last executing test programs: 17.862315805s ago: executing program 4 (id=484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) socket$unix(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}]}, 0x2c}}, 0x0) 14.020156058s ago: executing program 4 (id=491): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000500)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6}, @noop, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x7ffc0000}]}) sigaltstack(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x22, 0x2, 0x4) getpeername$inet(r5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x25, 0x0, "67d401136a26f0e201537ab118c4aab19a0ea93185087ed1128770039bdeda45de723fb17a76a2b9e404fff84d36c7e40044956b12258f3c61799f79b1c06b4a0433dae1ad3b8ea0d9fc8cd629ba56e3"}, 0xd8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12017002000000202312073f4000010203f6ac541376abd188c0200904000601030105068921018081012224060905810340008306070905020310007f00f3"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 13.760393289s ago: executing program 2 (id=494): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_MTU={0x8, 0x4, 0x29000000}]}, 0x44}}, 0x0) 13.211802104s ago: executing program 2 (id=496): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, &(0x7f0000000080)) 12.550831608s ago: executing program 1 (id=497): ioprio_set$uid(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000005fc0), 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x22, 0x2, 0x4) recvmmsg(r3, &(0x7f0000005dc0)=[{{&(0x7f00000007c0)=@alg, 0x80, &(0x7f0000000a40)}, 0x101}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d80)=""/17, 0x11}}], 0x3, 0x0, 0x0) 10.588732158s ago: executing program 4 (id=500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fanotify_init(0x8, 0x0) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x641, 0x4000001b, r6, 0x0) fanotify_mark(r5, 0x80, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000280), 0x24) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x7}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0x9, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.031365374s ago: executing program 4 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) socket$unix(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}]}, 0x2c}}, 0x0) 8.145113977s ago: executing program 0 (id=505): r0 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r0, &(0x7f0000003480)=[{&(0x7f0000001480)="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", 0xe00}, {&(0x7f0000001380)="dd", 0x1}], 0x2) 7.918874745s ago: executing program 0 (id=506): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'vlan1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f50e"], 0x72) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x761, 0x103382) r4 = memfd_create(&(0x7f00000012c0)='C\x13\xfe2\x95WD\xaa\xba^\x90\xff\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Em\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x04\x00\x93i|\xc0\x00\x04\x00\x00\x00 \x00\x00v\x0f\xef+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_MTU={0x8, 0x4, 0x29000000}]}, 0x44}}, 0x0) 6.543784117s ago: executing program 1 (id=508): timer_create(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x1060, &(0x7f00000001c0)={@flat=@weak_handle, @flat=@weak_binder, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x84}}, 0x1000}], 0x0, 0x0, 0x0}) 6.466950723s ago: executing program 2 (id=509): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 6.355048363s ago: executing program 4 (id=510): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000500)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6}, @noop, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000030a09080000000000000000010000000900030073797a32000000002c0004800800024017bef2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c00028008000240000000030800034000000001080001400000000f08000240000000030800014000000009000000400000000f080001400000000214000000110001"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6}]}) sigaltstack(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x22, 0x2, 0x4) getpeername$inet(r5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x25, 0x0, "67d401136a26f0e201537ab118c4aab19a0ea93185087ed1128770039bdeda45de723fb17a76a2b9e404fff84d36c7e40044956b12258f3c61799f79b1c06b4a0433dae1ad3b8ea0d9fc8cd629ba56e3"}, 0xd8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12017002000000202312073f4000010203f6ac541376abd188c0200904000601030105068921018081012224060905810340008306070905020310007f00f3"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.957952205s ago: executing program 0 (id=511): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="d9f6fe264fd1cce8342293f12686cbea1c5f06a141b7cea596d26ad2c5fcb745cd01759825dcb4818cb09b0a4e669e519afd943ed0cd57f045c581f098c77cc071046a7b0befdb276ae5899e02164663050ec7c23f9f9d3e46b5c97b870dcaf7d821a6f52b5083cb134e700e488b2f2346ebb37918fd7ae07d9d994971bd66aed3db23bf51c197c1806300524d9b0447746ca3d1e6d6b52a626ffe76c2d187", 0x9f}], 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x125f, 0x0) 5.721383174s ago: executing program 0 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x205}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.28792224s ago: executing program 1 (id=513): r0 = socket(0x10, 0x803, 0x0) mknod$loop(0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090000000000000000000a00000008000300", @ANYRES32=r6, @ANYBLOB="14005080050009000200000005000200002000000a0006"], 0x3c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) 5.28755873s ago: executing program 2 (id=514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fanotify_init(0x8, 0x0) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x641, 0x4000001b, r6, 0x0) fanotify_mark(r5, 0x80, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000280), 0x24) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x7}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0x9, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.1602848s ago: executing program 0 (id=516): r0 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r0, &(0x7f0000003480)=[{&(0x7f0000001480)="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", 0xf00}, {&(0x7f0000001380)="dd", 0x1}], 0x2) 4.819570268s ago: executing program 3 (id=517): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, &(0x7f0000000080)) 4.646303362s ago: executing program 0 (id=518): ioprio_set$uid(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000005fc0), 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x22, 0x2, 0x4) recvmmsg(r3, &(0x7f0000005dc0)=[{{&(0x7f00000007c0)=@alg, 0x80, &(0x7f0000000a40)}, 0x101}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d80)=""/17, 0x11}}], 0x3, 0x0, 0x0) 3.225800688s ago: executing program 3 (id=519): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_MTU={0x8, 0x4, 0x29000000}]}, 0x44}}, 0x0) 3.030206854s ago: executing program 2 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) socket$unix(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x2, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}]}, 0x2c}}, 0x0) 2.290881204s ago: executing program 3 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket(0x2b, 0x80801, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x7, &(0x7f0000000340)=0x2, 0x4) 1.733937199s ago: executing program 3 (id=522): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'vlan1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f50e"], 0x72) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x761, 0x103382) r4 = memfd_create(&(0x7f00000012c0)='C\x13\xfe2\x95WD\xaa\xba^\x90\xff\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Em\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x04\x00\x93i|\xc0\x00\x04\x00\x00\x00 \x00\x00v\x0f\xef+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x04\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x1060, &(0x7f00000001c0)={@flat=@weak_handle, @flat=@weak_binder, @flat=@weak_handle}, &(0x7f0000000240)={0x0, 0x18, 0x84}}, 0x1000}], 0x0, 0x0, 0x0}) 540.911366ms ago: executing program 1 (id=525): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 420.074726ms ago: executing program 4 (id=526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x205}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 281.864338ms ago: executing program 3 (id=527): r0 = socket$igmp(0x2, 0x3, 0x2) timerfd_create(0x8, 0x0) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=528): r0 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r0, &(0x7f0000003480)=[{&(0x7f0000001480)="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", 0xf00}, {&(0x7f0000001380)="dd", 0x1}], 0x2) kernel console output (not intermixed with test programs): =2, SerialNumber=3 [ 89.536004][ T935] usb 1-1: Product: syz [ 89.544632][ T935] usb 1-1: Manufacturer: syz [ 89.553108][ T935] usb 1-1: SerialNumber: syz [ 89.569087][ T27] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 89.872165][ T7] usb 4-1: USB disconnect, device number 4 [ 89.877033][ T935] usb-storage 1-1:64.188: USB Mass Storage device detected [ 89.936932][ T935] usb-storage 1-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 90.015988][ T935] usb 1-1: USB disconnect, device number 3 [ 90.221994][ T3968] loop2: detected capacity change from 0 to 32768 [ 90.306217][ T3968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.112 (3968) [ 90.420017][ T3968] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.457354][ T3970] loop1: detected capacity change from 0 to 32768 [ 90.573357][ T3968] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 90.629525][ T3976] device batadv0 entered promiscuous mode [ 90.700254][ T3970] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 90.859099][ T3968] BTRFS info (device loop2): disabling free space tree [ 90.884718][ T3970] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 91.025737][ T3968] BTRFS info (device loop2): setting nodatacow, compression disabled [ 91.206410][ T3968] BTRFS info (device loop2): enabling disk space caching [ 91.213516][ T3968] BTRFS info (device loop2): use no compression [ 91.231890][ T3968] BTRFS info (device loop2): disabling disk space caching [ 91.244740][ T3968] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 91.285266][ T3968] BTRFS info (device loop2): trying to use backup root at mount time [ 91.331299][ T3968] BTRFS error (device loop2): cannot disable free space tree [ 91.349830][ T3968] BTRFS error (device loop2): open_ctree failed [ 91.381705][ T3970] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 91.426884][ T3629] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 91.502407][ T3629] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 91.777155][ T3629] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 274ms [ 91.804729][ T3629] gfs2: fsid=syz:syz.0: jid=0: Done [ 91.822851][ T3970] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 93.186132][ T152] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.462267][ T152] usb 5-1: Using ep0 maxpacket: 32 [ 93.481113][ T27] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 93.596291][ T152] usb 5-1: config 1 interface 0 has no altsetting 0 [ 93.768963][ T152] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 93.808896][ T152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.849387][ T152] usb 5-1: Product: 믃謂é‚བྷ砲㨹鄚螹ã¿ëº»ï“³äŒŽ [ 93.867386][ T152] usb 5-1: Manufacturer: ã°Š [ 93.872134][ T152] usb 5-1: SerialNumber: й [ 93.886263][ T27] usb 1-1: config 64 has an invalid interface number: 188 but max is 0 [ 93.894675][ T27] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 93.927721][ T27] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 93.955946][ T27] usb 1-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 93.982656][ T27] usb 1-1: config 64 has no interface number 0 [ 94.235328][ T152] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 94.306311][ T2987] bcm5974 5-1:1.0: could not read from device [ 94.346067][ T2987] bcm5974 5-1:1.0: could not read from device [ 94.371717][ T152] usb 5-1: USB disconnect, device number 3 [ 94.419707][ T2987] bcm5974 5-1:1.0: could not read from device [ 94.680663][ T27] usb 1-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 94.689881][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.698272][ T27] usb 1-1: Product: syz [ 94.702838][ T27] usb 1-1: Manufacturer: syz [ 94.707557][ T27] usb 1-1: SerialNumber: syz [ 95.067670][ T27] usb-storage 1-1:64.188: USB Mass Storage device detected [ 95.336334][ T152] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.506932][ T4032] loop3: detected capacity change from 0 to 32768 [ 95.659114][ T152] usb 5-1: Using ep0 maxpacket: 8 [ 95.731451][ T4032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.134 (4032) [ 95.796346][ T152] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 95.825778][ T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.846761][ T27] usb-storage 1-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 95.907556][ T27] usb 1-1: USB disconnect, device number 4 [ 95.948367][ T152] usb 5-1: config 0 descriptor?? [ 95.956810][ T4032] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.008786][ T152] hso 5-1:0.0: Can't find BULK IN endpoint [ 96.013069][ T4032] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 96.085986][ T4032] BTRFS info (device loop3): disabling free space tree [ 96.133548][ T4032] BTRFS info (device loop3): setting nodatacow, compression disabled [ 96.208007][ T4032] BTRFS info (device loop3): enabling disk space caching [ 96.215845][ T4032] BTRFS info (device loop3): use no compression [ 96.219000][ T3592] usb 5-1: USB disconnect, device number 4 [ 96.226188][ T4032] BTRFS info (device loop3): disabling disk space caching [ 96.235578][ T4032] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 96.249822][ T4032] BTRFS info (device loop3): trying to use backup root at mount time [ 96.293583][ T4032] BTRFS error (device loop3): cannot disable free space tree [ 96.301844][ T4032] BTRFS error (device loop3): open_ctree failed [ 96.334740][ T4062] sctp: [Deprecated]: syz.0.144 (pid 4062) Use of int in max_burst socket option deprecated. [ 96.334740][ T4062] Use struct sctp_assoc_value instead [ 96.424107][ T4065] syz.0.144 uses obsolete (PF_INET,SOCK_PACKET) [ 98.326068][ T27] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 98.686136][ T27] usb 4-1: config 64 has an invalid interface number: 188 but max is 0 [ 98.700080][ T27] usb 4-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 98.723826][ T27] usb 4-1: config 64 has an invalid interface descriptor of length 2, skipping [ 98.733162][ T3595] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.746837][ T27] usb 4-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 98.762299][ T27] usb 4-1: config 64 has no interface number 0 [ 99.089055][ T27] usb 4-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 99.098735][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.107670][ T27] usb 4-1: Product: syz [ 99.111865][ T27] usb 4-1: Manufacturer: syz [ 99.112158][ T4110] loop1: detected capacity change from 0 to 32768 [ 99.117149][ T27] usb 4-1: SerialNumber: syz [ 99.130632][ T4110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.160 (4110) [ 99.136044][ T3595] usb 5-1: Using ep0 maxpacket: 32 [ 99.151797][ T4110] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.256231][ T4110] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 99.277720][ T4110] BTRFS info (device loop1): disabling free space tree [ 99.299930][ T4061] delete_channel: no stack [ 99.315838][ T4110] BTRFS info (device loop1): setting nodatacow, compression disabled [ 99.360131][ T4110] BTRFS info (device loop1): enabling disk space caching [ 99.402264][ T4110] BTRFS info (device loop1): use no compression [ 99.432617][ T4110] BTRFS info (device loop1): disabling disk space caching [ 99.474178][ T4110] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 99.531040][ T4110] BTRFS info (device loop1): trying to use backup root at mount time [ 99.540470][ T4110] BTRFS error (device loop1): cannot disable free space tree [ 99.566791][ T27] usb-storage 4-1:64.188: USB Mass Storage device detected [ 99.646183][ T3595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.668937][ T3595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.692145][ T4110] BTRFS error (device loop1): open_ctree failed [ 99.699546][ T3595] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.709684][ T27] usb-storage 4-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 99.719864][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.109454][ T3595] usb 5-1: config 0 descriptor?? [ 100.202249][ T3595] hub 5-1:0.0: USB hub found [ 100.433665][ T4107] netlink: 104 bytes leftover after parsing attributes in process `syz.4.159'. [ 100.466277][ T3595] hub 5-1:0.0: 1 port detected [ 100.700363][ T27] usb 4-1: USB disconnect, device number 5 [ 100.741398][ T3637] udevd[3637]: setting mode of /dev/bus/usb/004/005 to 020664 failed: No such file or directory [ 100.992998][ T3637] udevd[3637]: setting owner of /dev/bus/usb/004/005 to uid=0, gid=0 failed: No such file or directory [ 101.866691][ T3593] hub 5-1:0.0: activate --> -90 [ 102.178856][ T3593] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 102.208679][ T3629] usb 5-1: USB disconnect, device number 5 [ 102.226296][ T3593] usb 5-1: Failed to suspend device, error -71 [ 103.145994][ T3595] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 103.553973][ T4172] loop1: detected capacity change from 0 to 128 [ 103.580802][ T4172] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 103.592581][ T4172] sysv_free_block: trying to free block not in datazone [ 103.607926][ T4172] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 103.756727][ T3595] usb 1-1: config 64 has an invalid interface number: 188 but max is 0 [ 103.977183][ T3595] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 103.986976][ T3595] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 103.996145][ T3595] usb 1-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 104.007437][ T3595] usb 1-1: config 64 has no interface number 0 [ 104.831996][ T3595] usb 1-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 104.856569][ T3595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.876050][ T3595] usb 1-1: Product: syz [ 104.880261][ T3595] usb 1-1: Manufacturer: syz [ 104.915973][ T3595] usb 1-1: SerialNumber: syz [ 104.948160][ T4188] input: syz1 as /devices/virtual/input/input6 [ 104.959975][ T4192] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.232105][ T4173] loop3: detected capacity change from 0 to 32768 [ 105.243399][ T3595] usb-storage 1-1:64.188: USB Mass Storage device detected [ 105.266209][ T3592] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.284639][ T4173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.180 (4173) [ 105.298840][ T3595] usb-storage 1-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 105.331093][ T4173] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.351772][ T4173] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 105.381509][ T3595] usb 1-1: USB disconnect, device number 5 [ 105.397940][ T4173] BTRFS info (device loop3): disabling free space tree [ 105.404853][ T4173] BTRFS info (device loop3): setting nodatacow, compression disabled [ 105.426666][ T4173] BTRFS info (device loop3): enabling disk space caching [ 105.433795][ T4173] BTRFS info (device loop3): use no compression [ 105.445983][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.456824][ T4173] BTRFS info (device loop3): disabling disk space caching [ 105.464163][ T4173] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 105.478637][ T4173] BTRFS info (device loop3): trying to use backup root at mount time [ 105.487237][ T4173] BTRFS error (device loop3): cannot disable free space tree [ 105.502091][ T4173] BTRFS error (device loop3): open_ctree failed [ 105.555940][ T3592] usb 5-1: Using ep0 maxpacket: 8 [ 105.696297][ T3592] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 105.711407][ T3592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.713207][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 105.733365][ T3592] usb 5-1: config 0 descriptor?? [ 105.811759][ T3592] hso 5-1:0.0: Can't find BULK IN endpoint [ 105.856244][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.876233][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.901801][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.924887][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.972568][ T27] usb 2-1: config 0 descriptor?? [ 106.037228][ T27] hub 2-1:0.0: USB hub found [ 106.049569][ T3592] usb 5-1: USB disconnect, device number 6 [ 106.294095][ T4197] netlink: 104 bytes leftover after parsing attributes in process `syz.1.188'. [ 106.456369][ T27] hub 2-1:0.0: 1 port detected [ 106.821602][ T4212] overlayfs: failed to resolve '/¢”âú¬i¾;¤eá€Û¥Ð?©Ç-'†ÇŒ9)ƒ$#€ôSV1ù': -2 [ 107.325316][ T4222] loop4: detected capacity change from 0 to 128 [ 107.340966][ T4222] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 107.348672][ T4222] sysv_free_block: trying to free block not in datazone [ 107.356777][ T4222] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 107.386194][ T27] hub 2-1:0.0: activate --> -90 [ 107.761570][ T935] usb 2-1: USB disconnect, device number 2 [ 107.767580][ T27] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 109.286224][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.494861][ T4239] loop0: detected capacity change from 0 to 32768 [ 109.513744][ T4239] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.200 (4239) [ 109.538901][ T4239] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.557632][ T4239] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 109.566948][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 109.584521][ T4239] BTRFS info (device loop0): disabling free space tree [ 109.601107][ T4239] BTRFS info (device loop0): setting nodatacow, compression disabled [ 109.643936][ T4239] BTRFS info (device loop0): enabling disk space caching [ 109.664176][ T4239] BTRFS info (device loop0): use no compression [ 109.688412][ T4239] BTRFS info (device loop0): disabling disk space caching [ 109.705928][ T4239] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.725967][ T7] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 109.745333][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.794278][ T4239] BTRFS info (device loop0): trying to use backup root at mount time [ 109.831980][ T7] usb 4-1: config 0 descriptor?? [ 109.840763][ T4239] BTRFS error (device loop0): cannot disable free space tree [ 109.888391][ T7] hso 4-1:0.0: Can't find BULK IN endpoint [ 110.036711][ T4239] BTRFS error (device loop0): open_ctree failed [ 110.505663][ T27] usb 4-1: USB disconnect, device number 6 [ 110.872274][ T4258] loop4: detected capacity change from 0 to 40427 [ 110.926283][ T4258] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 110.965071][ T4258] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 111.457442][ T4258] F2FS-fs (loop4): Found nat_bits in checkpoint [ 111.771410][ T4258] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 111.792866][ T4258] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 112.586046][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.916030][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 113.040837][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.062087][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.082770][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.102983][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.144115][ T27] usb 3-1: config 0 descriptor?? [ 113.197137][ T27] hub 3-1:0.0: USB hub found [ 113.403685][ T4280] netlink: 104 bytes leftover after parsing attributes in process `syz.2.214'. [ 113.419508][ T4304] loop4: detected capacity change from 0 to 2048 [ 113.436393][ T27] hub 3-1:0.0: 1 port detected [ 113.460943][ T4304] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.516219][ T4304] overlayfs: upper fs needs to support d_type. [ 113.531869][ T4304] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.539044][ T4304] overlayfs: failed to set xattr on upper [ 113.544850][ T4304] overlayfs: ...falling back to index=off,metacopy=off. [ 114.060298][ T4308] loop3: detected capacity change from 0 to 32768 [ 114.083798][ T4308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.223 (4308) [ 114.143611][ T3547] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 114.164902][ T4308] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.182692][ T3547] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 114.196387][ T4308] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 114.222531][ T4308] BTRFS info (device loop3): disabling free space tree [ 114.255279][ T4308] BTRFS info (device loop3): setting nodatacow, compression disabled [ 114.278455][ T4308] BTRFS info (device loop3): enabling disk space caching [ 114.287373][ T4308] BTRFS info (device loop3): use no compression [ 114.294572][ T4308] BTRFS info (device loop3): disabling disk space caching [ 114.331677][ T4308] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.362857][ T4308] BTRFS info (device loop3): trying to use backup root at mount time [ 114.384683][ T4308] BTRFS error (device loop3): cannot disable free space tree [ 114.396069][ T3593] hub 3-1:0.0: activate --> -90 [ 114.420554][ T4308] BTRFS error (device loop3): open_ctree failed [ 114.608195][ T27] usb 3-1: USB disconnect, device number 3 [ 114.615990][ T3593] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 114.891382][ T3784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.222692][ T4311] loop1: detected capacity change from 0 to 40427 [ 115.236165][ T4317] loop3: detected capacity change from 0 to 128 [ 115.244965][ T4317] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 115.252595][ T4317] sysv_free_block: trying to free block not in datazone [ 115.260673][ T4317] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 115.264697][ T3784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.290721][ T4311] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 115.307415][ T4311] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 115.395769][ T4311] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.465246][ T3784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.543142][ T4311] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 115.555985][ T4311] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.596647][ T3784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.001131][ T3563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.010344][ T3563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.018578][ T3560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.028530][ T3563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.036551][ T3560] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.043943][ T3563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.416265][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.655932][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 116.895877][ C0] sched: RT throttling activated [ 116.995981][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 117.896130][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 117.910987][ T27] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 117.920368][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.175841][ T3563] Bluetooth: hci0: command tx timeout [ 118.893259][ T27] usb 1-1: config 0 descriptor?? [ 119.176056][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 119.182100][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 119.200249][ T27] usb 1-1: USB disconnect, device number 6 [ 119.524863][ T4363] loop3: detected capacity change from 0 to 32768 [ 120.218598][ T4363] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.237 (4363) [ 120.266096][ T4311] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 120.278297][ T4311] syz.1.225: attempt to access beyond end of device [ 120.278297][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 120.294331][ T4311] syz.1.225: attempt to access beyond end of device [ 120.294331][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 120.310716][ T4311] syz.1.225: attempt to access beyond end of device [ 120.310716][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 120.325208][ T4311] syz.1.225: attempt to access beyond end of device [ 120.325208][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 120.341228][ T4311] syz.1.225: attempt to access beyond end of device [ 120.341228][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 120.355755][ T4311] syz.1.225: attempt to access beyond end of device [ 120.355755][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 120.371916][ T4311] syz.1.225: attempt to access beyond end of device [ 120.371916][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 120.386487][ T4311] syz.1.225: attempt to access beyond end of device [ 120.386487][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 120.402398][ T4311] syz.1.225: attempt to access beyond end of device [ 120.402398][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 120.418588][ T4311] syz.1.225: attempt to access beyond end of device [ 120.418588][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 120.505140][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.553786][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.606273][ T4332] device bridge_slave_0 entered promiscuous mode [ 120.673937][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.716026][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.775737][ T4332] device bridge_slave_1 entered promiscuous mode [ 120.890800][ T3552] Bluetooth: hci0: command tx timeout [ 120.906243][ T4363] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.966092][ T4363] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 120.975287][ T4363] BTRFS info (device loop3): disabling free space tree [ 121.002570][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.111903][ T4363] BTRFS info (device loop3): setting nodatacow, compression disabled [ 121.177526][ T4363] BTRFS info (device loop3): enabling disk space caching [ 121.225359][ T4363] BTRFS info (device loop3): use no compression [ 121.278735][ T4363] BTRFS info (device loop3): disabling disk space caching [ 121.326002][ T3593] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.342951][ T4363] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 121.397693][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.432736][ T4363] BTRFS info (device loop3): trying to use backup root at mount time [ 121.483975][ T4363] BTRFS error (device loop3): cannot disable free space tree [ 121.526971][ T4363] BTRFS error (device loop3): open_ctree failed [ 121.569795][ T3593] usb 1-1: Using ep0 maxpacket: 32 [ 121.678577][ T4332] team0: Port device team_slave_0 added [ 121.686542][ T3593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.228257][ T4332] team0: Port device team_slave_1 added [ 122.509748][ T3593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.519586][ T3593] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.528674][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.538444][ T3593] usb 1-1: config 0 descriptor?? [ 122.577996][ T3593] hub 1-1:0.0: USB hub found [ 122.785269][ T4383] netlink: 104 bytes leftover after parsing attributes in process `syz.0.241'. [ 122.817040][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.824018][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.907311][ T3593] hub 1-1:0.0: 1 port detected [ 123.033653][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.147038][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.154019][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.418051][ T3552] Bluetooth: hci0: command tx timeout [ 123.756774][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.947867][ T4332] device hsr_slave_0 entered promiscuous mode [ 123.978433][ T4332] device hsr_slave_1 entered promiscuous mode [ 123.999446][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.022609][ T4332] Cannot create hsr debugfs directory [ 124.186048][ T3593] hub 1-1:0.0: activate --> -90 [ 125.285917][ T4311] bio_check_eod: 2859 callbacks suppressed [ 125.285961][ T4311] syz.1.225: attempt to access beyond end of device [ 125.285961][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 125.323960][ T4311] syz.1.225: attempt to access beyond end of device [ 125.323960][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 125.340827][ T4311] syz.1.225: attempt to access beyond end of device [ 125.340827][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 125.366978][ T4311] syz.1.225: attempt to access beyond end of device [ 125.366978][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 125.384873][ T4311] syz.1.225: attempt to access beyond end of device [ 125.384873][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 125.410592][ T4311] syz.1.225: attempt to access beyond end of device [ 125.410592][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 125.427937][ T4311] syz.1.225: attempt to access beyond end of device [ 125.427937][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 125.451351][ T4311] syz.1.225: attempt to access beyond end of device [ 125.451351][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 125.468583][ T4311] syz.1.225: attempt to access beyond end of device [ 125.468583][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 125.493367][ T4311] syz.1.225: attempt to access beyond end of device [ 125.493367][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 125.897742][ T3552] Bluetooth: hci0: command tx timeout [ 126.071257][ T3563] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.080188][ T3563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.088617][ T3560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.097200][ T3563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.104808][ T3563] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 126.112503][ T3560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.176148][ T3593] usb 1-1: USB disconnect, device number 7 [ 128.204602][ T4429] chnl_net:caif_netlink_parms(): no params data found [ 128.633867][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.656060][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.707502][ T4429] device bridge_slave_0 entered promiscuous mode [ 128.757132][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.814966][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.887404][ T4429] device bridge_slave_1 entered promiscuous mode [ 128.892760][ T3563] Bluetooth: hci5: command tx timeout [ 129.175834][ T4429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.255635][ T4429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.301463][ T4443] loop3: detected capacity change from 0 to 32768 [ 129.450551][ T3637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (3637) [ 129.553057][ T4429] team0: Port device team_slave_0 added [ 129.590990][ T4429] team0: Port device team_slave_1 added [ 129.719068][ T4447] loop0: detected capacity change from 0 to 40427 [ 129.826654][ T4447] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 129.843378][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.881256][ T4447] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.910409][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.012004][ T4429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.237747][ T4447] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 130.307377][ T4311] bio_check_eod: 2571 callbacks suppressed [ 130.307418][ T4311] syz.1.225: attempt to access beyond end of device [ 130.307418][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 130.330286][ T4311] syz.1.225: attempt to access beyond end of device [ 130.330286][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 130.355093][ T4311] syz.1.225: attempt to access beyond end of device [ 130.355093][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 130.372178][ T4311] syz.1.225: attempt to access beyond end of device [ 130.372178][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 130.397456][ T4311] syz.1.225: attempt to access beyond end of device [ 130.397456][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 130.414522][ T4311] syz.1.225: attempt to access beyond end of device [ 130.414522][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 130.439752][ T4311] syz.1.225: attempt to access beyond end of device [ 130.439752][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 130.456673][ T4311] syz.1.225: attempt to access beyond end of device [ 130.456673][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 130.481622][ T4311] syz.1.225: attempt to access beyond end of device [ 130.481622][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 130.498439][ T4311] syz.1.225: attempt to access beyond end of device [ 130.498439][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 130.908474][ T3563] Bluetooth: hci5: command tx timeout [ 131.371435][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.382984][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.476270][ T152] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.544641][ T4429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.725983][ T152] usb 3-1: Using ep0 maxpacket: 32 [ 131.778161][ T4332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.856333][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.881292][ T4429] device hsr_slave_0 entered promiscuous mode [ 131.896504][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.984513][ T152] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.023748][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.127104][ T152] usb 3-1: config 0 descriptor?? [ 132.167235][ T152] hub 3-1:0.0: USB hub found [ 132.396349][ T4480] netlink: 104 bytes leftover after parsing attributes in process `syz.2.261'. [ 132.517967][ T152] hub 3-1:0.0: 1 port detected [ 132.756819][ T4429] device hsr_slave_1 entered promiscuous mode [ 132.765024][ T4429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.772694][ T4429] Cannot create hsr debugfs directory [ 132.846881][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.853447][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986187][ T3563] Bluetooth: hci5: command tx timeout [ 133.183183][ T4429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.888640][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.924941][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.359172][ T4429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.902351][ T152] usb 3-1: USB disconnect, device number 4 [ 134.916350][ T3592] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 135.316492][ T4311] bio_check_eod: 2355 callbacks suppressed [ 135.316515][ T4311] syz.1.225: attempt to access beyond end of device [ 135.316515][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 135.338695][ T4311] syz.1.225: attempt to access beyond end of device [ 135.338695][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 135.353403][ T4311] syz.1.225: attempt to access beyond end of device [ 135.353403][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 135.369593][ T4311] syz.1.225: attempt to access beyond end of device [ 135.369593][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 135.384228][ T4311] syz.1.225: attempt to access beyond end of device [ 135.384228][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 135.400534][ T4311] syz.1.225: attempt to access beyond end of device [ 135.400534][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 135.415265][ T4311] syz.1.225: attempt to access beyond end of device [ 135.415265][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 135.431608][ T4311] syz.1.225: attempt to access beyond end of device [ 135.431608][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 135.446262][ T4311] syz.1.225: attempt to access beyond end of device [ 135.446262][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 135.461807][ T3563] Bluetooth: hci5: command tx timeout [ 135.462369][ T4311] syz.1.225: attempt to access beyond end of device [ 135.462369][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 135.538915][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.122528][ T4429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.374966][ T3784] device hsr_slave_0 left promiscuous mode [ 137.423056][ T3784] device hsr_slave_1 left promiscuous mode [ 137.687761][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.695295][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.586158][ T935] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 138.615565][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.669073][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.908691][ T3784] device bridge_slave_1 left promiscuous mode [ 139.775907][ T3784] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.866234][ T935] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 139.875137][ T935] usb 1-1: config 0 has no interface number 0 [ 139.914908][ T935] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 140.043023][ T3784] device bridge_slave_0 left promiscuous mode [ 140.056553][ T3784] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.085430][ T935] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 140.116003][ T935] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 140.164715][ T935] usb 1-1: Product: syz [ 140.184951][ T935] usb 1-1: SerialNumber: syz [ 140.223914][ T935] usb 1-1: config 0 descriptor?? [ 140.326791][ T4311] bio_check_eod: 1905 callbacks suppressed [ 140.326810][ T4311] syz.1.225: attempt to access beyond end of device [ 140.326810][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 140.347319][ T4311] syz.1.225: attempt to access beyond end of device [ 140.347319][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 140.363449][ T4311] syz.1.225: attempt to access beyond end of device [ 140.363449][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 140.378080][ T4311] syz.1.225: attempt to access beyond end of device [ 140.378080][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 140.394358][ T4311] syz.1.225: attempt to access beyond end of device [ 140.394358][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 140.409072][ T4311] syz.1.225: attempt to access beyond end of device [ 140.409072][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 140.425171][ T4311] syz.1.225: attempt to access beyond end of device [ 140.425171][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 140.439754][ T4311] syz.1.225: attempt to access beyond end of device [ 140.439754][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 140.456063][ T4311] syz.1.225: attempt to access beyond end of device [ 140.456063][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 140.470844][ T4311] syz.1.225: attempt to access beyond end of device [ 140.470844][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 140.479038][ T935] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 140.976150][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.919843][ T935] usb 1-1: USB disconnect, device number 8 [ 142.217754][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 142.360105][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.384437][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.404393][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.413894][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.919711][ T7] usb 4-1: config 0 descriptor?? [ 142.957180][ T7] hub 4-1:0.0: USB hub found [ 143.282838][ T4554] netlink: 104 bytes leftover after parsing attributes in process `syz.3.274'. [ 143.293327][ T4564] loop2: detected capacity change from 0 to 32768 [ 143.751634][ T3784] device veth1_macvtap left promiscuous mode [ 143.762794][ T4564] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.781412][ T3784] device veth0_macvtap left promiscuous mode [ 143.818321][ T3784] device veth1_vlan left promiscuous mode [ 143.825466][ T4564] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 143.855803][ T3784] device veth0_vlan left promiscuous mode [ 143.872306][ T4564] BTRFS info (device loop2): disabling free space tree [ 143.994026][ T7] hub 4-1:0.0: 1 port detected [ 144.009950][ T4564] BTRFS info (device loop2): setting nodatacow, compression disabled [ 144.029805][ T4564] BTRFS info (device loop2): enabling disk space caching [ 144.042737][ T4564] BTRFS info (device loop2): use no compression [ 144.076880][ T4564] BTRFS info (device loop2): disabling disk space caching [ 144.084343][ T4564] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 144.153194][ T4564] BTRFS info (device loop2): trying to use backup root at mount time [ 144.182092][ T4564] BTRFS error (device loop2): cannot disable free space tree [ 144.225496][ T4564] BTRFS error (device loop2): open_ctree failed [ 144.576204][ T7] hub 4-1:0.0: activate --> -90 [ 144.945555][ T4572] Falling back ldisc for ttyS3. [ 145.337725][ T4311] bio_check_eod: 2676 callbacks suppressed [ 145.337745][ T4311] syz.1.225: attempt to access beyond end of device [ 145.337745][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 145.358297][ T4311] syz.1.225: attempt to access beyond end of device [ 145.358297][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 145.374703][ T4311] syz.1.225: attempt to access beyond end of device [ 145.374703][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 145.391304][ T4311] syz.1.225: attempt to access beyond end of device [ 145.391304][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 145.408015][ T4311] syz.1.225: attempt to access beyond end of device [ 145.408015][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 145.423312][ T4311] syz.1.225: attempt to access beyond end of device [ 145.423312][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 145.440146][ T4311] syz.1.225: attempt to access beyond end of device [ 145.440146][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 145.457040][ T4311] syz.1.225: attempt to access beyond end of device [ 145.457040][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 145.482787][ T4311] syz.1.225: attempt to access beyond end of device [ 145.482787][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 145.502618][ T4311] syz.1.225: attempt to access beyond end of device [ 145.502618][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 146.406277][ T3592] usb 4-1: USB disconnect, device number 7 [ 149.752913][ T3592] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 150.186397][ T3592] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 150.203348][ T3592] usb 3-1: config 0 has no interface number 0 [ 150.220771][ T3592] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 150.347096][ T4311] bio_check_eod: 2264 callbacks suppressed [ 150.347115][ T4311] syz.1.225: attempt to access beyond end of device [ 150.347115][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 150.367753][ T4311] syz.1.225: attempt to access beyond end of device [ 150.367753][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 150.383955][ T4311] syz.1.225: attempt to access beyond end of device [ 150.383955][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 150.398636][ T4311] syz.1.225: attempt to access beyond end of device [ 150.398636][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 150.414812][ T4311] syz.1.225: attempt to access beyond end of device [ 150.414812][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 150.416107][ T3592] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 150.429319][ T4311] syz.1.225: attempt to access beyond end of device [ 150.429319][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 150.454156][ T4311] syz.1.225: attempt to access beyond end of device [ 150.454156][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 150.468751][ T4311] syz.1.225: attempt to access beyond end of device [ 150.468751][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 150.484935][ T4311] syz.1.225: attempt to access beyond end of device [ 150.484935][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 150.493722][ T3592] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 150.499537][ T4311] syz.1.225: attempt to access beyond end of device [ 150.499537][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 150.541751][ T3592] usb 3-1: Product: syz [ 150.558400][ T3592] usb 3-1: SerialNumber: syz [ 150.586719][ T3592] usb 3-1: config 0 descriptor?? [ 150.658578][ T3592] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 150.680974][ T4603] Falling back ldisc for ttyS3. [ 151.324982][ T3784] team0 (unregistering): Port device team_slave_1 removed [ 151.419142][ T3784] team0 (unregistering): Port device team_slave_0 removed [ 151.739117][ T4615] loop0: detected capacity change from 0 to 32768 [ 151.750121][ T935] usb 3-1: USB disconnect, device number 5 [ 151.764646][ T4615] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.292 (4615) [ 151.906363][ T3784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.987165][ T4615] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.997598][ T4615] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 152.006422][ T4615] BTRFS info (device loop0): disabling free space tree [ 152.013302][ T4615] BTRFS info (device loop0): setting nodatacow, compression disabled [ 152.021453][ T4615] BTRFS info (device loop0): enabling disk space caching [ 152.028670][ T4615] BTRFS info (device loop0): use no compression [ 152.034931][ T4615] BTRFS info (device loop0): disabling disk space caching [ 152.042114][ T4615] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 152.052747][ T4615] BTRFS info (device loop0): trying to use backup root at mount time [ 152.060858][ T4615] BTRFS error (device loop0): cannot disable free space tree [ 152.506255][ T4615] BTRFS error (device loop0): open_ctree failed [ 152.795113][ T3784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.712314][ T3784] bond0 (unregistering): Released all slaves [ 155.033840][ T4429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.214792][ T4429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.230302][ T4429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.252874][ T4429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.272046][ T4429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.356796][ T4311] bio_check_eod: 2784 callbacks suppressed [ 155.356814][ T4311] syz.1.225: attempt to access beyond end of device [ 155.356814][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 155.377378][ T4311] syz.1.225: attempt to access beyond end of device [ 155.377378][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 155.393411][ T4311] syz.1.225: attempt to access beyond end of device [ 155.393411][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 155.408282][ T4311] syz.1.225: attempt to access beyond end of device [ 155.408282][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 155.409751][ T4429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.424743][ T4311] syz.1.225: attempt to access beyond end of device [ 155.424743][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 155.443359][ T4311] syz.1.225: attempt to access beyond end of device [ 155.443359][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 155.460388][ T4311] syz.1.225: attempt to access beyond end of device [ 155.460388][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 155.475175][ T4311] syz.1.225: attempt to access beyond end of device [ 155.475175][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 155.481729][ T4429] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.491318][ T4311] syz.1.225: attempt to access beyond end of device [ 155.491318][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 155.510307][ T4311] syz.1.225: attempt to access beyond end of device [ 155.510307][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 155.563800][ T4429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.586838][ T4429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.904783][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.912804][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.920682][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.887500][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.896383][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.903533][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.911610][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.920574][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.896914][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.904020][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.912555][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.921560][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.903960][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.913309][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.921750][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.882416][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.891158][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.899485][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.908145][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.916486][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 160.063481][ T4429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.242784][ T4676] loop0: detected capacity change from 0 to 256 [ 160.368391][ T4311] bio_check_eod: 3238 callbacks suppressed [ 160.368410][ T4311] syz.1.225: attempt to access beyond end of device [ 160.368410][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 160.389179][ T4311] syz.1.225: attempt to access beyond end of device [ 160.389179][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 160.405272][ T4311] syz.1.225: attempt to access beyond end of device [ 160.405272][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 160.416255][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.420637][ T4311] syz.1.225: attempt to access beyond end of device [ 160.420637][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 160.441894][ T4311] syz.1.225: attempt to access beyond end of device [ 160.441894][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 160.456570][ T4311] syz.1.225: attempt to access beyond end of device [ 160.456570][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 160.473549][ T4311] syz.1.225: attempt to access beyond end of device [ 160.473549][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 160.488186][ T4311] syz.1.225: attempt to access beyond end of device [ 160.488186][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 160.491390][ T4429] device veth0_vlan entered promiscuous mode [ 160.504444][ T4311] syz.1.225: attempt to access beyond end of device [ 160.504444][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 160.509293][ T152] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 160.522239][ T4311] syz.1.225: attempt to access beyond end of device [ 160.522239][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 160.624131][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.700792][ T4429] device veth1_vlan entered promiscuous mode [ 160.922251][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.373371][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.394324][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.410948][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.427060][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.435604][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.454551][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.463985][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 161.480154][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.494632][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 161.505783][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 161.521509][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.531260][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.545448][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.660356][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.698770][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.705967][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.007727][ T3629] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.096320][ T152] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 162.112831][ T152] usb 3-1: config 0 has no interface number 0 [ 162.306758][ T152] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 162.911484][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.166303][ T3629] usb 4-1: Using ep0 maxpacket: 32 [ 163.246192][ T152] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 163.267379][ T152] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 163.275495][ T152] usb 3-1: Product: syz [ 163.302371][ T152] usb 3-1: config 0 descriptor?? [ 163.316420][ T3629] usb 4-1: config 64 has an invalid interface number: 188 but max is 0 [ 163.330288][ T3629] usb 4-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 163.339839][ T152] usb 3-1: can't set config #0, error -71 [ 163.362163][ T3629] usb 4-1: config 64 has an invalid interface descriptor of length 2, skipping [ 163.372906][ T152] usb 3-1: USB disconnect, device number 6 [ 163.392963][ T3629] usb 4-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 163.410726][ T3629] usb 4-1: config 64 has no interface number 0 [ 163.586159][ T3629] usb 4-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 163.607065][ T3629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.615103][ T3629] usb 4-1: Product: syz [ 163.626726][ T3629] usb 4-1: Manufacturer: syz [ 163.666042][ T3629] usb 4-1: can't set config #64, error -71 [ 163.682269][ T3629] usb 4-1: USB disconnect, device number 8 [ 163.887666][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.896277][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.903420][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.913465][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.081764][ T4429] device veth0_macvtap entered promiscuous mode [ 165.140826][ T4429] device veth1_macvtap entered promiscuous mode [ 165.186678][ T4699] loop2: detected capacity change from 0 to 4096 [ 165.253369][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.331236][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.377366][ T4311] bio_check_eod: 2306 callbacks suppressed [ 165.377384][ T4311] syz.1.225: attempt to access beyond end of device [ 165.377384][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 165.385458][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.397855][ T4311] syz.1.225: attempt to access beyond end of device [ 165.397855][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 165.423685][ T4311] syz.1.225: attempt to access beyond end of device [ 165.423685][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 165.438389][ T4311] syz.1.225: attempt to access beyond end of device [ 165.438389][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 165.454545][ T4311] syz.1.225: attempt to access beyond end of device [ 165.454545][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 165.469103][ T4311] syz.1.225: attempt to access beyond end of device [ 165.469103][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 165.485608][ T4311] syz.1.225: attempt to access beyond end of device [ 165.485608][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 165.500239][ T4311] syz.1.225: attempt to access beyond end of device [ 165.500239][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 165.516407][ T4311] syz.1.225: attempt to access beyond end of device [ 165.516407][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 165.525536][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.531037][ T4311] syz.1.225: attempt to access beyond end of device [ 165.531037][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 165.607027][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.659796][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.703503][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.744586][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.794244][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.846718][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.886290][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.897264][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.907913][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.917806][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.961440][ T4699] fuse: Unknown parameter 'use00000000000000000000' [ 166.000575][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.022370][ T4699] netlink: 'syz.2.308': attribute type 11 has an invalid length. [ 166.065875][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.109148][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.186940][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.907602][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.916412][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.924327][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.898840][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.907920][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.917856][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.926477][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.898130][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.906774][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.915233][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.923878][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.897782][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.906807][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.915462][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.924133][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.385947][ T4311] bio_check_eod: 3280 callbacks suppressed [ 170.385962][ T4311] syz.1.225: attempt to access beyond end of device [ 170.385962][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 170.406908][ T4311] syz.1.225: attempt to access beyond end of device [ 170.406908][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 170.422510][ T4311] syz.1.225: attempt to access beyond end of device [ 170.422510][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 170.437094][ T4311] syz.1.225: attempt to access beyond end of device [ 170.437094][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 170.453157][ T4311] syz.1.225: attempt to access beyond end of device [ 170.453157][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 170.467645][ T4311] syz.1.225: attempt to access beyond end of device [ 170.467645][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 170.483771][ T4311] syz.1.225: attempt to access beyond end of device [ 170.483771][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 170.498322][ T4311] syz.1.225: attempt to access beyond end of device [ 170.498322][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 170.514215][ T4311] syz.1.225: attempt to access beyond end of device [ 170.514215][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 170.528751][ T4311] syz.1.225: attempt to access beyond end of device [ 170.528751][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 170.890786][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.898914][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.918608][ T4429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.965210][ T4429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.006351][ T4429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.045759][ T4429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.351365][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.377208][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.436972][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.518735][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.162653][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.186855][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.949756][ T26] audit: type=1326 audit(1720244125.883:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4725 comm="syz.0.317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5054d75bd9 code=0x0 [ 173.146015][ T22] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 173.689921][ T22] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 173.728668][ T22] usb 3-1: config 0 has no interface number 0 [ 173.734818][ T22] usb 3-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x30, skipping [ 174.686205][ T22] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 174.715426][ T22] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 174.754893][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.762072][ T22] usb 3-1: Product: syz [ 174.796294][ T3813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.805177][ T3813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.821259][ T22] usb 3-1: SerialNumber: syz [ 174.888402][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.900832][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.910026][ T22] usb 3-1: config 0 descriptor?? [ 174.940161][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.954434][ T22] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 175.283576][ T4746] loop3: detected capacity change from 0 to 4096 [ 175.321148][ T3595] usb 3-1: USB disconnect, device number 7 [ 175.396071][ T4311] bio_check_eod: 2546 callbacks suppressed [ 175.396090][ T4311] syz.1.225: attempt to access beyond end of device [ 175.396090][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 175.416907][ T4311] syz.1.225: attempt to access beyond end of device [ 175.416907][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 175.433161][ T4311] syz.1.225: attempt to access beyond end of device [ 175.433161][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 175.447822][ T4311] syz.1.225: attempt to access beyond end of device [ 175.447822][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 175.464128][ T4311] syz.1.225: attempt to access beyond end of device [ 175.464128][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 175.467222][ T4746] fuse: Unknown parameter 'use00000000000000000000' [ 175.478813][ T4311] syz.1.225: attempt to access beyond end of device [ 175.478813][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 175.500856][ T4311] syz.1.225: attempt to access beyond end of device [ 175.500856][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 175.515482][ T4311] syz.1.225: attempt to access beyond end of device [ 175.515482][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 175.532074][ T4311] syz.1.225: attempt to access beyond end of device [ 175.532074][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 175.546781][ T4311] syz.1.225: attempt to access beyond end of device [ 175.546781][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 175.566935][ T4746] netlink: 'syz.3.321': attribute type 11 has an invalid length. [ 175.895781][ T3613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.924430][ T3613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.035480][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.847126][ T4779] binder: transaction release 19 bad handle 1, ret = -22 [ 180.203852][ T3555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.213426][ T3555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.222079][ T3555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.231109][ T3555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.239281][ T3555] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.247310][ T3555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.408762][ T4311] bio_check_eod: 2480 callbacks suppressed [ 180.408788][ T4311] syz.1.225: attempt to access beyond end of device [ 180.408788][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 180.429241][ T4311] syz.1.225: attempt to access beyond end of device [ 180.429241][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 180.445561][ T4311] syz.1.225: attempt to access beyond end of device [ 180.445561][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 180.460135][ T4311] syz.1.225: attempt to access beyond end of device [ 180.460135][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 180.476320][ T4311] syz.1.225: attempt to access beyond end of device [ 180.476320][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 180.490949][ T4311] syz.1.225: attempt to access beyond end of device [ 180.490949][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 180.503257][ T4788] loop2: detected capacity change from 0 to 4096 [ 180.507213][ T4311] syz.1.225: attempt to access beyond end of device [ 180.507213][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 180.525256][ T4311] syz.1.225: attempt to access beyond end of device [ 180.525256][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 180.541317][ T4311] syz.1.225: attempt to access beyond end of device [ 180.541317][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 180.555909][ T4311] syz.1.225: attempt to access beyond end of device [ 180.555909][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 180.684712][ T4788] fuse: Unknown parameter 'use00000000000000000000' [ 180.724337][ T4788] netlink: 'syz.2.330': attribute type 11 has an invalid length. [ 181.796187][ T3565] Bluetooth: hci3: command 0x0406 tx timeout [ 181.802288][ T3565] Bluetooth: hci1: command 0x0406 tx timeout [ 181.809331][ T3560] Bluetooth: hci4: command 0x0406 tx timeout [ 181.815383][ T3560] Bluetooth: hci2: command 0x0406 tx timeout [ 182.266187][ T3565] Bluetooth: hci0: command tx timeout [ 182.366002][ T26] audit: type=1326 audit(1720244135.243:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.0.333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5054d75bd9 code=0x0 [ 184.795190][ T4821] binder: transaction release 27 bad handle 1, ret = -22 [ 184.886353][ T3565] Bluetooth: hci0: command tx timeout [ 185.417692][ T4311] bio_check_eod: 2222 callbacks suppressed [ 185.417715][ T4311] syz.1.225: attempt to access beyond end of device [ 185.417715][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.438194][ T4311] syz.1.225: attempt to access beyond end of device [ 185.438194][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 185.454308][ T4311] syz.1.225: attempt to access beyond end of device [ 185.454308][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.468926][ T4311] syz.1.225: attempt to access beyond end of device [ 185.468926][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 185.485138][ T4311] syz.1.225: attempt to access beyond end of device [ 185.485138][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.499748][ T4311] syz.1.225: attempt to access beyond end of device [ 185.499748][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 185.516051][ T4311] syz.1.225: attempt to access beyond end of device [ 185.516051][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.530673][ T4311] syz.1.225: attempt to access beyond end of device [ 185.530673][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 185.546892][ T4311] syz.1.225: attempt to access beyond end of device [ 185.546892][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 185.561558][ T4311] syz.1.225: attempt to access beyond end of device [ 185.561558][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 186.926009][ T3565] Bluetooth: hci0: command tx timeout [ 187.005807][ T4826] loop0: detected capacity change from 0 to 32768 [ 187.046761][ T4749] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4749) [ 187.097859][ T4826] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.186726][ T4826] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 187.216180][ T4826] BTRFS info (device loop0): disabling free space tree [ 187.243563][ T4826] BTRFS info (device loop0): setting nodatacow, compression disabled [ 187.279684][ T4826] BTRFS info (device loop0): enabling disk space caching [ 187.316106][ T4826] BTRFS info (device loop0): use no compression [ 187.335974][ T4826] BTRFS info (device loop0): disabling disk space caching [ 187.370257][ T4826] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 187.416804][ T4826] BTRFS info (device loop0): trying to use backup root at mount time [ 187.445371][ T4826] BTRFS error (device loop0): cannot disable free space tree [ 187.459028][ T4837] loop3: detected capacity change from 0 to 4096 [ 187.506785][ T4826] BTRFS error (device loop0): open_ctree failed [ 187.616851][ T4837] fuse: Unknown parameter 'user_i00000000000000000000' [ 187.666783][ T4837] netlink: 'syz.3.343': attribute type 11 has an invalid length. [ 188.313010][ T4785] chnl_net:caif_netlink_parms(): no params data found [ 188.986118][ T3565] Bluetooth: hci0: command tx timeout [ 190.180720][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.224921][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.426423][ T4311] bio_check_eod: 2468 callbacks suppressed [ 190.426443][ T4311] syz.1.225: attempt to access beyond end of device [ 190.426443][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.446873][ T4311] syz.1.225: attempt to access beyond end of device [ 190.446873][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.463169][ T4311] syz.1.225: attempt to access beyond end of device [ 190.463169][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.477838][ T4311] syz.1.225: attempt to access beyond end of device [ 190.477838][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.494141][ T4311] syz.1.225: attempt to access beyond end of device [ 190.494141][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.508789][ T4311] syz.1.225: attempt to access beyond end of device [ 190.508789][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.524963][ T4311] syz.1.225: attempt to access beyond end of device [ 190.524963][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.539665][ T4311] syz.1.225: attempt to access beyond end of device [ 190.539665][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.555918][ T4311] syz.1.225: attempt to access beyond end of device [ 190.555918][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 190.570556][ T4311] syz.1.225: attempt to access beyond end of device [ 190.570556][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 190.751601][ T4785] device bridge_slave_0 entered promiscuous mode [ 190.786645][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.821470][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.898194][ T4785] device bridge_slave_1 entered promiscuous mode [ 191.377878][ T4870] binder: transaction release 35 bad handle 1, ret = -22 [ 192.098734][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.898916][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.115209][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.128334][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.203314][ T4785] team0: Port device team_slave_0 added [ 194.286349][ T4785] team0: Port device team_slave_1 added [ 194.988156][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.023610][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.205671][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.276065][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.314426][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.437135][ T4311] bio_check_eod: 2358 callbacks suppressed [ 195.437153][ T4311] syz.1.225: attempt to access beyond end of device [ 195.437153][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.457933][ T4311] syz.1.225: attempt to access beyond end of device [ 195.457933][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.474300][ T4311] syz.1.225: attempt to access beyond end of device [ 195.474300][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.490024][ T4311] syz.1.225: attempt to access beyond end of device [ 195.490024][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.506394][ T4311] syz.1.225: attempt to access beyond end of device [ 195.506394][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.522823][ T4311] syz.1.225: attempt to access beyond end of device [ 195.522823][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.539333][ T4311] syz.1.225: attempt to access beyond end of device [ 195.539333][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.553977][ T4311] syz.1.225: attempt to access beyond end of device [ 195.553977][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.570258][ T4311] syz.1.225: attempt to access beyond end of device [ 195.570258][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 195.575305][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.584819][ T4311] syz.1.225: attempt to access beyond end of device [ 195.584819][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 195.696480][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 195.970100][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 195.993787][ T4785] device hsr_slave_0 entered promiscuous mode [ 196.025699][ T4785] device hsr_slave_1 entered promiscuous mode [ 196.095414][ T4785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.116355][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 196.135719][ T4785] Cannot create hsr debugfs directory [ 196.156270][ T14] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 196.218086][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.367011][ T14] usb 1-1: config 0 descriptor?? [ 196.638796][ T4898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 197.219537][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.277613][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.330126][ T4898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.366342][ T4898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.397475][ T14] hid (null): invalid report_size 53675 [ 197.408342][ T14] hid (null): unknown global tag 0xd [ 197.445710][ T14] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 197.472080][ T14] hid-generic 0003:0158:0100.0001: unexpected long global item [ 197.493100][ T14] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 197.607785][ T14] usb 1-1: USB disconnect, device number 9 [ 200.065214][ T4952] binder: transaction release 43 bad handle 1, ret = -22 [ 200.446573][ T4311] bio_check_eod: 2459 callbacks suppressed [ 200.446593][ T4311] syz.1.225: attempt to access beyond end of device [ 200.446593][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 200.468712][ T4311] syz.1.225: attempt to access beyond end of device [ 200.468712][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 200.485608][ T4311] syz.1.225: attempt to access beyond end of device [ 200.485608][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 200.501829][ T4311] syz.1.225: attempt to access beyond end of device [ 200.501829][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 200.516531][ T4311] syz.1.225: attempt to access beyond end of device [ 200.516531][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 200.532795][ T4311] syz.1.225: attempt to access beyond end of device [ 200.532795][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 200.547612][ T4311] syz.1.225: attempt to access beyond end of device [ 200.547612][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 200.564301][ T4311] syz.1.225: attempt to access beyond end of device [ 200.564301][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 200.579103][ T4311] syz.1.225: attempt to access beyond end of device [ 200.579103][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 200.595455][ T4311] syz.1.225: attempt to access beyond end of device [ 200.595455][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 201.281375][ T4785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.373477][ T4785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.474531][ T4785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.562094][ T4785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 203.796084][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.060862][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 204.200363][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 204.252443][ T7] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 204.263454][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.655675][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.879210][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.899570][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.981177][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.007569][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.061794][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.069046][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.155387][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.209267][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.274318][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.281590][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.405520][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.456135][ T4311] bio_check_eod: 2778 callbacks suppressed [ 205.456162][ T4311] syz.1.225: attempt to access beyond end of device [ 205.456162][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.478242][ T4311] syz.1.225: attempt to access beyond end of device [ 205.478242][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.492905][ T4311] syz.1.225: attempt to access beyond end of device [ 205.492905][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.511209][ T4311] syz.1.225: attempt to access beyond end of device [ 205.511209][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.526872][ T4311] syz.1.225: attempt to access beyond end of device [ 205.526872][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.543260][ T4311] syz.1.225: attempt to access beyond end of device [ 205.543260][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.557985][ T4311] syz.1.225: attempt to access beyond end of device [ 205.557985][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.574208][ T4311] syz.1.225: attempt to access beyond end of device [ 205.574208][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.588817][ T4311] syz.1.225: attempt to access beyond end of device [ 205.588817][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 205.604959][ T4311] syz.1.225: attempt to access beyond end of device [ 205.604959][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 205.750494][ T5004] binder: BINDER_SET_CONTEXT_MGR already set [ 205.756956][ T5004] binder: 5002:5004 ioctl 4018620d 20000040 returned -16 [ 205.765185][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.775182][ T7] usb 1-1: config 0 descriptor?? [ 205.877747][ T4785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.955136][ T4785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.020630][ T4984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.373'. [ 207.911584][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.066332][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 208.072382][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 208.158086][ T7] usb 1-1: USB disconnect, device number 10 [ 208.889887][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.900556][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.910623][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.920291][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.907840][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.916680][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.468448][ T4311] bio_check_eod: 2561 callbacks suppressed [ 210.468470][ T4311] syz.1.225: attempt to access beyond end of device [ 210.468470][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.488969][ T4311] syz.1.225: attempt to access beyond end of device [ 210.488969][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.505205][ T4311] syz.1.225: attempt to access beyond end of device [ 210.505205][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.519987][ T4311] syz.1.225: attempt to access beyond end of device [ 210.519987][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.536371][ T4311] syz.1.225: attempt to access beyond end of device [ 210.536371][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.550962][ T4311] syz.1.225: attempt to access beyond end of device [ 210.550962][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.567194][ T4311] syz.1.225: attempt to access beyond end of device [ 210.567194][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.581872][ T4311] syz.1.225: attempt to access beyond end of device [ 210.581872][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.598124][ T4311] syz.1.225: attempt to access beyond end of device [ 210.598124][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 210.612801][ T4311] syz.1.225: attempt to access beyond end of device [ 210.612801][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 210.877603][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.886478][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.895446][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.925990][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.866998][ T5074] binder: transaction release 54 bad handle 1, ret = -22 [ 212.875478][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.131780][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.186542][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.204428][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.676040][ T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 214.967974][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 215.096132][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 215.152194][ T27] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 215.196850][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.476346][ T4311] bio_check_eod: 2154 callbacks suppressed [ 215.476372][ T4311] syz.1.225: attempt to access beyond end of device [ 215.476372][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.496874][ T4311] syz.1.225: attempt to access beyond end of device [ 215.496874][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.514609][ T4311] syz.1.225: attempt to access beyond end of device [ 215.514609][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.529212][ T4311] syz.1.225: attempt to access beyond end of device [ 215.529212][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.545357][ T4311] syz.1.225: attempt to access beyond end of device [ 215.545357][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.559943][ T4311] syz.1.225: attempt to access beyond end of device [ 215.559943][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.576178][ T4311] syz.1.225: attempt to access beyond end of device [ 215.576178][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.590809][ T4311] syz.1.225: attempt to access beyond end of device [ 215.590809][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.606926][ T4311] syz.1.225: attempt to access beyond end of device [ 215.606926][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 215.621546][ T4311] syz.1.225: attempt to access beyond end of device [ 215.621546][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 215.859160][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.880910][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.945148][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.971999][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.006046][ T4785] device veth0_vlan entered promiscuous mode [ 216.176319][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.186751][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.224851][ T4785] device veth1_vlan entered promiscuous mode [ 216.486602][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.515907][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 216.558400][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.615807][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.654336][ T4785] device veth0_macvtap entered promiscuous mode [ 216.704831][ T4785] device veth1_macvtap entered promiscuous mode [ 216.808377][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.861449][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.899929][ T27] usb 4-1: config 0 descriptor?? [ 216.928989][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.009893][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.060670][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.333222][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.141315][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.399058][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.199077][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.221183][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.300018][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.339508][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.356887][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.401220][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.435634][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.885944][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 219.892001][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 219.906982][ T27] usb 4-1: USB disconnect, device number 9 [ 220.022511][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.106238][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.158624][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.242287][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.487414][ T4311] bio_check_eod: 2226 callbacks suppressed [ 220.487434][ T4311] syz.1.225: attempt to access beyond end of device [ 220.487434][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.507956][ T4311] syz.1.225: attempt to access beyond end of device [ 220.507956][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 220.516126][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.524259][ T4311] syz.1.225: attempt to access beyond end of device [ 220.524259][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.546503][ T4311] syz.1.225: attempt to access beyond end of device [ 220.546503][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 220.562810][ T4311] syz.1.225: attempt to access beyond end of device [ 220.562810][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.572535][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.577730][ T4311] syz.1.225: attempt to access beyond end of device [ 220.577730][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 220.603751][ T4311] syz.1.225: attempt to access beyond end of device [ 220.603751][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.618417][ T4311] syz.1.225: attempt to access beyond end of device [ 220.618417][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 220.634822][ T4311] syz.1.225: attempt to access beyond end of device [ 220.634822][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 220.649458][ T4311] syz.1.225: attempt to access beyond end of device [ 220.649458][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 220.925401][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.937058][ T5148] binder: transaction release 62 bad handle 1, ret = -22 [ 221.003495][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.046423][ T4785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.113413][ T4785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.217395][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.288101][ T4785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.333775][ T4785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.373193][ T4785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.415126][ T4785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.083527][ T3780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.147437][ T3780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.239908][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.298475][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.783162][ T3613] device hsr_slave_0 left promiscuous mode [ 222.808465][ T3613] device hsr_slave_1 left promiscuous mode [ 222.834641][ T3613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.872134][ T3613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.905083][ T3613] device bridge_slave_1 left promiscuous mode [ 222.937223][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.979915][ T3613] device bridge_slave_0 left promiscuous mode [ 223.006979][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.446621][ T3613] team0 (unregistering): Port device team_slave_1 removed [ 224.552149][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.614613][ T3613] team0 (unregistering): Port device team_slave_0 removed [ 224.909670][ T3613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.981386][ T5172] Zero length message leads to an empty skb [ 225.496019][ T4311] bio_check_eod: 2477 callbacks suppressed [ 225.496040][ T4311] syz.1.225: attempt to access beyond end of device [ 225.496040][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.518192][ T4311] syz.1.225: attempt to access beyond end of device [ 225.518192][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.532786][ T4311] syz.1.225: attempt to access beyond end of device [ 225.532786][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.549352][ T4311] syz.1.225: attempt to access beyond end of device [ 225.549352][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.563940][ T4311] syz.1.225: attempt to access beyond end of device [ 225.563940][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.580176][ T4311] syz.1.225: attempt to access beyond end of device [ 225.580176][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.594747][ T4311] syz.1.225: attempt to access beyond end of device [ 225.594747][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.611007][ T4311] syz.1.225: attempt to access beyond end of device [ 225.611007][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.625614][ T4311] syz.1.225: attempt to access beyond end of device [ 225.625614][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 225.641852][ T4311] syz.1.225: attempt to access beyond end of device [ 225.641852][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.765903][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 225.861473][ T3613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.906479][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 225.943089][ T14] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 225.965065][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.002231][ T14] usb 4-1: config 0 descriptor?? [ 228.179660][ T3613] bond0 (unregistering): Released all slaves [ 228.684732][ T5193] binder: transaction release 70 bad handle 1, ret = -22 [ 228.736111][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 228.742339][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 228.762857][ T14] usb 4-1: USB disconnect, device number 10 [ 228.912789][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.921747][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.937241][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.958880][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 230.506054][ T4311] bio_check_eod: 2309 callbacks suppressed [ 230.506075][ T4311] syz.1.225: attempt to access beyond end of device [ 230.506075][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.526660][ T4311] syz.1.225: attempt to access beyond end of device [ 230.526660][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 230.543134][ T4311] syz.1.225: attempt to access beyond end of device [ 230.543134][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.558037][ T4311] syz.1.225: attempt to access beyond end of device [ 230.558037][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 230.575065][ T4311] syz.1.225: attempt to access beyond end of device [ 230.575065][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.589925][ T4311] syz.1.225: attempt to access beyond end of device [ 230.589925][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 230.606208][ T4311] syz.1.225: attempt to access beyond end of device [ 230.606208][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.624729][ T4311] syz.1.225: attempt to access beyond end of device [ 230.624729][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 230.649656][ T4311] syz.1.225: attempt to access beyond end of device [ 230.649656][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 230.666978][ T4311] syz.1.225: attempt to access beyond end of device [ 230.666978][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 232.116024][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 232.376035][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 232.496173][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 232.555586][ T7] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 232.625941][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.705607][ T7] usb 3-1: config 0 descriptor?? [ 232.804011][ T5227] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.422'. [ 233.002238][ T5218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'. [ 233.600684][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.717313][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.786809][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.868610][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.897136][ T7] hid (null): invalid report_size 53675 [ 233.903418][ T7] hid (null): unknown global tag 0xd [ 234.118572][ T5233] binder: transaction release 78 bad handle 1, ret = -22 [ 234.898388][ T7] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 234.906461][ T7] hid-generic 0003:0158:0100.0002: unexpected long global item [ 234.914887][ T7] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 235.069266][ T7] usb 3-1: USB disconnect, device number 8 [ 235.526016][ T4311] bio_check_eod: 2338 callbacks suppressed [ 235.526059][ T4311] syz.1.225: attempt to access beyond end of device [ 235.526059][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.554475][ T4311] syz.1.225: attempt to access beyond end of device [ 235.554475][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 235.578906][ T4311] syz.1.225: attempt to access beyond end of device [ 235.578906][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.595763][ T4311] syz.1.225: attempt to access beyond end of device [ 235.595763][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 235.620116][ T4311] syz.1.225: attempt to access beyond end of device [ 235.620116][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.636075][ T4311] syz.1.225: attempt to access beyond end of device [ 235.636075][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 235.660272][ T4311] syz.1.225: attempt to access beyond end of device [ 235.660272][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.677014][ T4311] syz.1.225: attempt to access beyond end of device [ 235.677014][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 235.701284][ T4311] syz.1.225: attempt to access beyond end of device [ 235.701284][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.718249][ T4311] syz.1.225: attempt to access beyond end of device [ 235.718249][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.969803][ T5254] nbd4: detected capacity change from 0 to 9007199254741008 [ 237.997918][ T3560] block nbd4: Receive control failed (result -107) [ 238.043239][ T5254] block nbd4: shutting down sockets [ 238.279753][ T5268] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.433'. [ 239.711455][ T152] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 239.986046][ T152] usb 2-1: Using ep0 maxpacket: 16 [ 240.136191][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 240.187495][ T152] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 240.248065][ T152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.319407][ T152] usb 2-1: config 0 descriptor?? [ 240.536391][ T4311] bio_check_eod: 2433 callbacks suppressed [ 240.536414][ T4311] syz.1.225: attempt to access beyond end of device [ 240.536414][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 240.558508][ T4311] syz.1.225: attempt to access beyond end of device [ 240.558508][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.570507][ T5280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'. [ 240.573260][ T4311] syz.1.225: attempt to access beyond end of device [ 240.573260][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 240.597591][ T4311] syz.1.225: attempt to access beyond end of device [ 240.597591][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.612330][ T4311] syz.1.225: attempt to access beyond end of device [ 240.612330][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 240.628687][ T4311] syz.1.225: attempt to access beyond end of device [ 240.628687][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.643391][ T4311] syz.1.225: attempt to access beyond end of device [ 240.643391][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 240.659447][ T4311] syz.1.225: attempt to access beyond end of device [ 240.659447][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 240.674054][ T4311] syz.1.225: attempt to access beyond end of device [ 240.674054][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 240.690314][ T4311] syz.1.225: attempt to access beyond end of device [ 240.690314][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 241.172070][ T5280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.243676][ T5280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.315924][ T5280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.386316][ T5280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.467543][ T152] hid (null): invalid report_size 53675 [ 241.487130][ T152] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 241.494691][ T152] hid-generic 0003:0158:0100.0003: unexpected long global item [ 241.640942][ T152] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 241.727308][ T152] usb 2-1: USB disconnect, device number 3 [ 242.250727][ T5291] binder: transaction release 86 bad handle 1, ret = -22 [ 244.173650][ T5311] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.447'. [ 245.548232][ T4311] bio_check_eod: 2281 callbacks suppressed [ 245.548251][ T4311] syz.1.225: attempt to access beyond end of device [ 245.548251][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.570863][ T4311] syz.1.225: attempt to access beyond end of device [ 245.570863][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 245.587334][ T4311] syz.1.225: attempt to access beyond end of device [ 245.587334][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.601949][ T4311] syz.1.225: attempt to access beyond end of device [ 245.601949][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 245.618305][ T4311] syz.1.225: attempt to access beyond end of device [ 245.618305][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.632953][ T4311] syz.1.225: attempt to access beyond end of device [ 245.632953][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 245.649171][ T4311] syz.1.225: attempt to access beyond end of device [ 245.649171][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.663788][ T4311] syz.1.225: attempt to access beyond end of device [ 245.663788][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 245.680132][ T4311] syz.1.225: attempt to access beyond end of device [ 245.680132][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 245.694751][ T4311] syz.1.225: attempt to access beyond end of device [ 245.694751][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 246.650386][ T5328] binder: transaction release 94 bad handle 1, ret = -22 [ 247.426051][ T3592] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 247.686023][ T3592] usb 5-1: Using ep0 maxpacket: 16 [ 248.173971][ T3592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 248.218924][ T3592] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 248.291747][ T3592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.376269][ T3592] usb 5-1: config 0 descriptor?? [ 248.623804][ T5324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.451'. [ 249.110776][ T5346] kvm: pic: non byte read [ 249.155139][ T5346] kvm: pic: level sensitive irq not supported [ 249.155264][ T5346] kvm: pic: non byte read [ 249.208380][ T5346] kvm: pic: level sensitive irq not supported [ 249.208455][ T5346] kvm: pic: non byte read [ 249.227996][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.269814][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.325915][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.398366][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.467220][ T3592] hid (null): invalid report_size 53675 [ 249.473632][ T3592] hid (null): unknown global tag 0xd [ 249.531853][ T3592] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 249.575876][ T3592] hid-generic 0003:0158:0100.0004: unexpected long global item [ 249.614757][ T3592] hid-generic: probe of 0003:0158:0100.0004 failed with error -22 [ 249.692926][ T3592] usb 5-1: USB disconnect, device number 7 [ 250.555978][ T4311] bio_check_eod: 2635 callbacks suppressed [ 250.555995][ T4311] syz.1.225: attempt to access beyond end of device [ 250.555995][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.579699][ T4311] syz.1.225: attempt to access beyond end of device [ 250.579699][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 250.594479][ T4311] syz.1.225: attempt to access beyond end of device [ 250.594479][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.610707][ T4311] syz.1.225: attempt to access beyond end of device [ 250.610707][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 250.625317][ T4311] syz.1.225: attempt to access beyond end of device [ 250.625317][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.641464][ T4311] syz.1.225: attempt to access beyond end of device [ 250.641464][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 250.656206][ T4311] syz.1.225: attempt to access beyond end of device [ 250.656206][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.672283][ T4311] syz.1.225: attempt to access beyond end of device [ 250.672283][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 250.688412][ T4311] syz.1.225: attempt to access beyond end of device [ 250.688412][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 250.704677][ T4311] syz.1.225: attempt to access beyond end of device [ 250.704677][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 250.739700][ T5363] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.461'. [ 252.864978][ T5373] binder: transaction release 102 bad handle 1, ret = -22 [ 253.331505][ T3560] Bluetooth: hci5: command 0x0406 tx timeout [ 254.271654][ T5394] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.473'. [ 254.416080][ T935] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 254.666057][ T935] usb 3-1: Using ep0 maxpacket: 16 [ 255.016191][ T935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 255.051337][ T935] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 255.151048][ T935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.225174][ T935] usb 3-1: config 0 descriptor?? [ 255.487766][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.494385][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.572474][ T4311] bio_check_eod: 2635 callbacks suppressed [ 255.572520][ T4311] syz.1.225: attempt to access beyond end of device [ 255.572520][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.603979][ T4311] syz.1.225: attempt to access beyond end of device [ 255.603979][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.629681][ T4311] syz.1.225: attempt to access beyond end of device [ 255.629681][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.647046][ T4311] syz.1.225: attempt to access beyond end of device [ 255.647046][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.672239][ T4311] syz.1.225: attempt to access beyond end of device [ 255.672239][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.689470][ T4311] syz.1.225: attempt to access beyond end of device [ 255.689470][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.716171][ T4311] syz.1.225: attempt to access beyond end of device [ 255.716171][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.733195][ T4311] syz.1.225: attempt to access beyond end of device [ 255.733195][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.758454][ T4311] syz.1.225: attempt to access beyond end of device [ 255.758454][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 255.775679][ T4311] syz.1.225: attempt to access beyond end of device [ 255.775679][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 256.359303][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.472'. [ 257.195354][ T5391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.276675][ T5391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.348736][ T5391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.402249][ T5391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.427645][ T935] hid (null): invalid report_size 53675 [ 258.433949][ T935] hid (null): unknown global tag 0xd [ 258.442880][ T935] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 258.451063][ T935] hid-generic 0003:0158:0100.0005: unexpected long global item [ 258.459488][ T935] hid-generic: probe of 0003:0158:0100.0005 failed with error -22 [ 258.872472][ T152] usb 3-1: USB disconnect, device number 9 [ 259.956264][ T5424] binder: transaction release 110 bad handle 1, ret = -22 [ 260.577481][ T4311] bio_check_eod: 2444 callbacks suppressed [ 260.577501][ T4311] syz.1.225: attempt to access beyond end of device [ 260.577501][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.598022][ T4311] syz.1.225: attempt to access beyond end of device [ 260.598022][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.614283][ T4311] syz.1.225: attempt to access beyond end of device [ 260.614283][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.628915][ T4311] syz.1.225: attempt to access beyond end of device [ 260.628915][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.645307][ T4311] syz.1.225: attempt to access beyond end of device [ 260.645307][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.659926][ T4311] syz.1.225: attempt to access beyond end of device [ 260.659926][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.676206][ T4311] syz.1.225: attempt to access beyond end of device [ 260.676206][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.690865][ T4311] syz.1.225: attempt to access beyond end of device [ 260.690865][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 260.707132][ T4311] syz.1.225: attempt to access beyond end of device [ 260.707132][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 260.716263][ T5438] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.485'. [ 260.721776][ T4311] syz.1.225: attempt to access beyond end of device [ 260.721776][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 264.876013][ T3592] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 265.203253][ T5470] binder: transaction release 118 bad handle 1, ret = -22 [ 265.445883][ T3592] usb 5-1: Using ep0 maxpacket: 16 [ 265.527739][ T3565] block nbd3: Receive control failed (result -107) [ 265.555867][ T5458] nbd3: detected capacity change from 0 to 9007199254741008 [ 265.565633][ T5458] block nbd3: shutting down sockets [ 265.586447][ T4311] bio_check_eod: 2253 callbacks suppressed [ 265.586467][ T4311] syz.1.225: attempt to access beyond end of device [ 265.586467][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.608366][ T4311] syz.1.225: attempt to access beyond end of device [ 265.608366][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.623013][ T4311] syz.1.225: attempt to access beyond end of device [ 265.623013][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.639323][ T4311] syz.1.225: attempt to access beyond end of device [ 265.639323][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.654016][ T4311] syz.1.225: attempt to access beyond end of device [ 265.654016][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.670192][ T4311] syz.1.225: attempt to access beyond end of device [ 265.670192][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.684846][ T4311] syz.1.225: attempt to access beyond end of device [ 265.684846][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.701303][ T4311] syz.1.225: attempt to access beyond end of device [ 265.701303][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 265.715960][ T4311] syz.1.225: attempt to access beyond end of device [ 265.715960][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 265.732243][ T4311] syz.1.225: attempt to access beyond end of device [ 265.732243][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 266.256324][ T3592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 266.570736][ T5484] netlink: 1328 bytes leftover after parsing attributes in process `syz.3.498'. [ 267.892772][ T3592] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 267.902020][ T3592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.911870][ T3592] usb 5-1: config 0 descriptor?? [ 268.054779][ T3592] usb 5-1: can't set config #0, error -71 [ 268.966713][ T3592] usb 5-1: USB disconnect, device number 8 [ 270.596291][ T4311] bio_check_eod: 2347 callbacks suppressed [ 270.596314][ T4311] syz.1.225: attempt to access beyond end of device [ 270.596314][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.616857][ T4311] syz.1.225: attempt to access beyond end of device [ 270.616857][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.633080][ T4311] syz.1.225: attempt to access beyond end of device [ 270.633080][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.647678][ T4311] syz.1.225: attempt to access beyond end of device [ 270.647678][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.663889][ T4311] syz.1.225: attempt to access beyond end of device [ 270.663889][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.678544][ T4311] syz.1.225: attempt to access beyond end of device [ 270.678544][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.694807][ T4311] syz.1.225: attempt to access beyond end of device [ 270.694807][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.709398][ T4311] syz.1.225: attempt to access beyond end of device [ 270.709398][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 270.725648][ T4311] syz.1.225: attempt to access beyond end of device [ 270.725648][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 270.740288][ T4311] syz.1.225: attempt to access beyond end of device [ 270.740288][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 272.118668][ T5513] binder: transaction release 126 bad handle 1, ret = -22 [ 272.189930][ T5518] netlink: 1328 bytes leftover after parsing attributes in process `syz.2.509'. [ 272.586110][ T3292] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 272.622912][ T5524] kvm: pic: non byte read [ 272.643296][ T5524] kvm: pic: level sensitive irq not supported [ 272.643372][ T5524] kvm: pic: non byte read [ 272.705445][ T5524] kvm: pic: level sensitive irq not supported [ 272.705522][ T5524] kvm: pic: non byte read [ 272.845949][ T3292] usb 5-1: Using ep0 maxpacket: 16 [ 272.976441][ T3292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 273.026536][ T3292] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 273.300346][ T3292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.318938][ T3292] usb 5-1: config 0 descriptor?? [ 273.771670][ T5522] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 274.535181][ T26] audit: type=1326 audit(1720244227.463:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5519 comm="syz.4.510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfd7d75bd9 code=0x0 [ 275.091496][ T5543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.186941][ T5543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.249424][ T5543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.608181][ T4311] bio_check_eod: 2396 callbacks suppressed [ 275.608202][ T4311] syz.1.225: attempt to access beyond end of device [ 275.608202][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.628733][ T4311] syz.1.225: attempt to access beyond end of device [ 275.628733][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.645336][ T4311] syz.1.225: attempt to access beyond end of device [ 275.645336][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.659982][ T4311] syz.1.225: attempt to access beyond end of device [ 275.659982][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.676472][ T4311] syz.1.225: attempt to access beyond end of device [ 275.676472][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.691112][ T4311] syz.1.225: attempt to access beyond end of device [ 275.691112][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.707412][ T4311] syz.1.225: attempt to access beyond end of device [ 275.707412][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.722173][ T4311] syz.1.225: attempt to access beyond end of device [ 275.722173][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.738345][ T4311] syz.1.225: attempt to access beyond end of device [ 275.738345][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 275.753027][ T4311] syz.1.225: attempt to access beyond end of device [ 275.753027][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 275.773933][ T5543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.857102][ T3292] hid (null): invalid report_size 53675 [ 275.866508][ T3292] hid (null): unknown global tag 0xd [ 275.929068][ T3292] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 275.955213][ T3292] hid-generic 0003:0158:0100.0006: unexpected long global item [ 276.016518][ T3292] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 277.101345][ T5568] binder: transaction release 134 bad handle 1, ret = -22 [ 277.668981][ T3592] usb 5-1: USB disconnect, device number 9 [ 278.506165][ T28] INFO: task syz.1.225:4330 blocked for more than 143 seconds. [ 278.528050][ T28] Not tainted 6.1.97-syzkaller #0 [ 278.575144][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.625686][ T28] task:syz.1.225 state:D stack:25856 pid:4330 ppid:3557 flags:0x00004004 [ 278.678477][ T28] Call Trace: [ 278.905863][ T28] [ 278.919101][ T28] __schedule+0x142d/0x4550 [ 278.923741][ T28] ? __sched_text_start+0x8/0x8 [ 279.583307][ T28] ? print_irqtrace_events+0x210/0x210 [ 279.622898][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 279.657225][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 279.696964][ T28] schedule+0xbf/0x180 [ 279.723870][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 279.763252][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 279.802435][ T28] ? down_write_killable_nested+0x90/0x90 [ 279.842950][ T28] ? read_lock_is_recursive+0x10/0x10 [ 279.878732][ T28] ? ima_lsm_policy_change+0x620/0x620 [ 279.900865][ T28] ? rwsem_write_trylock+0x166/0x210 [ 279.906377][ T28] ? clear_nonspinnable+0x60/0x60 [ 279.911605][ T28] process_measurement+0x446/0x21b0 [ 279.916910][ T28] ? mark_lock+0x9a/0x340 [ 279.921298][ T28] ? ima_file_mmap+0x1c0/0x1c0 [ 280.006539][ T28] ? dquot_initialize+0x20/0x20 [ 280.043710][ T28] ? aa_get_current_label+0x111/0x1d0 [ 280.092763][ T28] ? apparmor_current_getsecid_subj+0xac/0x110 [ 280.143058][ T28] ima_file_check+0xed/0x170 [ 280.193913][ T28] ? do_dentry_open+0xce4/0x10f0 [ 280.226015][ T28] ? ima_bprm_check+0x2b0/0x2b0 [ 280.259676][ T28] path_openat+0x2687/0x2e60 [ 280.290563][ T28] ? mark_lock+0x9a/0x340 [ 280.347172][ T28] ? do_filp_open+0x480/0x480 [ 280.375023][ T28] do_filp_open+0x230/0x480 [ 280.401360][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 280.443721][ T28] ? _raw_spin_unlock+0x24/0x40 [ 280.466669][ T28] ? alloc_fd+0x59c/0x640 [ 280.485725][ T28] do_sys_openat2+0x13b/0x500 [ 280.509825][ T28] ? do_sys_open+0x220/0x220 [ 280.529095][ T28] __x64_sys_openat+0x243/0x290 [ 280.550813][ T28] ? __ia32_sys_open+0x270/0x270 [ 280.570585][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 280.603085][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 280.618363][ T4311] bio_check_eod: 2518 callbacks suppressed [ 280.618382][ T4311] syz.1.225: attempt to access beyond end of device [ 280.618382][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.625879][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 280.638906][ T4311] syz.1.225: attempt to access beyond end of device [ 280.638906][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.660597][ T4311] syz.1.225: attempt to access beyond end of device [ 280.660597][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.675485][ T4311] syz.1.225: attempt to access beyond end of device [ 280.675485][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.688747][ T28] do_syscall_64+0x3b/0xb0 [ 280.691921][ T4311] syz.1.225: attempt to access beyond end of device [ 280.691921][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.708034][ T4311] syz.1.225: attempt to access beyond end of device [ 280.708034][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.711211][ T28] ? clear_bhb_loop+0x45/0xa0 [ 280.724256][ T4311] syz.1.225: attempt to access beyond end of device [ 280.724256][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.741099][ T4311] syz.1.225: attempt to access beyond end of device [ 280.741099][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.757370][ T4311] syz.1.225: attempt to access beyond end of device [ 280.757370][ T4311] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 280.771995][ T4311] syz.1.225: attempt to access beyond end of device [ 280.771995][ T4311] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 280.801699][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.824749][ T28] RIP: 0033:0x7f2c8dd75bd9 [ 280.843938][ T28] RSP: 002b:00007f2c8eb7c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.878480][ T28] RAX: ffffffffffffffda RBX: 00007f2c8df04038 RCX: 00007f2c8dd75bd9 [ 280.887688][ T28] RDX: 0000000000183341 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 280.895710][ T28] RBP: 00007f2c8dde4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 280.903794][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.913329][ T28] R13: 000000000000006e R14: 00007f2c8df04038 R15: 00007fffb3245608 [ 280.921424][ T28] [ 280.924505][ T28] INFO: task syz.1.225:4331 blocked for more than 145 seconds. [ 281.327230][ T28] Not tainted 6.1.97-syzkaller #0 [ 281.332932][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.349564][ T28] task:syz.1.225 state:D stack:26040 pid:4331 ppid:3557 flags:0x00004004 [ 281.362706][ T28] Call Trace: [ 281.369858][ T28] [ 281.372915][ T28] __schedule+0x142d/0x4550 [ 281.381456][ T28] ? __sched_text_start+0x8/0x8 [ 281.390349][ T28] ? print_irqtrace_events+0x210/0x210 [ 281.400341][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 281.405622][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 281.415709][ T28] schedule+0xbf/0x180 [ 281.423747][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 281.435411][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 281.445257][ T28] ? down_write_killable_nested+0x90/0x90 [ 281.454935][ T28] ? read_lock_is_recursive+0x10/0x10 [ 281.464135][ T28] ? rwsem_write_trylock+0x166/0x210 [ 281.473431][ T28] ? clear_nonspinnable+0x60/0x60 [ 281.482310][ T28] f2fs_issue_checkpoint+0x2d2/0x4d0 [ 281.491464][ T28] ? f2fs_destroy_checkpoint_caches+0x20/0x20 [ 281.502314][ T28] ? d_instantiate_new+0x7b/0x110 [ 281.511476][ T28] ? f2fs_create+0x7a7/0xa10 [ 281.519916][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 281.525059][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 281.534074][ T28] ? f2fs_sync_fs+0x201/0x410 [ 281.544723][ T28] f2fs_create+0x862/0xa10 [ 281.553081][ T28] ? f2fs_lookup+0xae0/0xae0 [ 281.561479][ T28] path_openat+0x12f1/0x2e60 [ 281.569932][ T28] ? do_filp_open+0x480/0x480 [ 281.574750][ T28] do_filp_open+0x230/0x480 [ 281.583108][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 281.591550][ T28] ? _raw_spin_unlock+0x24/0x40 [ 281.600309][ T28] ? alloc_fd+0x59c/0x640 [ 281.605309][ T28] do_sys_openat2+0x13b/0x500 [ 281.613936][ T28] ? do_sys_open+0x220/0x220 [ 281.622568][ T28] __x64_sys_openat+0x243/0x290 [ 281.633536][ T28] ? __ia32_sys_open+0x270/0x270 [ 281.642344][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 281.654414][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 281.664044][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 281.674112][ T28] do_syscall_64+0x3b/0xb0 [ 281.682765][ T28] ? clear_bhb_loop+0x45/0xa0 [ 281.691318][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.701057][ T28] RIP: 0033:0x7f2c8dd75bd9 [ 281.706456][ T28] RSP: 002b:00007f2c8eb5b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 281.715096][ T28] RAX: ffffffffffffffda RBX: 00007f2c8df04110 RCX: 00007f2c8dd75bd9 [ 281.739430][ T28] RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 281.756569][ T28] RBP: 00007f2c8dde4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 281.765071][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.781390][ T28] R13: 000000000000006e R14: 00007f2c8df04110 R15: 00007fffb3245608 [ 281.792126][ T28] [ 281.795260][ T28] [ 281.795260][ T28] Showing all locks held in the system: [ 281.809986][ T28] 2 locks held by kworker/u4:0/9: [ 281.815125][ T28] 1 lock held by rcu_tasks_kthre/12: [ 281.824431][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 281.839030][ T28] 1 lock held by rcu_tasks_trace/13: [ 281.844428][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 281.862731][ T28] 1 lock held by khungtaskd/28: [ 281.867977][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 281.887348][ T28] 4 locks held by kworker/u4:4/56: [ 281.892568][ T28] #0: ffff88814167c938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 281.904745][ T28] #1: ffffc90001577d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 281.919035][ T28] #2: ffff8880218200e0 (&type->s_umount_key#57){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 281.930184][ T28] #3: ffff888021655140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 281.945892][ T28] 2 locks held by getty/3307: [ 281.950687][ T28] #0: ffff88814b9b1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 281.966762][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 281.983169][ T28] 4 locks held by syz.1.225/4311: [ 281.990302][ T28] 2 locks held by syz.1.225/4330: [ 282.003910][ T28] #0: ffff888021820460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 282.015502][ T28] #1: ffff88805ce1c850 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 282.036008][ T28] 3 locks held by syz.1.225/4331: [ 282.041769][ T28] #0: ffff888021820460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 282.057611][ T28] #1: ffff88805ce1bf70 (&type->i_mutex_dir_key#10){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 282.073185][ T28] #2: ffff888021655140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x2d2/0x4d0 [ 282.086041][ T28] [ 282.088467][ T28] ============================================= [ 282.088467][ T28] [ 282.110926][ T28] NMI backtrace for cpu 0 [ 282.115313][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 282.123196][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 282.133285][ T28] Call Trace: [ 282.136604][ T28] [ 282.139556][ T28] dump_stack_lvl+0x1e3/0x2cb [ 282.144270][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 282.149765][ T28] ? panic+0x764/0x764 [ 282.154104][ T28] ? vprintk_emit+0x622/0x740 [ 282.158841][ T28] ? printk_sprint+0x490/0x490 [ 282.163634][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 282.168789][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 282.173766][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 282.179957][ T28] ? _printk+0xd1/0x111 [ 282.184133][ T28] ? panic+0x764/0x764 [ 282.188222][ T28] ? __wake_up_klogd+0xcc/0x100 [ 282.193104][ T28] ? panic+0x764/0x764 [ 282.197205][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 282.203314][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 282.209418][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 282.215447][ T28] watchdog+0xf88/0xfd0 [ 282.219638][ T28] ? watchdog+0x1f8/0xfd0 [ 282.224010][ T28] kthread+0x28d/0x320 [ 282.228110][ T28] ? hungtask_pm_notify+0x50/0x50 [ 282.233241][ T28] ? kthread_blkcg+0xd0/0xd0 [ 282.238116][ T28] ret_from_fork+0x1f/0x30 [ 282.242572][ T28] [ 282.246441][ T28] Sending NMI from CPU 0 to CPUs 1: [ 282.251683][ C1] NMI backtrace for cpu 1 [ 282.251694][ C1] CPU: 1 PID: 4311 Comm: syz.1.225 Not tainted 6.1.97-syzkaller #0 [ 282.251713][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 282.251723][ C1] RIP: 0010:lock_is_held_type+0xb2/0x180 [ 282.251748][ C1] Code: 89 ed 48 81 c5 e0 0a 00 00 31 db 48 83 fb 31 73 24 48 89 ef 4c 89 fe e8 1c 02 00 00 85 c0 75 2a 48 ff c3 49 63 85 d8 0a 00 00 <48> 83 c5 28 48 39 c3 7c d8 eb 11 48 c7 c7 20 94 ff 8c 48 89 de e8 [ 282.251763][ C1] RSP: 0018:ffffc90013096858 EFLAGS: 00000002 [ 282.251787][ C1] RAX: 0000000000000004 RBX: 0000000000000002 RCX: ffff888024153b80 [ 282.251800][ C1] RDX: 0000000000000000 RSI: ffffffff8d12ac80 RDI: ffff888024154688 [ 282.251812][ C1] RBP: ffff888024154688 R08: ffffffff83ca773c R09: ffffc90013097010 [ 282.251826][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246 [ 282.251838][ C1] R13: ffff888024153b80 R14: 00000000ffffffff R15: ffffffff8d12ac80 [ 282.251851][ C1] FS: 00007f2c8eb9d6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 282.251867][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.251879][ C1] CR2: 000000110c44f4bd CR3: 000000005acd5000 CR4: 00000000003506e0 [ 282.251895][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 282.251905][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 282.251916][ C1] Call Trace: [ 282.251922][ C1] [ 282.251927][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 282.251954][ C1] ? read_lock_is_recursive+0x10/0x10 [ 282.251982][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 282.252018][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 282.252045][ C1] ? nmi_handle+0x12e/0x440 [ 282.252072][ C1] ? nmi_handle+0x25/0x440 [ 282.252098][ C1] ? lock_is_held_type+0xb2/0x180 [ 282.252117][ C1] ? default_do_nmi+0x62/0x150 [ 282.252135][ C1] ? exc_nmi+0xa8/0x100 [ 282.252151][ C1] ? end_repeat_nmi+0x16/0x31 [ 282.252179][ C1] ? do_garbage_collect+0x218c/0x81f0 [ 282.252208][ C1] ? lock_is_held_type+0xb2/0x180 [ 282.252228][ C1] ? lock_is_held_type+0xb2/0x180 [ 282.252248][ C1] ? lock_is_held_type+0xb2/0x180 [ 282.252268][ C1] [ 282.252272][ C1] [ 282.252280][ C1] __might_resched+0xf0/0x780 [ 282.252297][ C1] ? read_lock_is_recursive+0x10/0x10 [ 282.252323][ C1] ? xa_load+0x14f/0x480 [ 282.252346][ C1] ? __might_sleep+0xb0/0xb0 [ 282.252369][ C1] down_read+0x8a/0xa30 [ 282.252389][ C1] ? do_garbage_collect+0x22d7/0x81f0 [ 282.252415][ C1] ? xas_find_conflict+0x890/0x890 [ 282.252439][ C1] ? __down_common+0x8b0/0x8b0 [ 282.252458][ C1] ? __up_read+0x2b9/0x690 [ 282.252480][ C1] ? up_read+0x20/0x20 [ 282.252500][ C1] ? PageHeadHuge+0x8e/0x1c0 [ 282.252523][ C1] do_garbage_collect+0x21ed/0x81f0 [ 282.252579][ C1] ? f2fs_gc+0x32a0/0x32a0 [ 282.252603][ C1] ? get_victim_by_default+0x6893/0x6ff0 [ 282.252626][ C1] ? mark_lock+0x9a/0x340 [ 282.252658][ C1] ? f2fs_gc+0xef4/0x32a0 [ 282.252684][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 282.252717][ C1] ? up_write+0x19d/0x580 [ 282.252737][ C1] ? get_ckpt_valid_blocks+0x260/0x260 [ 282.252755][ C1] ? __up_read+0x690/0x690 [ 282.252786][ C1] f2fs_gc+0x1169/0x32a0 [ 282.252826][ C1] ? f2fs_start_bidx_of_node+0x370/0x370 [ 282.252862][ C1] ? rwsem_write_trylock+0x166/0x210 [ 282.252893][ C1] f2fs_balance_fs+0x506/0x6c0 [ 282.252918][ C1] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 282.252943][ C1] ? __up_read+0x2b9/0x690 [ 282.252966][ C1] ? folio_unlock+0x122/0x2f0 [ 282.252995][ C1] f2fs_map_blocks+0x2871/0x3ab0 [ 282.253029][ C1] ? f2fs_do_map_lock+0x70/0x70 [ 282.253056][ C1] expand_inode_data+0x56d/0xaf0 [ 282.253081][ C1] ? f2fs_insert_range+0x3c0/0x3c0 [ 282.253097][ C1] ? file_modified_flags+0x3e1/0x480 [ 282.253128][ C1] ? rcu_read_lock_any_held+0xb3/0x160 [ 282.253153][ C1] f2fs_fallocate+0x44a/0x9f0 [ 282.253183][ C1] vfs_fallocate+0x547/0x6b0 [ 282.253209][ C1] do_vfs_ioctl+0x222c/0x2a90 [ 282.253227][ C1] ? __x64_compat_sys_ioctl+0x80/0x80 [ 282.253244][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 282.253268][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 282.253289][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 282.253313][ C1] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 282.253332][ C1] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 282.253351][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 282.253376][ C1] ? __fget_files+0x28/0x4a0 [ 282.253400][ C1] ? __fget_files+0x28/0x4a0 [ 282.253416][ C1] ? __fget_files+0x435/0x4a0 [ 282.253433][ C1] ? __fget_files+0x28/0x4a0 [ 282.253452][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 282.253471][ C1] ? security_file_ioctl+0x7d/0xa0 [ 282.253490][ C1] __se_sys_ioctl+0x81/0x160 [ 282.253518][ C1] do_syscall_64+0x3b/0xb0 [ 282.253543][ C1] ? clear_bhb_loop+0x45/0xa0 [ 282.253569][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.253593][ C1] RIP: 0033:0x7f2c8dd75bd9 [ 282.253608][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.253638][ C1] RSP: 002b:00007f2c8eb9d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.253656][ C1] RAX: ffffffffffffffda RBX: 00007f2c8df03f60 RCX: 00007f2c8dd75bd9 [ 282.253670][ C1] RDX: 00000000200000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 282.253681][ C1] RBP: 00007f2c8dde4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 282.253693][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.253704][ C1] R13: 000000000000000b R14: 00007f2c8df03f60 R15: 00007fffb3245608 [ 282.253722][ C1] [ 282.848985][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 282.856003][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 282.863875][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 282.873966][ T28] Call Trace: [ 282.877266][ T28] [ 282.880216][ T28] dump_stack_lvl+0x1e3/0x2cb [ 282.884915][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 282.890387][ T28] ? panic+0x764/0x764 [ 282.894462][ T28] ? llist_add_batch+0x160/0x1d0 [ 282.899415][ T28] ? vscnprintf+0x59/0x80 [ 282.903755][ T28] panic+0x318/0x764 [ 282.907657][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 282.913827][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 282.919211][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 282.925549][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 282.931716][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 282.937882][ T28] watchdog+0xfc7/0xfd0 [ 282.942051][ T28] ? watchdog+0x1f8/0xfd0 [ 282.946389][ T28] kthread+0x28d/0x320 [ 282.950461][ T28] ? hungtask_pm_notify+0x50/0x50 [ 282.955491][ T28] ? kthread_blkcg+0xd0/0xd0 [ 282.960109][ T28] ret_from_fork+0x1f/0x30 [ 282.964558][ T28] [ 282.967962][ T28] Kernel Offset: disabled [ 282.972300][ T28] Rebooting in 86400 seconds..