccdf6d282a5b64cde7e2e4945ee1204fbc3da589679eebbf2d95eeee9210c3ede286dc5989a77661d26ce0d6d85bdc5f58f1e2bee042777820a85e34d5d395720dbf282b140655f5deab51ec02ec2c8b57f41b4bcfc081f9781164c7da9438cf63a96c6eece674abd389f457d9ec1204d4e8e8c9d7499df823a8f2d51cea209f1f2700e08cd28d5d65664d456b611e5a3bb2af55893f1cb11285e69d795cc2317eea324e2de6f187164fea9b7fb7e69d1ec5b84607af53428dc89222bc947e2d805f2eb5bad9398ef4c76276e96200f49dec69006e24eb74e7444ee2ba8615fe675f004bae5626fec8362dae918f6", 0xf7, 0x20000000, &(0x7f0000000740)={0x2, 0x4e20, @broadcast}, 0x10) writev(0xffffffffffffffff, &(0x7f0000006b00)=[{&(0x7f0000006580)="2818ae81da68104d1b2d891942b674804616cdfd8d7a04a108df5d605d86f9931d26a645a728b38f3a66fa43dfce2cc63353fe8b47ca9271427e6c53c796b766b30a10e585077f94991ec8bbaac6006042b034ed693985fbd7527364e93858937a365ac792ba26aacce6660170d24e5ed04da56774c7c2496100450f1dd04694043141fa37b6522c890a1efbc8853023a8b9d42fb6924eaddfc24dd81f622187c756c39c34ece65c9b05073f049ed534bd47a862540113727906ac5e2f497f455c1862b9de55cbb66c0fd1698cd531a558d0884ba53935bfc6f62d1953f089109a5a2281", 0xe4}, {&(0x7f0000006680)="2cc4bb1e7b541b2d80aa81582271e0186d84d0371a901349ffc3b30ddbb251bbf0fb01361879d78cd3a07a3c9f189ecf6d16c80ea38f5fd509724deca72ced35566e216669fbe84ed732215569afff1cf188a00c5ca6867732269ceafcbc529d74a6e0b46109df18ea770aa6391f67153005d2691697fbe2c4c041fcbf136e8659965e3d44b391004d", 0x89}, {&(0x7f0000006740)="0b4f1f1b84c04eaa783aee28da50fa725251065a2bff6c0d0f0a0929acf2ead267f343ff5987d26c4ce9c68e91fa4b8a7187dc0adbaa5cc69c1ac534e218af8f9e4c28ac191ef21bd4a7f1d4736e9efd9e60f0bfb5690d4e5aa53ccc1d42ff6537c4ead76e17205eeadf6789f8533da29190316e19456e8874f70656f15bacc3d9915cd461b229bc9623177d6bfae4b3ded1e55059afff01dd5911cdfa0391", 0x9f}, {&(0x7f0000006800)="f58e7f3318a8f02f8d57335f6aa1e4ad64da3aa25dc0c00cc1c7dad236992049912745bcbcf42f156070ecacc39f3ad9be47215e7808c8b2899dbe8f363b72f06606a593c07cd5dc96761b9f67a312ff83cc9f9f5c1d9a681977bd0483ebdb449087861cedeb1e4be1b7144c36c00581991cce66c51ae8bdc1de0a7cf2951288bd4611b28e12b943609c370759b5224c89694cbfef5ac0349e55e1b78e2fd4ecdeafff16900f1e770ae96b9783486eb31ed4", 0xb2}, {&(0x7f0000007180)="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", 0x5ff}, {&(0x7f00000068c0)="c8549da8891d1a31961a94ce44bd89f97b29d45ed865eb6336e29cd9a38058f260d17021d2611cca528f1d4f4584a554d44b7532b0e3e4dfc101ed27dfa880bce63b8d5ce42f637cfa66f5fa9ae0869a87b7a4cf12cdb37f7b08e4785af6592897b53ec60a852b20ec5defa6497d7368903985489db45e88fa2af01d37ea57a4b3bbefc2eabc7bb866c96511eff8cde8f57414b2d16154f6b49fbbe47f19b656fdf88f8d6e62627bb6a5130713bb91e1c231be3b1413bd680c3455e2b7bed500f4233a3d8d8ddce2f09d9b4932c5cd593a07e659f982348b8dcee3165bfbfcf2841ef85e5fd142dc7204af", 0xeb}, {&(0x7f00000069c0)="9fe7e57e7c805a42b80b8f63c18bcc698970431d83d232d01d4681c5483edc603a2e04a16638eb6905a0081d7fd81d56ceb15f212fae47412557c67961de6b4c4188befffce147773c0b4f7e311ab87c91168f4fa705a0749f71e73367a72d32af4a62a2b0989467", 0x68}, {&(0x7f0000000800)}, {&(0x7f0000006a40)="fdf7aacffdf5dfe8e920306254d97ed93d8db698bbb5f7df060b9d84c4739c5fb8458f97ccc0ab38dec38ab1ad6c9b17e7eddbe8da2427bee6ba5c55fa6809f6a04d6374cc02d70227f9b1613f0afab1c96f6e4ad3bff577841d5329c2b2957ac5609049887d50460fde314af3d9e35a7a9ee2d05516e72fe210ab48903cb287012b23ed4d3aa11a5aaf12ece06ef285719306", 0x93}], 0x9) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x800, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0xac, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0xac}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') write$binfmt_elf64(r0, &(0x7f0000008180)=ANY=[@ANYBLOB="7f454c46007f7f7301000000000000000200030009000000b00200000000000040000000000000002300000000000000a60c000006003800010005000900050002000000090000000000000000000000b7b9000000000000000000000000000000000000000000002bf3ffffffffffff0800000000000000fdee1900a4675590a6f71dbb3bfe74885847b62ee23084ad8acd0aebc0aaab86cba85b0e551b97ec38252af1221ba4db568e1a9c46e4dc260f96889570c15c15b7c7082376ad8d304e9afd46cd60eb7e57466a98f18243f517a8a66de60f39bc794654f90acad172137d4dcd9c3f28be55d97293776cec3d5b951c6bc0995cdb504391763463e49cb4b4f61417d1838f35937302b891bfef42ab225239200f65715a3a21db9f6a17a43d8abd375aaa761a594e60a54fd55e726f02b5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef210000000000000000000000000000000000000000000000000000e1000000000000"], 0x934) sendto$inet(r1, 0x0, 0x0, 0x24004011, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x48) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0xffffffffffffffff, 0x100, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_ext={0x1c, 0xa, &(0x7f0000000840)=@raw=[@ringbuf_query, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @exit, @alu={0x7, 0x1, 0x2, 0xb, 0x7, 0x1, 0xfffffffffffffffc}], &(0x7f0000000900)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xd, 0x9, 0x9}, 0x10, 0x5563, r0, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r2, r3, 0x1]}, 0x90) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000007140)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0xfffffffe, 0x4) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x10000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000580)="cbb886fecd30e1e6afc568f18125d63e", 0x10) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @loopback}, 0x8) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) recvfrom$inet6(r5, &(0x7f00000005c0)=""/17, 0x11, 0x40006140, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000b40)="a866909286944e80edf3e45863ea4427752fbe2a76def0780e9cc481946fad1a7afac9c504d167af591bc7472bbb1ace9d8714f49d435b638e27e726fbef0f2ac3c0677b82c2a61dd5c6995a35c31de70ccad22c6bb08c61fc3cbf6ab216a777c58e470694e1d018cd6ff198105e909009ac1a6cfebd1aadbd0eb2b4e8fa855bcb67d4cd9fd7fcf2e556052b22e8927496433bff0eba89ee13167f27e86bdf4b412022330a1fd85cd01a0277968c781496ff204abbfc48f9e19bbe9c7523e42ec7928fe8efbd2313f3cae0833030fce7", 0xd0}, {&(0x7f0000001280)="706c75a00c7b1270537ca2f085681cc0b260515bae8e66c517ca5118670098c35d7293a48197bb4291a41ca1be8f760913438797067b77d01414f25de19ed41fe8061fce17db12daddbffe942009bf7c83c7702424295f8c60149c5b3d37646de81e7b3cd2ada4c69de7132a83ba03f53193efce9d1921f1ef49b9540a4509a71a9c51651ccf3b08ed3c2644ef8b6ea57c34c6c61af5f114ec45bded3a950d345dd8ca62743f29751f2026960e11f04430870694132862dd36ef7aff4709a8abbebc4d2ced93de21aee0e1e0ef8c1b37f2ddf0478cfdaaac3ca4c017ee75899eaa4f7e7b048ec30aa2ce2ce4cabe098b64669aa0f22811dc6e741f", 0xfb}, {&(0x7f0000000280)="db7ed3d23993318c5a0ff64798bb915675a67593fe036a1b2d8fcd317d90d096968945851ed2ab636e37094ea2bb633f9dc9e1451dbdd094b550f556ac3b1d8f1fd9b2041cd4e120d2804db061c5e75d8c27c2c49465e7b33630f04656d69a3bf05363cfd5979c0289faaa3a7dff615649e8bfaeebb6", 0x76}, {&(0x7f0000001380)="3c5d6855187f2924c9eebb3d8b92b80726a489fc71d69c2eaeebd1530fb4946cd8814db91f4a991c5a253fd4b7b972a85cf2d867355ed2382e4079bb900771a1db3bf4339625e5e173e36a233b1089d926fea5c30870242d81636a02b42c385772fdc8edba5f47a2a3695244c8bc145f534c37dd7cbc8f328b209649747f5c1a015fbded77d975892180475d01dbc5c468fa7a6f39c77115b37ac5b78f985dae42a26bdddbf691642f2f64a614839104986e18729eb204a1b562a25539d422f9faaf1ee5a2dcadfa9a12db26b97b6d09d935241d3fcb057eddfcc5f8e6b5", 0xde}, {&(0x7f0000000300)='}4', 0x2}, {&(0x7f0000001480)="58ca02c7cf40a6d53b30d92075ae73964c9b41af115d3b5db3cdda13113a15c3bec9dc8c4145a7f98c13fbde1bf8cc21926dac60f536b45ba7cdfa838528d191bea34d7c02ad65ea91546a6da156799cce608c7f496934431a8744b73010cca246f0b46a13276056a459b405beaf378c5779d0428183442cffd3927a09eaccaf8bc07fe67f3a3ebd1a757db6ed545b5fdb7b6869844836dca9591c4086cceab01968fced95", 0xa5}], 0x6}}, {{&(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000800)=[{0x0}, {&(0x7f0000001640)="5e7750e3ccf0b663b66295dd9706dffd5952dca3ed41df32cb5bff1867c4f187215216b227f1e6c379682ea33cda553cc59b38167c3cb883abe239831b07b82b98c699f50e57a94c50fb9a8548647a824488112e6ecb231bda1e68e5a9637e7c2630a54f4aa30f68f91fac3552b63dd04afae2b95f", 0x75}], 0x2}}], 0x2, 0x40000c0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="4392c9d2eb9b977d238e51b11fd0c0a6baef72102b9a03b005e93789f83bacc0b5f3fd1ae10513da3b2fd383c501a61fd830ec66", @ANYRESHEX=r4, @ANYRESOCT, @ANYRES64=r4], 0x100000530) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="26067353eec639e02fa95d34178f1724e3b4df87252b91", 0x17, 0x80, &(0x7f0000000500)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) 1m4.100799954s ago: executing program 2 (id=318): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 55.661106442s ago: executing program 0 (id=349): syz_emit_vhci(0x0, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) 51.088553725s ago: executing program 0 (id=355): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 46.050938145s ago: executing program 0 (id=360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800c001a80080002800400018006002200c630000008001c"], 0x60}}, 0x0) 39.0118193s ago: executing program 0 (id=362): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001300090700"/18, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) r3 = socket(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x3b, @multicast1, 0x4e24, 0x0, 'lblcr\x00', 0x28, 0x80000000}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x10) socket$pptp(0x18, 0x1, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @remote}], 0x2c) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100030c080000000000224e0000", 0x58}], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x30, 0x0, 0xfffffffffffefffe}, &(0x7f0000000340)=0x18) 37.859700673s ago: executing program 0 (id=367): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000003a80)={0x1098, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x1088, 0x0, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@private2}, @generic="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", @generic="17de308440f8061f989ed3486db9872cd56c7f32196fc57d94e7efd388b6f33cdfd5ab8aa0c3ff18cebfc9b6facad1e7be43365948bc2b52727b5c7816ab75f724d2131753d8c25d957aaf48117dd8215b7c3aab0377e8b456fe4c89322c83f657b70a530d5a073c976303b02aed2c2e"]}]}, 0x1098}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000005c0)={0x1c, r5, 0xa29, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x5c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]}, 0x6d}, 0x1, 0x0, 0x0, 0x20040885}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400), &(0x7f00000004c0)=0xe, 0xc00) connect$bt_l2cap(r10, &(0x7f0000000500)={0x1f, 0x7f, @any, 0x5, 0x1}, 0xe) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @generic={0x0, 0x2}, @eol, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}]}}}}}}}}, 0x0) bind$bt_hci(r1, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "bf3dac4b47efcfbb02dab3b0f1e58b1faf0d6d0809541a53207ad5a32fa9dae338c849c1ffe826b3e555fc021bd14f42b64f2647a3d4cdbbd26745b6414016e9ba0ab4645e07d15b8db3811078b6c4693de644c33c71ce5ec24713c7e6f508e26362cd6dc23af93a53dd99a32080d57075781253374860e4c3ab4690df6262cc789b6618f389dc672553b34b1b686ccd3b783660772479892b5f2d02fa4bcc4104c5c6ac0962c3a63093a434849c6aec2ec77a5316f98cc447e49b0f7c874662615694a7957c9b81014c76945f6de4fd6c21cba53a4d5b238b3ee3648e0aedd28ba8cd3a7770a854f738"}, 0xf5) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110180000000000d4050000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) writev(r11, &(0x7f0000001280)=[{&(0x7f0000000080)="fd", 0x4}], 0x1) 36.970090046s ago: executing program 0 (id=371): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 21.394754126s ago: executing program 3 (id=389): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x0, 0x10000, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}) 20.747819358s ago: executing program 3 (id=391): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$eJzs3d9rW9cdAPDvla3MTpzZ2faQBZaYsZGELZIdL4nZQ5LB2J4C27J3z7NlYyxbxpKT2IThsOcxGGMb28v61JdC/4BCyZ9QCoH2PZTSEtokfehDWxVJV4nrSnZCJCuxPx84vuf+0P1+j4SOdO691g3gwBqNiKsR0RcRZyNiOF2eSUtsNkptu0cPb8/UShLV6vVPkkjSZc19Jen0SPqwgYj4w28j/pwkjQVblNc3FqeLxcJqOp+vLK3ky+sb5xaWpucL84XliYnxi5OXJi9MjnWsrZd//eG//v76by6//fOb96c+PvOXWr5D6bqt7eikxnOSrT8XTf0RsdqNYD3Ql7Yn+ywbJ93PBwCAndW+438vIn4cEY//2+tsAAAAgG6oXhmKL5KIKgAAALBvZerXwCaZXHotwFBkMrlc4xreH8SVKJbKlZ/NldaWZxvXyo5ENjO3UCyMpdcKj0Q2qc2P1+tP589vm5+IiGMR8c/hwfp8bqZUnO31wQ8AAAA4IGrj/KFMo16bfDbcGP8DAAAA+8xIrxMAAAAAus74HwAAAPa/b4//RxuTpH/vkwEAAAA67XfXrtVKtXn/69kb62uLpRvnZgvlxdzS2kxuprS6kpsvlebrv9m3tNv+iqXSyi9iee1WvlIoV/Ll9Y2ppdLacmWqfl/vqcIz3ScaAAAA6Khjp+6+n0TE5i8H66XmULrOWB32t8zzbZ50Kw9g7/X1OgGgZ1zgCweXMT6w28B+YI/yAAAAuuf0D5+c/x+MLef/j953bAD2u+c8/w/sI87/w8G17fz//3uVB7D3jPGB3Y4DtD3//07ncwEAALpjqF6STC4dAwxFJpPLRRyt3xYgm8wtFAtjEfHdiHhvOPud2vx4r5MGAAAAAAAAAAAAAAAAAAAAAAAAgFdMtZpEFQAAANjXIjIfJRGRxEDE8E+Gth8fOJR8PlyfRsTN/13/963pSmV1vLb80yfLK/9Jl5/vxREMAAAAYLvmOL05jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATnr08PZMs+xl3Ae/ioiRVvH7Y6A+HYhsRBx+nET/lsclEdHXgfibdyLieKv4SS2tGEmz2B4/ExGDPY5/pAPx4SC7W+t/rrZ6/2VitD5t/f7rT8uLejDarv/LPOn/+tr0f0d32fehdHri3pv5tvHvRJzob93/NOMnL9j//umPGxvt1lVfizjd8vMn+UasfGVpJV9e3zi3sDQ9X5gvLE9MjF+cvDR5YXIsP7dQLKR/W8b4x4/e+mqn9h9uE3+kXfuTRk7Vaut9nto2/+W9Ww+/32rDJOLB39J6i9f/eLv46XP/0/RzoLb+dLO+2ahvdfKNd0/u1P7ZNu3f7fU/026n25z9/V8/aNSyz/gIAKCbyusbi9PFYmH1Va/UGvMSpNHByujLkYbKwaz0umcCAAA67emX/l5nAgAAAAAAAAAAAAAAAAAAAAdX8///m7/l3I2fE9sab6BZSZI9bysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE6+DgAA///TSdFe") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)) 20.183923144s ago: executing program 3 (id=393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000600)={0x4, 0x0, [{0x0, 0x0, 0x300}, {}, {}, {}]}) 12.070137226s ago: executing program 4 (id=395): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x164, &(0x7f0000000440)="$eJzs28tKAmEYxvFnPJadtTZtElrUJieVDu7qUkQnkcaSbKMEEXQj3V9B3UCGg045Cpmik87/t3of3/nwG+HT18UIQGCllZYhQ1FJe5IeU4bfWwIwI21Jn20AwRR+93sHAPzxdinVJb1+PJQUjg7MB53+Ra8fig32n6TdSLdvxLXknS9epIPeemN56PqE208M7R/u995/Rata07o2tKktJbv9srt+Z8JpCAgWQxlv7nshpKuqbR27OerkrJtjTs55ct7NcSdnSrd2eVq3AGBMoV/Of9hz/iOe8w9gfjWareuibVt3oxUx/eHioBTPSfGxTFJ0/nb+g21Q/Cz8/mYCMG3mfa1uNpqto2qtWLEq1k3uPFc4zZ9kzwqmM/mb/fM/gMXx/aPv904AAAAAAAAAAAAAAMC4Utoe5TLvY30AAAAA5tAsHify+x4BAAAAAAAAAAAAAAAAAACARfEVAAD//7xUIVg=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, 0xee01, r2) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)={0x10}, 0x10) 12.054650257s ago: executing program 3 (id=396): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1f0a00c30001bcf2f39ecf0f1d2391401d71e40c1c330fd92cfa5be673e044231a7f38639e3b93e704e6c72250beec6ba27e033df06cae5ef267682a56512467a6282a0414265a1669c148a844"], 0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capset(&(0x7f0000000100), 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd1, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3e3, @time}) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000800)=ANY=[@ANYBLOB="00694ba7e2ae8959c3a1a1006a809454d1b9e49ca9bcfc4fc4988c654d24bf47f2193dc2fb66905490f63da0382e7e8b6fa7bc01215b438ad0a0c54300383d371f98a51969e94000800000d1a09c066c83c90eb1659f642d9740b323fc7da8f03a2e547ee2dd62af8c0b51da0e3b75a1ccf23bb04d83fa977502819dcc5fbe622c4c35880cfe115f8743ddf5255ed6532d8ce90700000000000000bd3c353b218ccf99b00749bccd22cdc096d92b7eaf583df7f136a59dade8dafa14bcefad343abff7d790b6e7152b1031acbba628c1f5310e53cd87b92cdfd51281dba68af9b738f0a097e59b277ef9a9bd361570f431b43d9a107367e5ed6f27bd9ef071148bc60b4845accf826763066baf9b092754602e7fe53fbd347a39262850b6890a0200863518f5cd8e1d6d388c66123eac43a65f0b3a585c80576666c4ee5d579c349d415741bd3de7fd5af2fa9b50f63bbd192fa1ee4eb9d2eb2b4afffa5dd5a32f292bffcecbcc18071375b13a01e4643601001601b7a1eca9816df0137b589441fca8bd69993caed53c6d9deae2183ebdb1d37c31837dd80d88d2b991a03ac3007ba522716c110cc8e8ca11b8815b0e6e7b07505d2d6d9a6e9b846965a6dc000cbbb2b8312b8e4a9981468eb97b7c089d1592edbce5d97203ce4d11f4e3a8dbae0a819ea246f29b13795bbece4ccd27c8448055daa14ee855d1c70644c6cc4fd8d916c39b03b10894b8e98389b44dbbe0d8719e487b6a37d0"], 0x1, 0x240, &(0x7f0000000a40)="$eJzs3cFLFG8YB/BH3d9P7bISQRBBAxF0WlTobkSBJBXJEkZIW64hrggJQh3UTkGnLh07djOCOnSr/yHo0iW6RMe8dQgndMJ1c1e2cndDP5+LDzPP13nnPbyzy7Lv3jw+Nzs1vzC9tvY5+vq6IjdyZz1Nu2IguqMnMisBAOwn39I0vqaZ3Tt72zUkAKDFmn/+AwD7RZPP/yttHBIA0GJ//v7/ycSbj6XyyJkmWtPqZwcfJn9/jADA3hqfuH5x/e2p/tF49Thi7uFicbGY/c3On52OmahEOQYjH98j0i1ZfWF07PxgsqE/oji3/DO/vFjsqc0PRT4GIq5d2pkfSjK1+f/i0Pb8cOTjSP3rD9fN/x+nT27LFyIf727HfFRiauMlybb80lCSnLs89ku+d7MPAAAAAAAAAAAAAAAAAAAAAABaoZBsGai3f0+h0Oh8lm9+f6Dq/jyPNvO5OJaLB529ewAAAAAAAAAAAAAAAAAAAPg3LNy7P1uqVMp3t4pbV2cO1x5R7HGxMfEtvMSJiGj1XbxcLb9/NnljvPOT2cai/qy+6PzAdim6I2KzOPp0pPR66dOXnT2xUj3SlcvWhVKlzmKRtHlxAgAAAAAAAAAAAAAAAACAA6b6NeBGHWl7BwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHVD9/f+/KFb7s3/WoCc7+byj9wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMH2IwAA//9XF6x9") syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x402) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./bus\x00') ftruncate(0xffffffffffffffff, 0x0) 11.744036243s ago: executing program 4 (id=397): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r0, 0x0, 0x0, 0x0, 0x0, 0x3947b55cadf8a07e}]) 11.339140625s ago: executing program 1 (id=398): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x11, 0x0, 0x0) 11.338447316s ago: executing program 4 (id=399): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev, 0x3}, {@multicast2}, {}, {@broadcast, 0x1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.078162168s ago: executing program 3 (id=400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028c0003010000000904000000010100000a2401000000020102072408000000000904010000010200000904010101010200000c240201000080008406000008240201000000000905010007250100000000090402000001020000090402010101020000072401000005000b2402012000000111f7b70007250100000000eaff1082201831c64c384cdb9c962441c6286220e0e25eff429c10e10000000000"], 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0x0, 0x2, 0x1000}, 0x48) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup(r4) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x64, 0x1000000000000, 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00022803050000000000000000000000000000f9446288be560e54fde5f132c266bf6b629331810af3d85b943f6b3dfabe8aac205a9938e75984f843b9fd58ac001e3cb54b397f92f5889b08e1d8fcb69c4aa64ec340de17e6c840c0f3d0721ab859855dae58ea0c72de3c9ad62720af25d14e7becdbcd3550bc6acca6f432351f7f0700"/149], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4040844, &(0x7f0000000540)={0xa, 0x0, 0x0, @local}, 0x1c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @private}, 'netdevsim0\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 10.077951138s ago: executing program 1 (id=401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) 10.077706289s ago: executing program 1 (id=402): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001051, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) readv(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 7.982723199s ago: executing program 1 (id=403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 7.904349895s ago: executing program 4 (id=404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000600)={0x4, 0x0, [{0x0, 0x0, 0x300}, {}, {}, {}]}) 7.078414083s ago: executing program 3 (id=405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_init() open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x1c080}, 0x45) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000040)={0x7, 0x445, 0x0, 0x200000000000}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 7.078058163s ago: executing program 1 (id=406): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x164, &(0x7f0000000440)="$eJzs28tKAmEYxvFnPJadtTZtElrUJieVDu7qUkQnkcaSbKMEEXQj3V9B3UCGg045Cpmik87/t3of3/nwG+HT18UIQGCllZYhQ1FJe5IeU4bfWwIwI21Jn20AwRR+93sHAPzxdinVJb1+PJQUjg7MB53+Ra8fig32n6TdSLdvxLXknS9epIPeemN56PqE208M7R/u995/Rata07o2tKktJbv9srt+Z8JpCAgWQxlv7nshpKuqbR27OerkrJtjTs55ct7NcSdnSrd2eVq3AGBMoV/Of9hz/iOe8w9gfjWareuibVt3oxUx/eHioBTPSfGxTFJ0/nb+g21Q/Cz8/mYCMG3mfa1uNpqto2qtWLEq1k3uPFc4zZ9kzwqmM/mb/fM/gMXx/aPv904AAAAAAAAAAAAAAMC4Utoe5TLvY30AAAAA5tAsHify+x4BAAAAAAAAAAAAAAAAAACARfEVAAD//7xUIVg=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000000ac40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, 0xee01, r2) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)={0x10}, 0x10) 6.051146396s ago: executing program 4 (id=407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create(0x20400) unshare(0x40400) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x70002000}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="5900330050000000080211000001080211000000080211000001000000000000000000000000000004f0000000000000060200002d1a000000000000000000001300000000000000000000000000000071070000000000000000000004008e000600cd0000000000448de74c84baa0366b129251d32c9e2ec887f4448d53cc4d6fb46f6d0e353391a69414eafffed1cf8f199271cc1868fb0ece0417d58ff9f7185e14ba0351c1054e607373ab269e23a9d7f1e0a1906e801d5c1c011d4962e9351e8d9bcf8272bbe553679db1aa30afddaf0b1d8bbea9cdcb6c6d54db3439ec1b156921d5ad8a1818"], 0x84}}, 0x0) r5 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r7 = socket(0x6, 0x4, 0x3ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) bind$packet(r5, &(0x7f0000000080)={0x11, 0x18, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xe, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r8], 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="08030000", @ANYRES16=0x0, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="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"], 0x308}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x96, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaac886dd6010104000600600fe8000006b000000000000609bca172e6c70a07b619d1b9b3c00000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="84c2000090780000220503c0ab030300020409000402000a8bfbd54ae56dd076080a0000000000000000040213127232407c80067615774fdbb46eb86cc8000a111fad2ea7434823fe09f989b43eb61a1a000000"], 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x803, 0x8000) 2.08719014s ago: executing program 1 (id=408): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r1) execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000140)=[&(0x7f00000021c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'/1142, &(0x7f0000001080)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\ra\xb1\xc61\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfeJ\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1', 0x0]) 0s ago: executing program 4 (id=409): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcggXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtlZe+3u2ptXO/TziWaf55ln5pnf/OZlXyJrAnxuXTiR9t10cuHEa7eq9sadhZWNOwvXevUkk0laSbtbpLieFB8k59Od8oVqZjNcMWw7v14+e/HDjzc+6rba2RqveukMD7A9yl6sN1Nmk4w15UPYNt4bDzbe5Fa12MxMlbDjvcTBfhtPUm7z46NbPYOUY32Nodc78PQouu+bfbrX/0xyKMlU7w1tvdvZevIR7um+7kXrjy8OAAAAODAO37ud3Mr0fscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5Pm+f9FM7V69dkUvef/T/Q9Y39in8MdbvfIpnqVu60nEQwAAAAAAAAAPF5fupffXSzL6V67LOr/83+5bhypX5/J27mZpazmZG5lMWtZy2rmk8z0DTRxa3FtbXW+t+anZVkOWfP0wDVPjxhw51HsNQAAAAAAAAD83zjXlD/LhUzvcywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBNkYx1i3o60qvPpNVOMpVkolpuPflHr/40u7vfAQAAAMATcPhe7uVWpnvtsqi/8x+tv/dP5e1cz1qWs5aVLOVS/VtA91t/a+POwsrGnYVr1fTZcb/9n636H6f3DKMeMd3fHgZv+Vi9RCeXs1zPOZk38lZWcimtes3KsV48g+N6r4qpONdVlqMl6FJTVnv+q6Y8GGbqjIxvZmSuia3KxrO7Z6L/6DzAlubT2vzl58h95Pzcrlsp/ts7Jod6c5Jnvr93zsfva2ceys5MnO47+47unonkK3/6/Y+urFy/eqVYP3FwTqP7MPmvratmZyYW+jLx4siZuHzz6czETq28sFm/kO/lhzmR2bye1SznJ1nMWpYym+/WtcXmfK5eZ3bP1Pltrdf3imKiOS5jO2L68uFuuVtML9frTmc5P8hbuZSlvFr/O535fCNnciZn+47wCyNc9a0BV/2fhwd//KtNpZPkl015MFR5fbYvr/333Jm6r39OK+Vkd73nHtm9cVP7i02lOhI/b8qDYTMTU9l8l+hF93wvA+MDM/Gb+rZyc+X61dUrizd2jFusD97eK9m++wfnRlKdL89VB6tubT87qr7nB/bN131HNvtaO/t+29ns2+tKnWg+w312pNN134sD+xbqvmN9fVuftz4ty7L7eQuAA+/Q1w5NdP7d+Xvn/c4vOlc6r019Z/Kbky9NZPxv499qz4290nqp+EPez0+z9zd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTzffeffq4srK0uqOSlmWt4d0PZZK2sm2OX/9S98ySeqHAY0+YLX0+VZSz2mnqdxfYLcfbHfee9Ak/LM5Jk8k4Y+kMjX0/NlZ+aQsy4MR8yiVsnFQ4tmPyr7eloAn4NTatRunbr7z7teXry2+ufTm0vWzZ86cnTt75tWFU5eXV5bmuq/7HSXwOPR9AgcAAAAAAAAAAACeEqP9cU7xcH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAQLpxI+26KzM+dnKvaG3cWVqqpV99a8pMkrSTFbFJ8kJxPd8pM33DFsO2sJxc//Hjjo26r3Uz18q3d1hvNejNlNslYUw4wNWhmeXvYeEU9zo3h442o2NzDKmHHe4mD/fa/AAAA///tbhq7") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): T4116] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.507323][ T4116] device bridge_slave_0 entered promiscuous mode [ 82.564750][ T4116] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.571947][ T4116] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.628115][ T4116] device bridge_slave_1 entered promiscuous mode [ 83.401606][ T4076] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 83.414555][ T4076] syz.4.86: attempt to access beyond end of device [ 83.414555][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.430506][ T4076] syz.4.86: attempt to access beyond end of device [ 83.430506][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 83.446910][ T4076] syz.4.86: attempt to access beyond end of device [ 83.446910][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.461391][ T4076] syz.4.86: attempt to access beyond end of device [ 83.461391][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 83.477401][ T4076] syz.4.86: attempt to access beyond end of device [ 83.477401][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.491845][ T4076] syz.4.86: attempt to access beyond end of device [ 83.491845][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 83.507780][ T4076] syz.4.86: attempt to access beyond end of device [ 83.507780][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.522233][ T4076] syz.4.86: attempt to access beyond end of device [ 83.522233][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 83.538153][ T4076] syz.4.86: attempt to access beyond end of device [ 83.538153][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 83.552599][ T4076] syz.4.86: attempt to access beyond end of device [ 83.552599][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 84.327011][ T3556] Bluetooth: hci1: command tx timeout [ 84.708594][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.740577][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.281483][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.349174][ T4116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.365741][ T4116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.528863][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.745907][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.784020][ T4173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 85.845884][ T4116] team0: Port device team_slave_0 added [ 85.896301][ T4116] team0: Port device team_slave_1 added [ 85.960991][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.080087][ T4164] loop3: detected capacity change from 0 to 32768 [ 86.088820][ T4116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.117152][ T4116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.172277][ T4164] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.102 (4164) [ 86.260866][ T4164] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.285795][ T4116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.316973][ T4164] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 86.333356][ T3556] Bluetooth: hci1: command tx timeout [ 86.367014][ T4116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.372892][ T4164] BTRFS info (device loop3): enabling auto defrag [ 86.403243][ T4116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.493541][ T4164] BTRFS info (device loop3): max_inline at 0 [ 86.499572][ T4164] BTRFS info (device loop3): enabling ssd optimizations [ 86.576915][ T4116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.653569][ T4164] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 86.703310][ T4164] BTRFS info (device loop3): use lzo compression, level 0 [ 86.741084][ T4164] BTRFS info (device loop3): using free space tree [ 86.785247][ T4116] device hsr_slave_0 entered promiscuous mode [ 86.882722][ T4116] device hsr_slave_1 entered promiscuous mode [ 86.913183][ T3591] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.943222][ T4164] BTRFS error (device loop3): open_ctree failed [ 86.960140][ T4116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.001714][ T4116] Cannot create hsr debugfs directory [ 87.220216][ T4204] loop3: detected capacity change from 0 to 136 [ 87.283375][ T3591] usb 1-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 87.323746][ T3591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.404021][ T3591] usb 1-1: config 0 descriptor?? [ 87.484421][ T3591] usb-storage 1-1:0.0: USB Mass Storage device detected [ 87.513224][ T4204] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 88.148396][ T3561] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.161597][ T3559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.170921][ T3561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.180323][ T3559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.188410][ T3561] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.196831][ T3561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.331730][ T3634] usb 1-1: USB disconnect, device number 2 [ 88.413823][ T3556] Bluetooth: hci1: command tx timeout [ 88.423161][ T4076] bio_check_eod: 2944 callbacks suppressed [ 88.423177][ T4076] syz.4.86: attempt to access beyond end of device [ 88.423177][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.444210][ T4076] syz.4.86: attempt to access beyond end of device [ 88.444210][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.460235][ T4076] syz.4.86: attempt to access beyond end of device [ 88.460235][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.474779][ T4076] syz.4.86: attempt to access beyond end of device [ 88.474779][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.490706][ T4076] syz.4.86: attempt to access beyond end of device [ 88.490706][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.505294][ T4076] syz.4.86: attempt to access beyond end of device [ 88.505294][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.521394][ T4076] syz.4.86: attempt to access beyond end of device [ 88.521394][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.535866][ T4076] syz.4.86: attempt to access beyond end of device [ 88.535866][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.551800][ T4076] syz.4.86: attempt to access beyond end of device [ 88.551800][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 88.566292][ T4076] syz.4.86: attempt to access beyond end of device [ 88.566292][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 88.678010][ T4218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.114'. [ 89.138540][ T4215] chnl_net:caif_netlink_parms(): no params data found [ 89.303628][ T3634] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.407924][ T4214] loop3: detected capacity change from 0 to 32768 [ 89.553296][ T3634] usb 3-1: Using ep0 maxpacket: 16 [ 89.575676][ T4214] XFS (loop3): Mounting V5 Filesystem [ 89.660659][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.684061][ T3634] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.703563][ T4215] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.741127][ T3634] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.776877][ T4215] device bridge_slave_0 entered promiscuous mode [ 89.827195][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.834405][ T3634] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 89.867686][ T4215] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.883165][ T3634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.933635][ T4215] device bridge_slave_1 entered promiscuous mode [ 89.952475][ T3634] usb 3-1: config 0 descriptor?? [ 90.029921][ T4214] XFS (loop3): Ending clean mount [ 90.037537][ T3634] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 90.090665][ T4214] XFS (loop3): Quotacheck needed: Please wait. [ 90.150867][ T4215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.180391][ T4214] XFS (loop3): Quotacheck: Done. [ 90.253413][ T3556] Bluetooth: hci5: command tx timeout [ 90.277452][ T4215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.455319][ T4224] loop2: detected capacity change from 0 to 1024 [ 90.485517][ T3554] XFS (loop3): Unmounting Filesystem [ 90.570062][ T4224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.610545][ T4224] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.632062][ T4215] team0: Port device team_slave_0 added [ 90.715509][ T4224] EXT4-fs (loop2): Test dummy encryption mode enabled [ 90.744992][ T4215] team0: Port device team_slave_1 added [ 90.781250][ T4224] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 90.865030][ T4224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.905216][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.912190][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.103859][ T4215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.245864][ T4215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.252844][ T4215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.347643][ T4215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.661877][ T4224] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.776607][ T4215] device hsr_slave_0 entered promiscuous mode [ 91.818739][ T4215] device hsr_slave_1 entered promiscuous mode [ 91.853911][ T4215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.861593][ T4215] Cannot create hsr debugfs directory [ 91.964495][ T4116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.998366][ T3873] usb 3-1: USB disconnect, device number 2 [ 92.078076][ T4116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.172414][ T4116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.243564][ T4116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.335544][ T3556] Bluetooth: hci5: command tx timeout [ 92.505921][ T4268] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 92.512843][ T4268] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 92.598232][ T4268] vhci_hcd vhci_hcd.0: Device attached [ 92.685823][ T4274] vhci_hcd: connection closed [ 92.714206][ T102] vhci_hcd: stop threads [ 92.776185][ T102] vhci_hcd: release socket [ 92.833347][ T102] vhci_hcd: disconnect device [ 93.001853][ T4116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.031918][ T3810] EXT4-fs (loop2): unmounting filesystem. [ 93.110479][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.125010][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.177051][ T4116] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.234735][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.273766][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.325484][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.332603][ T3873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.348952][ T4290] loop0: detected capacity change from 0 to 128 [ 93.434730][ T4076] bio_check_eod: 2964 callbacks suppressed [ 93.434746][ T4076] syz.4.86: attempt to access beyond end of device [ 93.434746][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.456083][ T4076] syz.4.86: attempt to access beyond end of device [ 93.456083][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.472060][ T4076] syz.4.86: attempt to access beyond end of device [ 93.472060][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.486489][ T4076] syz.4.86: attempt to access beyond end of device [ 93.486489][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.502183][ T4076] syz.4.86: attempt to access beyond end of device [ 93.502183][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.516743][ T4076] syz.4.86: attempt to access beyond end of device [ 93.516743][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.532425][ T4076] syz.4.86: attempt to access beyond end of device [ 93.532425][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.547486][ T4076] syz.4.86: attempt to access beyond end of device [ 93.547486][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.564341][ T4076] syz.4.86: attempt to access beyond end of device [ 93.564341][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 93.578838][ T4076] syz.4.86: attempt to access beyond end of device [ 93.578838][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 93.620228][ T4215] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.845287][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.873777][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.922194][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.965857][ T3883] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.973012][ T3883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.071037][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.111691][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.154198][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.202696][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.242513][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.282218][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.376009][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.397412][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.413388][ T3556] Bluetooth: hci5: command tx timeout [ 94.475067][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.503626][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.543969][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.619124][ T4215] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.663763][ T4116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.029426][ T4320] loop0: detected capacity change from 0 to 512 [ 95.074690][ T4320] EXT4-fs: Ignoring removed oldalloc option [ 95.203224][ T3873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.354051][ T4320] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.130: Parent and EA inode have the same ino 15 [ 95.354885][ T4116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.390511][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.399362][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.451773][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.461203][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.476797][ T4320] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.504064][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.513011][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.522415][ T4320] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.130: Parent and EA inode have the same ino 15 [ 95.543114][ T4116] device veth0_vlan entered promiscuous mode [ 95.552013][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.561827][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.572191][ T4320] EXT4-fs (loop0): 1 orphan inode deleted [ 95.585880][ T4116] device veth1_vlan entered promiscuous mode [ 95.592150][ T4320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.616061][ T3873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.640638][ T3873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.688119][ T3873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.722457][ T4116] device veth0_macvtap entered promiscuous mode [ 95.911060][ T3873] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 95.925558][ T4116] device veth1_macvtap entered promiscuous mode [ 95.931950][ T3873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.347800][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.358341][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.887599][ T3556] Bluetooth: hci5: command tx timeout [ 97.013465][ T3873] usb 4-1: config 0 descriptor?? [ 97.018536][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.053630][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.085074][ T4331] loop2: detected capacity change from 0 to 512 [ 97.091457][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.132494][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.152801][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.178725][ T4331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.195476][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.210332][ T4331] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 97.224000][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.283812][ T4331] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.133: corrupted inode contents [ 97.296586][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.316874][ T3673] EXT4-fs (loop0): unmounting filesystem. [ 97.330521][ T4116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.332973][ T4331] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz.2.133: mark_inode_dirty error [ 97.353639][ T4331] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.133: corrupted inode contents [ 97.367175][ T4331] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.133: mark_inode_dirty error [ 97.426730][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.457910][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.475998][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.495471][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.512148][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.546028][ T3873] wacom 0003:056A:00B3.0002: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 97.563134][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.600743][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.613757][ T3873] wacom 0003:056A:00B3.0002: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.3-1/input0 [ 97.633132][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.655736][ T4338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 97.662276][ T4338] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.670701][ T3873] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B3.0002/input/input5 [ 97.690092][ T4116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.701332][ T4338] vhci_hcd vhci_hcd.0: Device attached [ 97.719933][ T4116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.797444][ T3810] EXT4-fs (loop2): unmounting filesystem. [ 97.809472][ T4339] vhci_hcd: connection closed [ 97.811274][ T9] vhci_hcd: stop threads [ 97.821168][ T9] vhci_hcd: release socket [ 97.830971][ T4116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.852294][ T9] vhci_hcd: disconnect device [ 97.894916][ T4116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.918732][ T4116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.929519][ T4116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.948994][ T4116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.115567][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.159393][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.198650][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.212202][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.359478][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.385904][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.395132][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.404039][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.412585][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.439835][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.444066][ T4076] bio_check_eod: 2986 callbacks suppressed [ 98.444078][ T4076] syz.4.86: attempt to access beyond end of device [ 98.444078][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.468116][ T4076] syz.4.86: attempt to access beyond end of device [ 98.468116][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.484095][ T4076] syz.4.86: attempt to access beyond end of device [ 98.484095][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.498575][ T4076] syz.4.86: attempt to access beyond end of device [ 98.498575][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.502266][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.514255][ T4076] syz.4.86: attempt to access beyond end of device [ 98.514255][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.532933][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.534590][ T4076] syz.4.86: attempt to access beyond end of device [ 98.534590][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.558017][ T4076] syz.4.86: attempt to access beyond end of device [ 98.558017][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.561155][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.572445][ T4076] syz.4.86: attempt to access beyond end of device [ 98.572445][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.596174][ T4076] syz.4.86: attempt to access beyond end of device [ 98.596174][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 98.598377][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.610583][ T4076] syz.4.86: attempt to access beyond end of device [ 98.610583][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.627374][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.767926][ T4215] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.839694][ T152] usb 4-1: USB disconnect, device number 5 [ 99.144783][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.717070][ T4215] team0: Port device netdevsim0 removed [ 99.754861][ T4215] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.789841][ T4354] loop0: detected capacity change from 0 to 2048 [ 99.928350][ T34] device hsr_slave_0 left promiscuous mode [ 99.957194][ T4354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.989496][ T34] device hsr_slave_1 left promiscuous mode [ 100.043056][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.101559][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.152788][ T3673] EXT4-fs (loop0): unmounting filesystem. [ 100.162206][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.209273][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.241513][ T34] device bridge_slave_1 left promiscuous mode [ 100.272613][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.314395][ T34] device bridge_slave_0 left promiscuous mode [ 100.343115][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.495684][ T4363] loop0: detected capacity change from 0 to 128 [ 100.521904][ T34] device veth1_macvtap left promiscuous mode [ 100.567429][ T34] device veth0_macvtap left promiscuous mode [ 100.610547][ T34] device veth1_vlan left promiscuous mode [ 100.655148][ T34] device veth0_vlan left promiscuous mode [ 101.059908][ T4348] loop3: detected capacity change from 0 to 32768 [ 101.182966][ T4348] XFS (loop3): Mounting V5 Filesystem [ 101.298882][ T4348] XFS (loop3): Ending clean mount [ 101.369965][ T4348] XFS (loop3): Quotacheck needed: Please wait. [ 101.515055][ T4348] XFS (loop3): Quotacheck: Done. [ 101.851464][ T3554] XFS (loop3): Unmounting Filesystem [ 103.453530][ T4076] bio_check_eod: 2904 callbacks suppressed [ 103.453548][ T4076] syz.4.86: attempt to access beyond end of device [ 103.453548][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.473876][ T4076] syz.4.86: attempt to access beyond end of device [ 103.473876][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 103.490739][ T4076] syz.4.86: attempt to access beyond end of device [ 103.490739][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.505243][ T4076] syz.4.86: attempt to access beyond end of device [ 103.505243][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 103.521200][ T4076] syz.4.86: attempt to access beyond end of device [ 103.521200][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.535702][ T4076] syz.4.86: attempt to access beyond end of device [ 103.535702][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 103.552111][ T4076] syz.4.86: attempt to access beyond end of device [ 103.552111][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.566602][ T4076] syz.4.86: attempt to access beyond end of device [ 103.566602][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 103.582509][ T4076] syz.4.86: attempt to access beyond end of device [ 103.582509][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 103.593472][ T4388] syz.3.145[4388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.596365][ T4388] syz.3.145[4388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.597541][ T4076] syz.4.86: attempt to access beyond end of device [ 103.597541][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 104.358946][ T34] team0 (unregistering): Port device team_slave_1 removed [ 105.359514][ T34] team0 (unregistering): Port device team_slave_0 removed [ 105.796785][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.015817][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.813017][ T34] bond0 (unregistering): Released all slaves [ 107.765861][ T4215] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.829015][ T4215] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.868301][ T4406] loop2: detected capacity change from 0 to 2048 [ 107.906208][ T4215] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.957658][ T4409] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 107.974410][ T4215] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.006901][ T4406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.376281][ T4398] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 108.400831][ T4398] netlink: 17 bytes leftover after parsing attributes in process `syz.2.149'. [ 108.463770][ T4076] bio_check_eod: 3068 callbacks suppressed [ 108.463787][ T4076] syz.4.86: attempt to access beyond end of device [ 108.463787][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.484586][ T4076] syz.4.86: attempt to access beyond end of device [ 108.484586][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.500367][ T4076] syz.4.86: attempt to access beyond end of device [ 108.500367][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.515352][ T4076] syz.4.86: attempt to access beyond end of device [ 108.515352][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.531417][ T4076] syz.4.86: attempt to access beyond end of device [ 108.531417][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.545908][ T4076] syz.4.86: attempt to access beyond end of device [ 108.545908][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.561829][ T4076] syz.4.86: attempt to access beyond end of device [ 108.561829][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.576261][ T4076] syz.4.86: attempt to access beyond end of device [ 108.576261][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.592284][ T4076] syz.4.86: attempt to access beyond end of device [ 108.592284][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 108.606763][ T4076] syz.4.86: attempt to access beyond end of device [ 108.606763][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 108.656449][ T3810] EXT4-fs (loop2): unmounting filesystem. [ 109.894240][ T4426] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 110.369495][ T4215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.508917][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.594032][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.668269][ T4215] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.764453][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.804006][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.016786][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.024142][ T3873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.443467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.453158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 113.473426][ T4076] bio_check_eod: 2556 callbacks suppressed [ 113.473438][ T4076] syz.4.86: attempt to access beyond end of device [ 113.473438][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.493594][ T4076] syz.4.86: attempt to access beyond end of device [ 113.493594][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.508320][ T4076] syz.4.86: attempt to access beyond end of device [ 113.508320][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.518887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.522670][ T4076] syz.4.86: attempt to access beyond end of device [ 113.522670][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.530705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.546492][ T4076] syz.4.86: attempt to access beyond end of device [ 113.546492][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.566393][ T4076] syz.4.86: attempt to access beyond end of device [ 113.566393][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.573097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 113.582024][ T4076] syz.4.86: attempt to access beyond end of device [ 113.582024][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.587901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 113.602500][ T4076] syz.4.86: attempt to access beyond end of device [ 113.602500][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 113.610085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 113.625607][ T4076] syz.4.86: attempt to access beyond end of device [ 113.625607][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 113.631486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 113.645721][ T4076] syz.4.86: attempt to access beyond end of device [ 113.645721][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 114.375321][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.404625][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.437004][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.345301][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.352463][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.361728][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.794699][ T4450] loop1: detected capacity change from 0 to 256 [ 116.922175][ T4450] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 117.208970][ T4450] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 117.327398][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.340724][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.356378][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.368449][ T4442] netlink: 'syz.0.162': attribute type 4 has an invalid length. [ 117.555136][ T4215] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.683119][ T4215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.330923][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.339829][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.348702][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.357692][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.366177][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.488808][ T4076] bio_check_eod: 4046 callbacks suppressed [ 118.488850][ T4076] syz.4.86: attempt to access beyond end of device [ 118.488850][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.511665][ T4076] syz.4.86: attempt to access beyond end of device [ 118.511665][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.536135][ T4076] syz.4.86: attempt to access beyond end of device [ 118.536135][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.553056][ T4076] syz.4.86: attempt to access beyond end of device [ 118.553056][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.574266][ T4076] syz.4.86: attempt to access beyond end of device [ 118.574266][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.591305][ T4076] syz.4.86: attempt to access beyond end of device [ 118.591305][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.641329][ T4076] syz.4.86: attempt to access beyond end of device [ 118.641329][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.656409][ T4076] syz.4.86: attempt to access beyond end of device [ 118.656409][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.672341][ T4076] syz.4.86: attempt to access beyond end of device [ 118.672341][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 118.686780][ T4076] syz.4.86: attempt to access beyond end of device [ 118.686780][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 118.690471][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.811294][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.866534][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.045126][ T4470] dccp_close: ABORT with 190 bytes unread [ 119.603206][ T3958] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.856688][ T3958] usb 3-1: Using ep0 maxpacket: 32 [ 119.983351][ T3958] usb 3-1: config 1 interface 0 altsetting 87 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.024942][ T3958] usb 3-1: config 1 interface 0 altsetting 87 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.071823][ T3958] usb 3-1: config 1 interface 0 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.143173][ T3958] usb 3-1: config 1 interface 0 has no altsetting 0 [ 120.333506][ T3958] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 120.342676][ T3958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.443169][ T3958] usb 3-1: Product: syz [ 120.472630][ T3958] usb 3-1: Manufacturer: syz [ 120.493571][ T3958] usb 3-1: SerialNumber: syz [ 120.767037][ T4494] loop0: detected capacity change from 0 to 16 [ 120.823385][ T3958] usbhid 3-1:1.0: can't add hid device: -22 [ 120.829397][ T3958] usbhid: probe of 3-1:1.0 failed with error -22 [ 120.907129][ T4494] erofs: (device loop0): mounted with root inode @ nid 36. [ 120.974121][ T3958] usb 3-1: USB disconnect, device number 3 [ 121.077161][ T4215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.183917][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.191557][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.337879][ T4501] loop3: detected capacity change from 0 to 8 [ 121.615349][ T4501] SQUASHFS error: Unable to read inode 0x11f [ 122.357048][ T3559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.370058][ T3559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.383465][ T3559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.392269][ T3559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.400292][ T3559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.407592][ T3559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.267283][ T4535] loop0: detected capacity change from 0 to 256 [ 123.356346][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.384221][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.410303][ T4513] chnl_net:caif_netlink_parms(): no params data found [ 123.487513][ T3562] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 123.498970][ T4076] bio_check_eod: 2908 callbacks suppressed [ 123.498987][ T4076] syz.4.86: attempt to access beyond end of device [ 123.498987][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.519319][ T4076] syz.4.86: attempt to access beyond end of device [ 123.519319][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.535333][ T4076] syz.4.86: attempt to access beyond end of device [ 123.535333][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.548979][ T4215] device veth0_vlan entered promiscuous mode [ 123.549716][ T4076] syz.4.86: attempt to access beyond end of device [ 123.549716][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.571144][ T4076] syz.4.86: attempt to access beyond end of device [ 123.571144][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.585600][ T4076] syz.4.86: attempt to access beyond end of device [ 123.585600][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.601533][ T4076] syz.4.86: attempt to access beyond end of device [ 123.601533][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.616047][ T4076] syz.4.86: attempt to access beyond end of device [ 123.616047][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.632188][ T4076] syz.4.86: attempt to access beyond end of device [ 123.632188][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 123.646728][ T4076] syz.4.86: attempt to access beyond end of device [ 123.646728][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 123.660755][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.678326][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.721489][ T4215] device veth1_vlan entered promiscuous mode [ 123.782512][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.798635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.858328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.989135][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.004462][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.037939][ T4541] loop3: detected capacity change from 0 to 2048 [ 124.084083][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.115908][ T4215] device veth0_macvtap entered promiscuous mode [ 124.164059][ T4215] device veth1_macvtap entered promiscuous mode [ 124.191588][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.207461][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.271087][ T4513] device bridge_slave_0 entered promiscuous mode [ 124.345022][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.404828][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.446245][ T4513] device bridge_slave_1 entered promiscuous mode [ 124.481020][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.493487][ T3561] Bluetooth: hci1: command tx timeout [ 124.509646][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.552280][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.588885][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.635198][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.706644][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.740911][ T4552] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.773512][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.847365][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.887816][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.925856][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.958138][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.997949][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.050087][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.156086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.183916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.213425][ T27] audit: type=1804 audit(1721029446.071:3): pid=4537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.190" name="/newroot/52/file0/file2" dev="loop3" ino=16 res=1 errno=0 [ 125.269619][ T4557] loop0: detected capacity change from 0 to 512 [ 125.282622][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.322878][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.339459][ T4557] EXT4-fs: Ignoring removed bh option [ 125.346250][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.356852][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.367009][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.431781][ T4557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.448358][ T4557] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 125.509254][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.564825][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.584438][ T4537] syz.3.190 (4537) used greatest stack depth: 19008 bytes left [ 125.613641][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.635233][ T4215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.669361][ T4215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.740381][ T4215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.878193][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.902122][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.075441][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.092726][ T3673] EXT4-fs (loop0): unmounting filesystem. [ 126.229746][ T4215] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.263220][ T4215] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.303327][ T4215] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.344857][ T4215] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.357218][ T4513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.429298][ T4513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.576872][ T3561] Bluetooth: hci1: command tx timeout [ 126.605018][ T4513] team0: Port device team_slave_0 added [ 126.647099][ T4513] team0: Port device team_slave_1 added [ 126.775972][ T4513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.807159][ T4513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.909269][ T4513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.954105][ T4513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.976164][ T4513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.063214][ T4513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.196309][ T4513] device hsr_slave_0 entered promiscuous mode [ 127.218296][ T4513] device hsr_slave_1 entered promiscuous mode [ 127.247425][ T4513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.271112][ T4513] Cannot create hsr debugfs directory [ 128.052639][ T4597] loop2: detected capacity change from 0 to 512 [ 128.092347][ T4597] EXT4-fs: Ignoring removed bh option [ 128.158587][ T4597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.178886][ T4597] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 128.203259][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.403251][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.473795][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 128.490522][ T3810] EXT4-fs (loop2): unmounting filesystem. [ 128.504816][ T4076] bio_check_eod: 2976 callbacks suppressed [ 128.504832][ T4076] syz.4.86: attempt to access beyond end of device [ 128.504832][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.525251][ T4076] syz.4.86: attempt to access beyond end of device [ 128.525251][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.541059][ T4076] syz.4.86: attempt to access beyond end of device [ 128.541059][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.555604][ T4076] syz.4.86: attempt to access beyond end of device [ 128.555604][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.572116][ T4076] syz.4.86: attempt to access beyond end of device [ 128.572116][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.586587][ T4076] syz.4.86: attempt to access beyond end of device [ 128.586587][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.593327][ T7] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 128.602269][ T4076] syz.4.86: attempt to access beyond end of device [ 128.602269][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.623471][ T4076] syz.4.86: attempt to access beyond end of device [ 128.623471][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.639485][ T4076] syz.4.86: attempt to access beyond end of device [ 128.639485][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.653290][ T3561] Bluetooth: hci1: command tx timeout [ 128.653895][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.659290][ T4076] syz.4.86: attempt to access beyond end of device [ 128.659290][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.741950][ T7] usb 1-1: config 0 descriptor?? [ 129.371394][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.538983][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.645930][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.675594][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.736617][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.749383][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.780414][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.841734][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.733504][ T3559] Bluetooth: hci1: command tx timeout [ 130.803484][ T7] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 130.845556][ T7] asix: probe of 1-1:0.0 failed with error -71 [ 130.920947][ T7] usb 1-1: USB disconnect, device number 3 [ 131.126545][ T4641] Zero length message leads to an empty skb [ 132.703655][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.710074][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.514787][ T4076] bio_check_eod: 2644 callbacks suppressed [ 133.514807][ T4076] syz.4.86: attempt to access beyond end of device [ 133.514807][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.535176][ T4076] syz.4.86: attempt to access beyond end of device [ 133.535176][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.551051][ T4076] syz.4.86: attempt to access beyond end of device [ 133.551051][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.565531][ T4076] syz.4.86: attempt to access beyond end of device [ 133.565531][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.581529][ T4076] syz.4.86: attempt to access beyond end of device [ 133.581529][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.596684][ T4076] syz.4.86: attempt to access beyond end of device [ 133.596684][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.612683][ T4076] syz.4.86: attempt to access beyond end of device [ 133.612683][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.627056][ T4076] syz.4.86: attempt to access beyond end of device [ 133.627056][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.642987][ T4076] syz.4.86: attempt to access beyond end of device [ 133.642987][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.657556][ T4076] syz.4.86: attempt to access beyond end of device [ 133.657556][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 134.259862][ T4692] process 'syz.3.239' launched './file0' with NULL argv: empty string added [ 136.472905][ T4696] loop2: detected capacity change from 0 to 1024 [ 138.328043][ T4696] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 138.523648][ T4076] bio_check_eod: 3838 callbacks suppressed [ 138.523667][ T4076] syz.4.86: attempt to access beyond end of device [ 138.523667][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.544040][ T4076] syz.4.86: attempt to access beyond end of device [ 138.544040][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.560062][ T4076] syz.4.86: attempt to access beyond end of device [ 138.560062][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.575167][ T4076] syz.4.86: attempt to access beyond end of device [ 138.575167][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.591097][ T4076] syz.4.86: attempt to access beyond end of device [ 138.591097][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.605568][ T4076] syz.4.86: attempt to access beyond end of device [ 138.605568][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.622303][ T4076] syz.4.86: attempt to access beyond end of device [ 138.622303][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.636762][ T4076] syz.4.86: attempt to access beyond end of device [ 138.636762][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.652696][ T4076] syz.4.86: attempt to access beyond end of device [ 138.652696][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.667176][ T4076] syz.4.86: attempt to access beyond end of device [ 138.667176][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 139.229638][ T4696] hfsplus: bad catalog entry type [ 139.503347][ T3959] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.590265][ T4513] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.863392][ T3959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.892074][ T3959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.932763][ T3959] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 139.966001][ T3959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.008391][ T3959] usb 5-1: config 0 descriptor?? [ 140.503849][ T3959] hid (null): unknown global tag 0xc [ 140.509349][ T3959] hid (null): unknown global tag 0xe [ 140.577116][ T3959] lg-g15 0003:046D:C222.0003: unknown global tag 0xc [ 140.605555][ T3959] lg-g15 0003:046D:C222.0003: item 0 2 1 12 parsing failed [ 140.632770][ T3959] lg-g15: probe of 0003:046D:C222.0003 failed with error -22 [ 140.818575][ T4742] netlink: 'syz.0.251': attribute type 7 has an invalid length. [ 142.504170][ T4748] loop0: detected capacity change from 0 to 1024 [ 143.334356][ T4513] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.534029][ T4076] bio_check_eod: 2916 callbacks suppressed [ 143.534049][ T4076] syz.4.86: attempt to access beyond end of device [ 143.534049][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.554427][ T4076] syz.4.86: attempt to access beyond end of device [ 143.554427][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.570390][ T4076] syz.4.86: attempt to access beyond end of device [ 143.570390][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.584818][ T4076] syz.4.86: attempt to access beyond end of device [ 143.584818][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.600801][ T4076] syz.4.86: attempt to access beyond end of device [ 143.600801][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.615389][ T4076] syz.4.86: attempt to access beyond end of device [ 143.615389][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.632012][ T4076] syz.4.86: attempt to access beyond end of device [ 143.632012][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.646446][ T4076] syz.4.86: attempt to access beyond end of device [ 143.646446][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.662362][ T4076] syz.4.86: attempt to access beyond end of device [ 143.662362][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.677152][ T4076] syz.4.86: attempt to access beyond end of device [ 143.677152][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 144.336154][ T4513] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.779643][ T4764] capability: warning: `syz.3.258' uses 32-bit capabilities (legacy support in use) [ 145.326871][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'. [ 145.492513][ T4771] netlink: 'syz.3.261': attribute type 7 has an invalid length. [ 146.360110][ T3967] usb 5-1: USB disconnect, device number 3 [ 146.383144][ T4513] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.386038][ T4513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.400846][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.409187][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.421621][ T4513] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.433435][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.442092][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.451354][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.458502][ T3960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.562098][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.578420][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.621756][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.697264][ T3967] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.704465][ T3967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.803485][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.859852][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.960276][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.024989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.090336][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.144435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.181435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.237114][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.398022][ T4822] loop3: detected capacity change from 0 to 1024 [ 148.440755][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.448210][ T3967] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.477429][ T4822] EXT4-fs: Ignoring removed orlov option [ 148.484813][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.526835][ T4822] EXT4-fs (loop3): Test dummy encryption mode enabled [ 148.537781][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.545733][ T4076] bio_check_eod: 3172 callbacks suppressed [ 148.545748][ T4076] syz.4.86: attempt to access beyond end of device [ 148.545748][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.546409][ T4076] syz.4.86: attempt to access beyond end of device [ 148.546409][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.575033][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.581529][ T4076] syz.4.86: attempt to access beyond end of device [ 148.581529][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.600746][ T4076] syz.4.86: attempt to access beyond end of device [ 148.600746][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.616647][ T4076] syz.4.86: attempt to access beyond end of device [ 148.616647][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.631083][ T4076] syz.4.86: attempt to access beyond end of device [ 148.631083][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.647308][ T4076] syz.4.86: attempt to access beyond end of device [ 148.647308][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.662413][ T4076] syz.4.86: attempt to access beyond end of device [ 148.662413][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.674130][ T4822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.678090][ T4076] syz.4.86: attempt to access beyond end of device [ 148.678090][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.699002][ T4076] syz.4.86: attempt to access beyond end of device [ 148.699002][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.856982][ T3967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.898441][ T3967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.960261][ T3967] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 149.042120][ T3967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.128233][ T3967] usb 3-1: config 0 descriptor?? [ 149.465367][ T34] device hsr_slave_0 left promiscuous mode [ 149.507123][ T34] device hsr_slave_1 left promiscuous mode [ 149.589240][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.607266][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.616773][ T3967] hid (null): unknown global tag 0xc [ 149.622341][ T3967] hid (null): unknown global tag 0xe [ 149.642430][ T3554] EXT4-fs (loop3): unmounting filesystem. [ 149.680275][ T3967] lg-g15 0003:046D:C222.0004: unknown global tag 0xc [ 149.723288][ T3967] lg-g15 0003:046D:C222.0004: item 0 2 1 12 parsing failed [ 149.769927][ T3967] lg-g15: probe of 0003:046D:C222.0004 failed with error -22 [ 149.888986][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.923205][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.972477][ T34] device bridge_slave_1 left promiscuous mode [ 150.004750][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.103713][ T34] device bridge_slave_0 left promiscuous mode [ 150.110012][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.413049][ T34] device veth1_macvtap left promiscuous mode [ 150.419888][ T34] device veth0_macvtap left promiscuous mode [ 150.456676][ T34] device veth1_vlan left promiscuous mode [ 150.498040][ T34] device veth0_vlan left promiscuous mode [ 151.116124][ T3561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.125609][ T3556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.135018][ T3561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.143462][ T3556] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.151157][ T3556] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.159358][ T3561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.702490][ T34] team0 (unregistering): Port device team_slave_1 removed [ 151.772815][ T34] team0 (unregistering): Port device team_slave_0 removed [ 151.839589][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.907499][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.567675][ T34] bond0 (unregistering): Released all slaves [ 152.683481][ T4811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 152.760187][ T4846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 152.799740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.810758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.866824][ T4513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.947256][ T3331] usb 3-1: USB disconnect, device number 4 [ 153.010299][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.028482][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.197220][ T4513] device veth0_vlan entered promiscuous mode [ 153.213703][ T3559] Bluetooth: hci4: command tx timeout [ 153.248709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.249478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.252724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.253712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.326859][ T4513] device veth1_vlan entered promiscuous mode [ 153.464114][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.472268][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.535404][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.554276][ T4076] bio_check_eod: 2960 callbacks suppressed [ 153.554291][ T4076] syz.4.86: attempt to access beyond end of device [ 153.554291][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.555144][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.561054][ T4076] syz.4.86: attempt to access beyond end of device [ 153.561054][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.598388][ T4076] syz.4.86: attempt to access beyond end of device [ 153.598388][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.612854][ T4076] syz.4.86: attempt to access beyond end of device [ 153.612854][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.628766][ T4076] syz.4.86: attempt to access beyond end of device [ 153.628766][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.637008][ T4513] device veth0_macvtap entered promiscuous mode [ 153.643183][ T4076] syz.4.86: attempt to access beyond end of device [ 153.643183][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.665021][ T4076] syz.4.86: attempt to access beyond end of device [ 153.665021][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.679439][ T4076] syz.4.86: attempt to access beyond end of device [ 153.679439][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.695184][ T4076] syz.4.86: attempt to access beyond end of device [ 153.695184][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.709574][ T4076] syz.4.86: attempt to access beyond end of device [ 153.709574][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.765138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.784493][ T4513] device veth1_macvtap entered promiscuous mode [ 153.875854][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.938336][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.020969][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.072261][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.106258][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.118725][ T4867] loop0: detected capacity change from 0 to 1024 [ 154.141181][ T4867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.156237][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.191989][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.214459][ T4867] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 154.227833][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.286681][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.319000][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.332387][ T4513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.342152][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 154.351267][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.362968][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.455386][ T3673] EXT4-fs (loop0): unmounting filesystem. [ 154.623310][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.648416][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.673179][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.690797][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.701739][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.721810][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.742083][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.752364][ T4513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.771929][ T4513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.792436][ T4513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.811624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.822929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.840358][ T4847] chnl_net:caif_netlink_parms(): no params data found [ 154.878724][ T4513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.897031][ T4513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.909487][ T4513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.922884][ T4513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.168363][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.190136][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.201953][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.213357][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.240109][ T4847] device bridge_slave_0 entered promiscuous mode [ 155.257546][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.292369][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.300663][ T3556] Bluetooth: hci4: command tx timeout [ 155.318537][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.330451][ T4847] device bridge_slave_1 entered promiscuous mode [ 155.370532][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.432069][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.585243][ T4847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.665200][ T3958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.691981][ T4847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.408689][ T4885] loop2: detected capacity change from 0 to 1024 [ 157.373361][ T3556] Bluetooth: hci4: command tx timeout [ 158.415812][ T4847] team0: Port device team_slave_0 added [ 158.564287][ T4076] bio_check_eod: 4004 callbacks suppressed [ 158.564302][ T4076] syz.4.86: attempt to access beyond end of device [ 158.564302][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.584857][ T4076] syz.4.86: attempt to access beyond end of device [ 158.584857][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.599963][ T4076] syz.4.86: attempt to access beyond end of device [ 158.599963][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.614232][ T4076] syz.4.86: attempt to access beyond end of device [ 158.614232][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.628937][ T4076] syz.4.86: attempt to access beyond end of device [ 158.628937][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.643394][ T4076] syz.4.86: attempt to access beyond end of device [ 158.643394][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.658152][ T4076] syz.4.86: attempt to access beyond end of device [ 158.658152][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.672551][ T4076] syz.4.86: attempt to access beyond end of device [ 158.672551][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.687637][ T4076] syz.4.86: attempt to access beyond end of device [ 158.687637][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.701964][ T4076] syz.4.86: attempt to access beyond end of device [ 158.701964][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 159.326978][ T4847] team0: Port device team_slave_1 added [ 159.453509][ T3556] Bluetooth: hci4: command tx timeout [ 160.356657][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.363705][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.393286][ T4847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.554953][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.624131][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.697808][ T4914] loop2: detected capacity change from 0 to 256 [ 161.760120][ T4847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.862889][ T4914] FAT-fs (loop2): Directory bread(block 64) failed [ 161.908167][ T4914] FAT-fs (loop2): Directory bread(block 65) failed [ 161.940174][ T4914] FAT-fs (loop2): Directory bread(block 66) failed [ 161.979086][ T4914] FAT-fs (loop2): Directory bread(block 67) failed [ 162.016420][ T4914] FAT-fs (loop2): Directory bread(block 68) failed [ 162.053272][ T4914] FAT-fs (loop2): Directory bread(block 69) failed [ 162.103804][ T4914] FAT-fs (loop2): Directory bread(block 70) failed [ 162.141490][ T4914] FAT-fs (loop2): Directory bread(block 71) failed [ 162.189793][ T4914] FAT-fs (loop2): Directory bread(block 72) failed [ 162.240034][ T4914] FAT-fs (loop2): Directory bread(block 73) failed [ 162.344583][ T4919] loop1: detected capacity change from 0 to 1024 [ 162.498588][ T4847] device hsr_slave_0 entered promiscuous mode [ 162.590652][ T4847] device hsr_slave_1 entered promiscuous mode [ 162.628277][ T4847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.724098][ T4847] Cannot create hsr debugfs directory [ 163.573943][ T4076] bio_check_eod: 2992 callbacks suppressed [ 163.573960][ T4076] syz.4.86: attempt to access beyond end of device [ 163.573960][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.594577][ T4076] syz.4.86: attempt to access beyond end of device [ 163.594577][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.610462][ T4076] syz.4.86: attempt to access beyond end of device [ 163.610462][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.624924][ T4076] syz.4.86: attempt to access beyond end of device [ 163.624924][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.641019][ T4076] syz.4.86: attempt to access beyond end of device [ 163.641019][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.655481][ T4076] syz.4.86: attempt to access beyond end of device [ 163.655481][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.671135][ T4076] syz.4.86: attempt to access beyond end of device [ 163.671135][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.673655][ T4847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.685511][ T4076] syz.4.86: attempt to access beyond end of device [ 163.685511][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.711831][ T4076] syz.4.86: attempt to access beyond end of device [ 163.711831][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.726290][ T4076] syz.4.86: attempt to access beyond end of device [ 163.726290][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 165.165775][ T4847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.555390][ T4847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.644220][ T4949] loop1: detected capacity change from 0 to 1024 [ 165.776282][ T4847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.121306][ T4847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.367249][ T4847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.487533][ T4847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.550204][ T4847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.616374][ T4076] bio_check_eod: 2318 callbacks suppressed [ 168.616394][ T4076] syz.4.86: attempt to access beyond end of device [ 168.616394][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.636707][ T4076] syz.4.86: attempt to access beyond end of device [ 168.636707][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.652594][ T4076] syz.4.86: attempt to access beyond end of device [ 168.652594][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.667088][ T4076] syz.4.86: attempt to access beyond end of device [ 168.667088][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.683048][ T4076] syz.4.86: attempt to access beyond end of device [ 168.683048][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.697710][ T4076] syz.4.86: attempt to access beyond end of device [ 168.697710][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.713668][ T4076] syz.4.86: attempt to access beyond end of device [ 168.713668][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.728119][ T4076] syz.4.86: attempt to access beyond end of device [ 168.728119][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.744061][ T4076] syz.4.86: attempt to access beyond end of device [ 168.744061][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.758570][ T4076] syz.4.86: attempt to access beyond end of device [ 168.758570][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 169.322355][ T4983] loop0: detected capacity change from 0 to 1024 [ 169.498535][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.705187][ T4847] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.784585][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.792522][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.867079][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.910316][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.963721][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.970926][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.048252][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.095068][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.144599][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.151762][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.236920][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.319189][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.344458][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.399624][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.448957][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.511753][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.561301][ T3959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.662597][ T4847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.763282][ T4847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.878866][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.891452][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.953941][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.055504][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.096113][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.325254][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.933749][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.956612][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.005070][ T4847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.433726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.442657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.521151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.574065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.624052][ T4076] bio_check_eod: 2930 callbacks suppressed [ 173.624069][ T4076] syz.4.86: attempt to access beyond end of device [ 173.624069][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.630736][ T4847] device veth0_vlan entered promiscuous mode [ 173.644280][ T4076] syz.4.86: attempt to access beyond end of device [ 173.644280][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.665473][ T4076] syz.4.86: attempt to access beyond end of device [ 173.665473][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.679945][ T4076] syz.4.86: attempt to access beyond end of device [ 173.679945][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.696002][ T4076] syz.4.86: attempt to access beyond end of device [ 173.696002][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.710469][ T4076] syz.4.86: attempt to access beyond end of device [ 173.710469][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.726270][ T4076] syz.4.86: attempt to access beyond end of device [ 173.726270][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.740738][ T4076] syz.4.86: attempt to access beyond end of device [ 173.740738][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.743730][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.756409][ T4076] syz.4.86: attempt to access beyond end of device [ 173.756409][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.775756][ T4076] syz.4.86: attempt to access beyond end of device [ 173.775756][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.816572][ T3967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.928894][ T4847] device veth1_vlan entered promiscuous mode [ 174.081758][ T5038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.302935][ T4847] device veth0_macvtap entered promiscuous mode [ 174.389905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.419972][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.520619][ T4847] device veth1_macvtap entered promiscuous mode [ 174.566143][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.588352][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.926095][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.006701][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.066233][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.134539][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.208093][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.274604][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.331832][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.431339][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.500089][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.603605][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.620815][ T3903] tipc: Subscription rejected, illegal request [ 175.666910][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.722929][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.333788][ T3559] Bluetooth: hci0: command 0x0406 tx timeout [ 176.351140][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.633470][ T4076] bio_check_eod: 4194 callbacks suppressed [ 178.633485][ T4076] syz.4.86: attempt to access beyond end of device [ 178.633485][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.653664][ T4076] syz.4.86: attempt to access beyond end of device [ 178.653664][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.668435][ T4076] syz.4.86: attempt to access beyond end of device [ 178.668435][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.682762][ T4076] syz.4.86: attempt to access beyond end of device [ 178.682762][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.697480][ T4076] syz.4.86: attempt to access beyond end of device [ 178.697480][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.711805][ T4076] syz.4.86: attempt to access beyond end of device [ 178.711805][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.726522][ T4076] syz.4.86: attempt to access beyond end of device [ 178.726522][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.740861][ T4076] syz.4.86: attempt to access beyond end of device [ 178.740861][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.755564][ T4076] syz.4.86: attempt to access beyond end of device [ 178.755564][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.769883][ T4076] syz.4.86: attempt to access beyond end of device [ 178.769883][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 179.467736][ T34] device hsr_slave_0 left promiscuous mode [ 179.512469][ T34] device hsr_slave_1 left promiscuous mode [ 180.367439][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.337035][ T5065] syz.0.355 (5065): attempted to duplicate a private mapping with mremap. This is not supported. [ 181.351345][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.402975][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.352846][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.344201][ T3559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.354292][ T3559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.433572][ T3559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.643954][ T4076] bio_check_eod: 5110 callbacks suppressed [ 183.643968][ T4076] syz.4.86: attempt to access beyond end of device [ 183.643968][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.664340][ T4076] syz.4.86: attempt to access beyond end of device [ 183.664340][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.679167][ T4076] syz.4.86: attempt to access beyond end of device [ 183.679167][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.693692][ T4076] syz.4.86: attempt to access beyond end of device [ 183.693692][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.708425][ T4076] syz.4.86: attempt to access beyond end of device [ 183.708425][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.722741][ T4076] syz.4.86: attempt to access beyond end of device [ 183.722741][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.737566][ T4076] syz.4.86: attempt to access beyond end of device [ 183.737566][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.751667][ T4076] syz.4.86: attempt to access beyond end of device [ 183.751667][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.767240][ T4076] syz.4.86: attempt to access beyond end of device [ 183.767240][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.781366][ T4076] syz.4.86: attempt to access beyond end of device [ 183.781366][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 184.344704][ T3555] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.353171][ T3555] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 184.361082][ T3555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.552930][ T5076] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 184.559489][ T5076] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.644409][ T5076] vhci_hcd vhci_hcd.0: Device attached [ 184.933352][ T3331] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 185.343738][ T34] device bridge_slave_1 left promiscuous mode [ 185.358500][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.371352][ T5078] vhci_hcd: connection reset by peer [ 185.377522][ T4439] vhci_hcd: stop threads [ 185.381862][ T4439] vhci_hcd: release socket [ 185.412263][ T4439] vhci_hcd: disconnect device [ 185.452512][ T34] device bridge_slave_0 left promiscuous mode [ 185.482508][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.643682][ T34] device veth1_macvtap left promiscuous mode [ 185.677576][ T34] device veth0_macvtap left promiscuous mode [ 185.714263][ T34] device veth1_vlan left promiscuous mode [ 185.746129][ T34] device veth0_vlan left promiscuous mode [ 185.943363][ T3556] Bluetooth: hci2: command 0x0406 tx timeout [ 186.509249][ T3556] Bluetooth: hci6: command tx timeout [ 186.861150][ T5091] loop1: detected capacity change from 0 to 256 [ 186.965710][ T5091] FAT-fs (loop1): Directory bread(block 64) failed [ 186.972277][ T5091] FAT-fs (loop1): Directory bread(block 65) failed [ 187.026691][ T5091] FAT-fs (loop1): Directory bread(block 66) failed [ 187.053787][ T5091] FAT-fs (loop1): Directory bread(block 67) failed [ 187.091014][ T5091] FAT-fs (loop1): Directory bread(block 68) failed [ 187.107351][ T5091] FAT-fs (loop1): Directory bread(block 69) failed [ 187.139951][ T5091] FAT-fs (loop1): Directory bread(block 70) failed [ 187.168066][ T5091] FAT-fs (loop1): Directory bread(block 71) failed [ 187.212140][ T5091] FAT-fs (loop1): Directory bread(block 72) failed [ 187.242360][ T5091] FAT-fs (loop1): Directory bread(block 73) failed [ 188.573439][ T3556] Bluetooth: hci6: command tx timeout [ 188.589025][ T34] team0 (unregistering): Port device team_slave_1 removed [ 188.654813][ T4076] bio_check_eod: 3184 callbacks suppressed [ 188.654834][ T4076] syz.4.86: attempt to access beyond end of device [ 188.654834][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.675129][ T4076] syz.4.86: attempt to access beyond end of device [ 188.675129][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.691448][ T4076] syz.4.86: attempt to access beyond end of device [ 188.691448][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.705919][ T4076] syz.4.86: attempt to access beyond end of device [ 188.705919][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.722036][ T4076] syz.4.86: attempt to access beyond end of device [ 188.722036][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.736519][ T4076] syz.4.86: attempt to access beyond end of device [ 188.736519][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.736590][ T34] team0 (unregistering): Port device team_slave_0 removed [ 188.752213][ T4076] syz.4.86: attempt to access beyond end of device [ 188.752213][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.771916][ T4076] syz.4.86: attempt to access beyond end of device [ 188.771916][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.788147][ T4076] syz.4.86: attempt to access beyond end of device [ 188.788147][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.802620][ T4076] syz.4.86: attempt to access beyond end of device [ 188.802620][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.919444][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.056340][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.132907][ T3331] vhci_hcd: vhci_device speed not set [ 190.179512][ T34] bond0 (unregistering): Released all slaves [ 190.285492][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.302533][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.314079][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.334297][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.346867][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.357375][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.367310][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.429157][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.442231][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.459740][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.472973][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.500933][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.525261][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.653546][ T3561] Bluetooth: hci6: command tx timeout [ 191.053190][ T3561] Bluetooth: hci3: command 0x0406 tx timeout [ 191.326618][ T5081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.360'. [ 191.336194][ T5081] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 191.373825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.382575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.476539][ T4847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.524213][ T4847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.533034][ T4847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.599770][ T4847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.249831][ T4831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.297676][ T4831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.327419][ T5112] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 192.360141][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.733444][ T3561] Bluetooth: hci6: command tx timeout [ 193.348017][ T5124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.370'. [ 193.368419][ T5118] loop1: detected capacity change from 0 to 32768 [ 193.392253][ T5124] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 193.561882][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.622745][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.665537][ T4076] bio_check_eod: 3150 callbacks suppressed [ 193.665555][ T4076] syz.4.86: attempt to access beyond end of device [ 193.665555][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.685799][ T4076] syz.4.86: attempt to access beyond end of device [ 193.685799][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.701672][ T4076] syz.4.86: attempt to access beyond end of device [ 193.701672][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.716105][ T4076] syz.4.86: attempt to access beyond end of device [ 193.716105][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.732053][ T4076] syz.4.86: attempt to access beyond end of device [ 193.732053][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.746503][ T4076] syz.4.86: attempt to access beyond end of device [ 193.746503][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.762411][ T4076] syz.4.86: attempt to access beyond end of device [ 193.762411][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.770564][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.776875][ T4076] syz.4.86: attempt to access beyond end of device [ 193.776875][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.799332][ T4076] syz.4.86: attempt to access beyond end of device [ 193.799332][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.813853][ T4076] syz.4.86: attempt to access beyond end of device [ 193.813853][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.873829][ T5118] XFS (loop1): Mounting V5 Filesystem [ 194.105125][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.111468][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.130319][ T5118] XFS (loop1): Ending clean mount [ 194.229022][ T5118] XFS (loop1): Quotacheck needed: Please wait. [ 194.236482][ T5141] xt_NFQUEUE: number of total queues is 0 [ 194.278062][ T5071] chnl_net:caif_netlink_parms(): no params data found [ 194.307407][ T5118] XFS (loop1): Quotacheck: Done. [ 194.843584][ T5149] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 195.983370][ T4513] XFS (loop1): Unmounting Filesystem [ 196.431204][ T5160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.379'. [ 196.455765][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.493273][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.535439][ T5071] device bridge_slave_0 entered promiscuous mode [ 196.585092][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.625297][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.672196][ T5071] device bridge_slave_1 entered promiscuous mode [ 196.824901][ T5071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.894393][ T5071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.091149][ T5071] team0: Port device team_slave_0 added [ 197.145742][ T5071] team0: Port device team_slave_1 added [ 197.284981][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.291951][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.662781][ T5071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.978045][ T5156] loop3: detected capacity change from 0 to 32768 [ 198.158218][ T5156] XFS (loop3): Mounting V5 Filesystem [ 198.279447][ T5156] XFS (loop3): Ending clean mount [ 198.364865][ T5156] XFS (loop3): Quotacheck needed: Please wait. [ 198.673810][ T4076] bio_check_eod: 2722 callbacks suppressed [ 198.673825][ T4076] syz.4.86: attempt to access beyond end of device [ 198.673825][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.693981][ T4076] syz.4.86: attempt to access beyond end of device [ 198.693981][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.708682][ T4076] syz.4.86: attempt to access beyond end of device [ 198.708682][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.722934][ T4076] syz.4.86: attempt to access beyond end of device [ 198.722934][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.737694][ T4076] syz.4.86: attempt to access beyond end of device [ 198.737694][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.752010][ T4076] syz.4.86: attempt to access beyond end of device [ 198.752010][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.766697][ T4076] syz.4.86: attempt to access beyond end of device [ 198.766697][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.781005][ T4076] syz.4.86: attempt to access beyond end of device [ 198.781005][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.795700][ T4076] syz.4.86: attempt to access beyond end of device [ 198.795700][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.809999][ T4076] syz.4.86: attempt to access beyond end of device [ 198.809999][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.366628][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.431401][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.430111][ T5156] XFS (loop3): Quotacheck: Done. [ 203.383173][ T5071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.683412][ T4076] bio_check_eod: 5153 callbacks suppressed [ 203.683434][ T4076] syz.4.86: attempt to access beyond end of device [ 203.683434][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.704260][ T4076] syz.4.86: attempt to access beyond end of device [ 203.704260][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.718387][ T4076] syz.4.86: attempt to access beyond end of device [ 203.718387][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.734089][ T4076] syz.4.86: attempt to access beyond end of device [ 203.734089][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.748221][ T4076] syz.4.86: attempt to access beyond end of device [ 203.748221][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.763279][ T4076] syz.4.86: attempt to access beyond end of device [ 203.763279][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.777395][ T4076] syz.4.86: attempt to access beyond end of device [ 203.777395][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.792293][ T4076] syz.4.86: attempt to access beyond end of device [ 203.792293][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.806452][ T4076] syz.4.86: attempt to access beyond end of device [ 203.806452][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.821345][ T4076] syz.4.86: attempt to access beyond end of device [ 203.821345][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.081787][ T3561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.095051][ T3555] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.104720][ T3561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.112663][ T3561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.125048][ T3555] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.132391][ T3555] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.326829][ T4847] XFS (loop3): Unmounting Filesystem [ 205.469649][ T5071] device hsr_slave_0 entered promiscuous mode [ 205.654063][ T5071] device hsr_slave_1 entered promiscuous mode [ 205.705782][ T5188] loop1: detected capacity change from 0 to 64 [ 205.758127][ T5071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.773820][ T5071] Cannot create hsr debugfs directory [ 206.113261][ T154] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 206.350972][ T5193] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 206.357531][ T5193] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.373285][ T154] usb 5-1: Using ep0 maxpacket: 16 [ 206.489522][ T5193] vhci_hcd vhci_hcd.0: Device attached [ 206.663357][ T154] usb 5-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 206.723356][ T154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.792504][ T154] usb 5-1: Product: syz [ 206.803254][ T3595] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 206.822881][ T154] usb 5-1: Manufacturer: syz [ 206.863217][ T154] usb 5-1: SerialNumber: syz [ 206.903856][ T154] usb 5-1: config 0 descriptor?? [ 206.984025][ T5185] chnl_net:caif_netlink_parms(): no params data found [ 207.213264][ T3561] Bluetooth: hci3: command tx timeout [ 207.333387][ T154] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 208.483172][ T5194] vhci_hcd: connection reset by peer [ 208.513581][ T102] vhci_hcd: stop threads [ 208.517928][ T102] vhci_hcd: release socket [ 208.536452][ T5071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.561062][ T102] vhci_hcd: disconnect device [ 208.688693][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.694231][ T4076] bio_check_eod: 2879 callbacks suppressed [ 208.694244][ T4076] syz.4.86: attempt to access beyond end of device [ 208.694244][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.709105][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.715956][ T4076] syz.4.86: attempt to access beyond end of device [ 208.715956][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.738332][ T4076] syz.4.86: attempt to access beyond end of device [ 208.738332][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.753754][ T4076] syz.4.86: attempt to access beyond end of device [ 208.753754][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.769703][ T4076] syz.4.86: attempt to access beyond end of device [ 208.769703][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.784198][ T4076] syz.4.86: attempt to access beyond end of device [ 208.784198][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.800141][ T4076] syz.4.86: attempt to access beyond end of device [ 208.800141][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.816615][ T4076] syz.4.86: attempt to access beyond end of device [ 208.816615][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.829622][ T5185] device bridge_slave_0 entered promiscuous mode [ 208.832302][ T4076] syz.4.86: attempt to access beyond end of device [ 208.832302][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.850757][ T4076] syz.4.86: attempt to access beyond end of device [ 208.850757][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.993900][ T5071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.074267][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.081382][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.131440][ T5185] device bridge_slave_1 entered promiscuous mode [ 209.343283][ T3561] Bluetooth: hci3: command tx timeout [ 209.372099][ T5071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.548657][ T5185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.616833][ T5185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.786671][ T5218] loop3: detected capacity change from 0 to 512 [ 209.815867][ T5185] team0: Port device team_slave_0 added [ 209.875423][ T5185] team0: Port device team_slave_1 added [ 209.973480][ T5218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 210.076953][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.188168][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.263011][ T4847] EXT4-fs (loop3): unmounting filesystem. [ 210.347456][ T154] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 210.351294][ T5185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.355953][ T154] dib0700: firmware download failed at 7 with -22 [ 211.346101][ T154] usb 5-1: USB disconnect, device number 4 [ 211.373305][ T3556] Bluetooth: hci3: command tx timeout [ 211.613252][ T3561] Bluetooth: hci5: command 0x0406 tx timeout [ 213.324316][ T3595] vhci_hcd: vhci_device speed not set [ 213.453186][ T3561] Bluetooth: hci3: command tx timeout [ 213.703877][ T4076] bio_check_eod: 4368 callbacks suppressed [ 213.703891][ T4076] syz.4.86: attempt to access beyond end of device [ 213.703891][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.724038][ T4076] syz.4.86: attempt to access beyond end of device [ 213.724038][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.738727][ T4076] syz.4.86: attempt to access beyond end of device [ 213.738727][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.753130][ T4076] syz.4.86: attempt to access beyond end of device [ 213.753130][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.767825][ T4076] syz.4.86: attempt to access beyond end of device [ 213.767825][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.782610][ T4076] syz.4.86: attempt to access beyond end of device [ 213.782610][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.797477][ T4076] syz.4.86: attempt to access beyond end of device [ 213.797477][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.811664][ T4076] syz.4.86: attempt to access beyond end of device [ 213.811664][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.826609][ T4076] syz.4.86: attempt to access beyond end of device [ 213.826609][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.840720][ T4076] syz.4.86: attempt to access beyond end of device [ 213.840720][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.334243][ T5071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.349085][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.383239][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.583822][ T5185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.644151][ T5236] loop3: detected capacity change from 0 to 256 [ 218.713788][ T4076] bio_check_eod: 5102 callbacks suppressed [ 218.713806][ T4076] syz.4.86: attempt to access beyond end of device [ 218.713806][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.734160][ T4076] syz.4.86: attempt to access beyond end of device [ 218.734160][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.750171][ T4076] syz.4.86: attempt to access beyond end of device [ 218.750171][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.764648][ T4076] syz.4.86: attempt to access beyond end of device [ 218.764648][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.780699][ T4076] syz.4.86: attempt to access beyond end of device [ 218.780699][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.795901][ T4076] syz.4.86: attempt to access beyond end of device [ 218.795901][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.811682][ T4076] syz.4.86: attempt to access beyond end of device [ 218.811682][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.826195][ T4076] syz.4.86: attempt to access beyond end of device [ 218.826195][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.842218][ T4076] syz.4.86: attempt to access beyond end of device [ 218.842218][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.856704][ T4076] syz.4.86: attempt to access beyond end of device [ 218.856704][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.908623][ T5236] FAT-fs (loop3): Directory bread(block 64) failed [ 218.947950][ T5236] FAT-fs (loop3): Directory bread(block 65) failed [ 218.982147][ T5185] device hsr_slave_0 entered promiscuous mode [ 219.004003][ T5236] FAT-fs (loop3): Directory bread(block 66) failed [ 219.079508][ T5236] FAT-fs (loop3): Directory bread(block 67) failed [ 219.115062][ T5185] device hsr_slave_1 entered promiscuous mode [ 219.141969][ T5185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.151458][ T5236] FAT-fs (loop3): Directory bread(block 68) failed [ 219.183168][ T5236] FAT-fs (loop3): Directory bread(block 69) failed [ 219.193640][ T5185] Cannot create hsr debugfs directory [ 219.234755][ T5236] FAT-fs (loop3): Directory bread(block 70) failed [ 219.290349][ T5236] FAT-fs (loop3): Directory bread(block 71) failed [ 219.341300][ T5236] FAT-fs (loop3): Directory bread(block 72) failed [ 219.348146][ T5236] FAT-fs (loop3): Directory bread(block 73) failed [ 219.896168][ T5071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.970726][ T5071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.018816][ T5071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.107898][ T5071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.533299][ T3591] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 220.574314][ T5185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.710378][ T5071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.790618][ T5185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.805137][ T3591] usb 4-1: Using ep0 maxpacket: 16 [ 220.913691][ T5071] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.941221][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.949155][ T3591] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.961974][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.973846][ T3591] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.005419][ T3591] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 221.097183][ T5185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.194563][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.203854][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.213541][ T3591] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.232786][ T3591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.252977][ T3883] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.260113][ T3883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.279443][ T3591] usb 4-1: Product: syz [ 221.289523][ T3591] usb 4-1: Manufacturer: syz [ 221.306729][ T3591] usb 4-1: SerialNumber: syz [ 221.324353][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.363817][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.372372][ T3883] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.379539][ T3883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.388533][ T3883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.461342][ T5185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.525144][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.534028][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.564083][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.597243][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.662431][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.691991][ T3873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.748162][ T5252] binder: 5249:5252 ioctl c0306201 20000580 returned -14 [ 221.860071][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.875388][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.904774][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.941166][ T5071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.015944][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.048752][ T3591] usb 4-1: 0:2 : does not exist [ 222.054377][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.069986][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.177510][ T3591] usb 4-1: USB disconnect, device number 6 [ 222.984723][ T5273] loop1: detected capacity change from 0 to 64 [ 223.723219][ T4076] bio_check_eod: 3304 callbacks suppressed [ 223.723233][ T4076] syz.4.86: attempt to access beyond end of device [ 223.723233][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.743437][ T4076] syz.4.86: attempt to access beyond end of device [ 223.743437][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.758232][ T4076] syz.4.86: attempt to access beyond end of device [ 223.758232][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.772620][ T4076] syz.4.86: attempt to access beyond end of device [ 223.772620][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.787388][ T4076] syz.4.86: attempt to access beyond end of device [ 223.787388][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.801642][ T4076] syz.4.86: attempt to access beyond end of device [ 223.801642][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.816820][ T4076] syz.4.86: attempt to access beyond end of device [ 223.816820][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.831187][ T4076] syz.4.86: attempt to access beyond end of device [ 223.831187][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.845915][ T4076] syz.4.86: attempt to access beyond end of device [ 223.845915][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.860271][ T4076] syz.4.86: attempt to access beyond end of device [ 223.860271][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.359769][ T34] device hsr_slave_0 left promiscuous mode [ 227.375636][ T34] device hsr_slave_1 left promiscuous mode [ 228.350456][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.733411][ T4076] bio_check_eod: 5257 callbacks suppressed [ 228.733425][ T4076] syz.4.86: attempt to access beyond end of device [ 228.733425][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.754310][ T4076] syz.4.86: attempt to access beyond end of device [ 228.754310][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.768416][ T4076] syz.4.86: attempt to access beyond end of device [ 228.768416][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.783428][ T4076] syz.4.86: attempt to access beyond end of device [ 228.783428][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.797524][ T4076] syz.4.86: attempt to access beyond end of device [ 228.797524][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.812429][ T4076] syz.4.86: attempt to access beyond end of device [ 228.812429][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.826616][ T4076] syz.4.86: attempt to access beyond end of device [ 228.826616][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.841502][ T4076] syz.4.86: attempt to access beyond end of device [ 228.841502][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.855603][ T4076] syz.4.86: attempt to access beyond end of device [ 228.855603][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.870519][ T4076] syz.4.86: attempt to access beyond end of device [ 228.870519][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.344054][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.358516][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.342184][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.335848][ T34] device bridge_slave_1 left promiscuous mode [ 233.342018][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.351185][ T34] device bridge_slave_0 left promiscuous mode [ 233.357916][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.743935][ T4076] bio_check_eod: 5311 callbacks suppressed [ 233.743949][ T4076] syz.4.86: attempt to access beyond end of device [ 233.743949][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.764063][ T4076] syz.4.86: attempt to access beyond end of device [ 233.764063][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.778933][ T4076] syz.4.86: attempt to access beyond end of device [ 233.778933][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.793365][ T28] INFO: task syz.4.86:4117 blocked for more than 144 seconds. [ 233.793365][ T4076] syz.4.86: attempt to access beyond end of device [ 233.793365][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.795691][ T4076] syz.4.86: attempt to access beyond end of device [ 233.795691][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.800824][ T28] Not tainted 6.1.98-syzkaller #0 [ 233.814840][ T4076] syz.4.86: attempt to access beyond end of device SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 233.814840][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.850319][ T4076] syz.4.86: attempt to access beyond end of device [ 233.850319][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.864855][ T4076] syz.4.86: attempt to access beyond end of device [ 233.864855][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.880136][ T4076] syz.4.86: attempt to access beyond end of device [ 233.880136][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.894455][ T4076] syz.4.86: attempt to access beyond end of device [ 233.894455][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.334480][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.343259][ T28] task:syz.4.86 state:D stack:25856 pid:4117 ppid:3544 flags:0x00004004 [ 237.355566][ T28] Call Trace: [ 237.360236][ T28] [ 237.367185][ T28] __schedule+0x142d/0x4550 [ 238.329428][ T28] ? __sched_text_start+0x8/0x8 [ 238.334496][ T28] ? print_irqtrace_events+0x210/0x210 [ 238.340216][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 238.346602][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 238.353119][ T28] schedule+0xbf/0x180 [ 238.359935][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 238.753165][ T4076] bio_check_eod: 5264 callbacks suppressed [ 238.753179][ T4076] syz.4.86: attempt to access beyond end of device [ 238.753179][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.773779][ T4076] syz.4.86: attempt to access beyond end of device [ 238.773779][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.788476][ T4076] syz.4.86: attempt to access beyond end of device [ 238.788476][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.802630][ T4076] syz.4.86: attempt to access beyond end of device [ 238.802630][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.817392][ T4076] syz.4.86: attempt to access beyond end of device [ 238.817392][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.831532][ T4076] syz.4.86: attempt to access beyond end of device [ 238.831532][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.846434][ T4076] syz.4.86: attempt to access beyond end of device [ 238.846434][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.861424][ T4076] syz.4.86: attempt to access beyond end of device [ 238.861424][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.876159][ T4076] syz.4.86: attempt to access beyond end of device [ 238.876159][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.890248][ T4076] syz.4.86: attempt to access beyond end of device [ 238.890248][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.341997][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 239.365905][ T28] ? down_write_killable_nested+0x90/0x90 [ 240.354021][ T28] ? read_lock_is_recursive+0x10/0x10 [ 241.343199][ T28] ? ima_lsm_policy_change+0x620/0x620 [ 241.348814][ T28] ? rwsem_write_trylock+0x166/0x210 [ 242.339932][ T28] ? clear_nonspinnable+0x60/0x60 [ 242.345179][ T28] process_measurement+0x446/0x21b0 [ 242.354305][ T28] ? mark_lock+0x9a/0x340 [ 242.363145][ T28] ? ima_file_mmap+0x1c0/0x1c0 [ 243.327553][ T28] ? dquot_initialize+0x20/0x20 [ 243.343186][ T28] ? aa_get_current_label+0x111/0x1d0 [ 243.348609][ T28] ? apparmor_current_getsecid_subj+0xac/0x110 [ 243.358996][ T28] ima_file_check+0xed/0x170 [ 243.764354][ T4076] bio_check_eod: 5324 callbacks suppressed [ 243.764375][ T4076] syz.4.86: attempt to access beyond end of device [ 243.764375][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.785361][ T4076] syz.4.86: attempt to access beyond end of device [ 243.785361][ T4076] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.800104][ T4076] syz.4.86: attempt to access beyond end of device [ 243.800104][ T4076] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427