last executing test programs: 2m8.768957145s ago: executing program 3 (id=115): r0 = socket$igmp(0x2, 0x3, 0x2) timerfd_create(0x8, 0x0) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m3.964884536s ago: executing program 3 (id=120): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) close_range(r0, 0xffffffffffffffff, 0x0) 2m0.501480648s ago: executing program 3 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x205}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m58.824173415s ago: executing program 3 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_sock_diag(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000002780)={0x0}) close(r4) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x8, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES8=0x0, @ANYBLOB="0000000000000000000000000000000018000100000800825f302b8b0a399e90d921a814d237ee1b"], 0x64}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x2}, 0x8) socket$rds(0x15, 0x5, 0x0) syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000005140)='./file0\x00', 0x1000884, &(0x7f0000000100)={[{@nospace_cache}, {@nodatacow}, {@nossd_spread}, {@noautodefrag}, {@space_cache}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x5100, &(0x7f000000f3c0)="$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") 1m51.609751572s ago: executing program 3 (id=140): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 1m50.521521101s ago: executing program 3 (id=141): syz_usb_connect$uac1(0x0, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x9, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7, 0x24, 0x7, 0x0, 0x6, 0x10}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x9, "4444bd7092a5"}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x0, 0x0, [], 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x0, 0x1, 0x8009, 0x8, 0xbc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x2, 0xb, 0x81, {0x7, 0x25, 0x1, 0x83, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x2, 0x0, '?R'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0xc0, 0x2, {0x7, 0x25, 0x1, 0x0, 0xd2}}}}}}}]}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x4000, &(0x7f00000000c0)={[{@noquota}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@norecovery}, {@abort}, {@minixdf}]}, 0x5, 0x4a8, &(0x7f0000000a40)="$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") r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e370c0c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240), 0xc) 1m5.916828033s ago: executing program 4 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$kcm(0x10, 0x2, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="445d6cc36418ebb0b5024a2f2d2274b34faf477954212f1c8890e0548b2b687765ea8ea8dbcbae00fd41a8e29b43bac657d36d7f54a969c6c789aa23f92520a55cb8734a03d094d6da854d02804951c5552566c55484a7e72a2ce53bd84b08a79e46b091a52e9ff8575bc876a4a187d1a0a0400a8c0e99feeb66d169decc4765f5f5508b10946d6d68c358480c1d4f5909b04f7df03ead33aa694b973125af88051c355f", 0xa4}, {&(0x7f0000000200)="977dbd00466745723619589103f4ce5ceb1609401533405fd523ac7896fd37e98516c9a7701d565dca9569ab10dcefb7317cb0eacd5f717e6887f0ae22961c7ca04a333f49c8d924db922ced430d192fb791cd6f3a6fece9f660b6faf58228a95865392b634bcce800aa6f986dac54020649138f84f6fa1be7ee5bacf921209342055d13c8381e40048245ea3ceff1ca", 0x90}, {&(0x7f00000002c0)="58b77ba1683b5216988395c6142e026b61d828308e41a111ce3e81da2dc1b2de0123e193bcfac6199494d40ba133290dafadb92ab2466aeb9959739c7709917803acf154dd29b9078b10404759e76bd6689bf90515b8d8b7f71e04078b93e0cbf6df798ae0a9d0140dde4055d361e534fc5f20d003ea2549582abae2c3fe498da0186203c70c7a8dcc5b8eac785ed3f13c10474972a8c1b9e4d383d730ebe14e8d92e2b0dea4a1718d20c5729a188d0a4306fc540a72aa97a6d2acfb6430c24b17a06c138527796567ff26fa8b65b81637", 0xd1}, {&(0x7f0000000140)="df002e36d00f31cf4d1e31e183912710bde31ef839c29a72a81207b3a98b0fdd1505cfbffbedcd53c28c16530540f0d935418468c8184a4cd47dce37c908d09e4c7133a5f4cf7df53f471abc9950901fd4d39e0dd433576c8ae2c3fc0e", 0x5d}, {&(0x7f00000003c0)="470baa0e93e8b5032729c30a613bd821a11730f8937524229d744a3a5a9fefac1a35fd2787dfb9a90e207116f961c11aab71704b01fbef99de66182ece7728ca5036ce37da6263e83cfe8eca70d4ab2878a230d6dafe", 0x56}, {&(0x7f0000000440)}, {&(0x7f0000000540)="a5ced8118cd3ee22924f5c4c823f8a82d61c5a90441a51af0be4c517", 0x1c}, {&(0x7f0000000580)="ae6d041b660b3d7829fe5d6ee28dca2f4e9a138e6f37cb", 0x17}], 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/386], 0x180}}], 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) ioperm(0x0, 0x7fff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m1.844446725s ago: executing program 4 (id=244): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5420, 0x1000000000000) 1m1.086693916s ago: executing program 4 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x205}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.234345325s ago: executing program 4 (id=249): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b2, &(0x7f0000000140)={&(0x7f0000001280), 0x1, 0x400}) 1m0.033050642s ago: executing program 4 (id=252): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64=0x0, @ANYRES32, @ANYBLOB="c1f2a76544c59866ac8c487b2dda29292062a54819bb2a570867a105a334323aae0fa2cbe24fe923d0833aa072cabbdaca17799f8e3361e58e58405b1eb4589aa06346b5ca447050557037ada791d9bdcee30f680870a9945af38ff5831e42da6a50310dda88975e5e1488c76da81842973f561be9cb897f2367509f6683fd4f8e6c4ff1bf629dee8d260810524ed5292b22f5061ca91c3fd4965d3984b423723daed71f6b54aebc36b480ba039f3925b46c865b765449e3803abb32b6a881dcee196ca1727afb3392", @ANYRESHEX, @ANYRESOCT, @ANYRES8], 0x1, 0x1a3, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x0, 0x0) 59.298677892s ago: executing program 4 (id=254): r0 = socket$inet6(0xa, 0x80003, 0x6b) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}}, 0x0) 55.041479229s ago: executing program 0 (id=261): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x1c1042, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4010040bffe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x800}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe77) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="b60a0000000000006111a40000000000180000000000000000000000000000009500000000000000935d124e27b24aacec6f1f2ffc778ddbfa62bf9ea9b8877a830228380dd546d0f96d94538847e3754a9768267856cfa1a056ae170000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58) 53.493095414s ago: executing program 0 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="0f20e035000020000f22e066b842000f00d8c4815c5d2f66baf80cb8fcf69785ef66bafc0cecc4e2559d12460f01f80fc79932000000c4e1f9292ef243a54e0fc7ace405000000", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 50.519233477s ago: executing program 0 (id=268): ioperm(0x0, 0x3, 0x0) eventfd2(0x0, 0xc0801) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r1, 0x0, 0x4) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x10005) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, 0x80) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000002c0)='-^\x00') setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) 45.384817085s ago: executing program 0 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000340)=0x2, 0x4) 43.463931191s ago: executing program 0 (id=276): r0 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r0, &(0x7f0000003480)=[{&(0x7f0000001480)="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", 0x1000}], 0x1) 43.008725758s ago: executing program 0 (id=278): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000500)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6}, @noop, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) sigaltstack(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x22, 0x2, 0x4) getpeername$inet(r5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x25, 0x0, "67d401136a26f0e201537ab118c4aab19a0ea93185087ed1128770039bdeda45de723fb17a76a2b9e404fff84d36c7e40044956b12258f3c61799f79b1c06b4a0433dae1ad3b8ea0d9fc8cd629ba56e3"}, 0xd8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12017002000000202312073f4000010203f6ac541376abd188c0200904000601030105068921018081012224060905810340008306070905020310007f00f3"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 11.05459958s ago: executing program 1 (id=326): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001040)={{0x2, 0x0, 0x7f, 0x0, 0x0, 0xffff}, 0x375, [0x4, 0x0, 0x1ff, 0x0, 0x2, 0x952d, 0x4, 0x8000, 0xffffffff, 0x3565, 0x70ec, 0x5, 0x0, 0xffffffc0, 0x46, 0x6, 0xfffffbff, 0x1, 0xfa, 0xd7, 0x0, 0x0, 0x6, 0x40, 0xa581, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x2, 0xc0, 0x0, 0x4, 0x401, 0xeb, 0x0, 0x3, 0x7, 0x6, 0x8, 0xbe7b, 0x2, 0x0, 0x7d5d, 0x3c8, 0x7, 0x3, 0x0, 0x9, 0x7, 0x3, 0xe, 0x5, 0x2, 0x9, 0x7a, 0x0, 0x6, 0x4, 0x1, 0xfffffffe, 0x0, 0x3, 0x3, 0x0, 0x4, 0x1, 0x80000000, 0x6, 0x5, 0x40, 0x80000001, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x400, 0x8, 0xfe7, 0x7fff, 0x400, 0xff, 0x6, 0x0, 0x3, 0x65, 0xbe, 0xff, 0x1, 0x9c40000, 0x8, 0x0, 0x0, 0x1, 0x101, 0x10001, 0x1c, 0x0, 0x200, 0x2, 0xa, 0x0, 0x900b, 0xff, 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f, 0x9, 0x2, 0x1, 0xfff, 0x8, 0xda, 0x0, 0x7fffffff, 0x0, 0x576, 0x3, 0x3, 0x0, 0x4, 0x3, 0x7, 0xfffffff8, 0x0, 0x7, 0x3, 0x4, 0x6e6a, 0x3c3, 0x0, 0x3db8, 0x6, 0x8, 0x9000000, 0x9, 0x9, 0xffff, 0x9e, 0x8, 0x8a33, 0x5aee, 0x9, 0x0, 0x1, 0x80000001, 0xfff, 0x6, 0xfffffffa, 0x3, 0x8, 0xfffffeff, 0x4, 0x4, 0x8, 0x1, 0x8, 0x10, 0x200, 0x4, 0x0, 0x0, 0x10, 0x8001, 0x1ffe, 0x2, 0xb4, 0x0, 0x1, 0x4, 0x7c89, 0x1, 0x8, 0x4, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ac, 0x5, 0x7, 0xa, 0x40000, 0x3, 0x8, 0x4, 0xfe30, 0x1, 0x8ec9, 0xed, 0x6, 0x0, 0xfffffff3, 0x7, 0x8, 0x2, 0x80000000, 0x0, 0x285, 0x800, 0x9, 0x8, 0x0, 0x0, 0x10000, 0x80000001, 0xffff2743, 0x700000, 0x0, 0x2, 0x80000001, 0x0, 0x8, 0xc13c, 0x7, 0x0, 0x7, 0x5, 0x8, 0x6, 0x1, 0x7fff, 0x6, 0x2, 0x9, 0xffff, 0x6, 0x7, 0x7e94, 0x5, 0x9, 0xf, 0x6, 0x5, 0x4, 0x3, 0xfffffff8, 0x10001, 0x8, 0x6, 0x101, 0x3, 0x2, 0x1, 0x10001, 0xe1c, 0x1, 0x0, 0x0, 0x9, 0x0, 0x39d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xfffffffb, 0x9, 0x2, 0x0, 0x0, 0x0, 0x23, 0x0, 0x3, 0x0, 0x3ff, 0x0, 0xcf5, 0x6, 0x0, 0x7, 0x188, 0x1, 0x0, 0x0, 0x0, 0xa21264e3, 0x401, 0x1e0, 0x1, 0xed, 0x5, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff843, 0x22d2, 0x0, 0x3, 0x0, 0x8, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6f9a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x7, 0x76, 0x1, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x0, 0x0, 0x295, 0x6, 0x10001, 0x0, 0x48, 0x2, 0x81, 0xfffffff9, 0x0, 0x7, 0xd4ed, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1a6, 0xb, 0x479d, 0x0, 0x3, 0x2, 0x2, 0x2, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x6, 0xc, 0x0, 0x7, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xa9, 0x0, 0x9, 0x1, 0x0, 0x8001, 0x516, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x9, 0x6, 0xff, 0x4, 0x1, 0x0, 0xb879, 0x8c1, 0x7, 0x9a, 0x2, 0x0, 0x5, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0x7, 0x9, 0x2, 0xf5c, 0x7, 0x0, 0x8, 0x6, 0xfffffff7, 0x7c29, 0x0, 0x7ff, 0x200, 0x24d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0xa0, 0xf6cc, 0x40, 0x9, 0x0, 0xd3c9, 0xa, 0x3, 0x7, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe, 0x0, 0x1, 0x0, 0x0, 0x890, 0x5, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x6, 0x0, 0x50c, 0x6, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x8, 0xa57, 0x10, 0x0, 0x2, 0x0, 0x1, 0x7fffffff, 0x2, 0xfffffff8, 0x8, 0x0, 0x7, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x0, 0xb, 0x1, 0x1, 0xc, 0x9, 0x5, 0x9, 0x401, 0x0, 0x5, 0x7, 0x2c2e, 0x400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x69, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x5, 0x0, 0x8, 0x800, 0x0, 0x0, 0x0, 0xf51, 0x3, 0xffffffff, 0x1, 0x5, 0x400, 0x3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0x0, 0xfffffff7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x1ff, 0x7, 0x9, 0x8, 0x9, 0x6, 0x67e, 0x1000, 0x0, 0x4ee8, 0xb, 0x80, 0x4, 0x0, 0xce1, 0x2, 0x1, 0x1, 0x6, 0x6, 0x8, 0x0, 0x66d4823c, 0x8, 0xb, 0x5, 0x3, 0x9, 0x0, 0x0, 0x2, 0x0, 0xd, 0x5, 0x0, 0xff, 0x40, 0x9, 0x8, 0x4, 0x9, 0x0, 0x400, 0x8, 0x0, 0x0, 0x80000001, 0x633f, 0xff, 0x9b6, 0x9, 0x3, 0x9, 0x0, 0x7ff, 0x8, 0x7, 0xa2d, 0x7, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0xb, 0x61aa, 0xd, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7e21, 0x0, 0x2, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x30b, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x3ff, 0x0, 0x0, 0x6, 0x4, 0x1, 0x401, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x8000, 0x7, 0x0, 0x7fffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x3dd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x60d52fdd, 0x100, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7322, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x5b4, 0x0, 0xfffffff7, 0x10000, 0x2, 0x0, 0xfffffff7, 0x0, 0x0, 0x3, 0x100, 0x8, 0x5, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x6, 0x2, 0x81, 0x0, 0x0, 0xefa, 0x0, 0x2, 0x6, 0xff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9984, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x3, 0x0, 0x8, 0x3, 0xfffffff8, 0x8, 0xc74e, 0x2a53a0f9, 0x0, 0x0, 0x0, 0x3, 0x24a, 0x25, 0xfffffffc, 0x0, 0x3, 0xc, 0x1800000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x270bc00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0xd65d, 0x1, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x3ff, 0x8, 0x8, 0xc20, 0x0, 0x400, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x3, 0x5, 0x0, 0xb, 0x8, 0x8, 0x0, 0x0, 0xe, 0x2, 0x4, 0x0, 0x6, 0x3ea3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0xfffffff7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x7, 0x3, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfbd1, 0x0, 0x10001, 0x1, 0x3, 0x895, 0x0, 0x0, 0x0, 0x5, 0xd18c, 0x7, 0x7, 0x9, 0x1ff, 0x6, 0x0, 0x0, 0x3ff, 0x6ba6, 0x0, 0x0, 0xa, 0x6, 0x0, 0x3, 0x0, 0x5ad, 0x2, 0x0, 0xffff0000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0xc5b2, 0x9, 0x7ff, 0x6, 0x0, 0xffff8000, 0x400, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x4d94, 0xe, 0xe]}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) close(0x3) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3369}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000040)=0xc000000, 0x4) 9.94094779s ago: executing program 1 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.585626369s ago: executing program 1 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 7.910150946s ago: executing program 1 (id=330): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/242, 0xf2}], 0x1, 0x4, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_io_uring_setup(0x9cb, &(0x7f0000000500)={0x0, 0x3c1, 0x800, 0x0, 0x303, 0x0, r0}, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @cipso={0x86, 0x6}, @noop, @timestamp={0x44, 0x4}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sigaltstack(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x22, 0x2, 0x4) getpeername$inet(r5, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0x4020940d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x25, 0x0, "67d401136a26f0e201537ab118c4aab19a0ea93185087ed1128770039bdeda45de723fb17a76a2b9e404fff84d36c7e40044956b12258f3c61799f79b1c06b4a0433dae1ad3b8ea0d9fc8cd629ba56e3"}, 0xd8) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000040)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12017002000000202312073f4000010203f6ac541376abd188c0200904000601030105068921018081012224060905810340008306070905020310007f00f3"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0xd1, 0x2, 0x40, 0x7e}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x89, 0x4, 0x3f, 0x401, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "89042ec390675ef9409c659b9aa56173"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x3, 0x907e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc0, 0x7, 0x895}]}, 0x2, [{0x20, &(0x7f00000002c0)=@string={0x20, 0x3, "2f8b629134e41ba55736933fde75a4add741356fbe07419ff709aa0fd0a6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.238250401s ago: executing program 2 (id=331): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f282828882fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) 6.040797048s ago: executing program 2 (id=332): r0 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) writev(r0, &(0x7f0000003480)=[{&(0x7f0000001380)="dd", 0x1}], 0x1) 6.040507348s ago: executing program 2 (id=333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006b0200000000003f00000000010008"]) 4.90989401s ago: executing program 2 (id=334): ioperm(0x0, 0x3, 0x0) eventfd2(0x0, 0xc0801) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r1, 0x0, 0x4) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x10005) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, 0x80) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000002c0)='-^\x00') setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) 4.722184475s ago: executing program 1 (id=335): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001040)={{0x2, 0x0, 0x7f, 0x0, 0x0, 0xffff}, 0x375, [0x4, 0x0, 0x1ff, 0x0, 0x2, 0x952d, 0x4, 0x8000, 0xffffffff, 0x3565, 0x70ec, 0x5, 0x0, 0xffffffc0, 0x46, 0x6, 0xfffffbff, 0x1, 0xfa, 0xd7, 0x0, 0x0, 0x6, 0x40, 0xa581, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x2, 0xc0, 0x0, 0x4, 0x401, 0xeb, 0x0, 0x3, 0x7, 0x6, 0x8, 0xbe7b, 0x2, 0x0, 0x7d5d, 0x3c8, 0x7, 0x3, 0x0, 0x9, 0x7, 0x3, 0xe, 0x5, 0x2, 0x9, 0x7a, 0x0, 0x6, 0x4, 0x1, 0xfffffffe, 0x0, 0x3, 0x3, 0x0, 0x4, 0x1, 0x80000000, 0x6, 0x5, 0x40, 0x80000001, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x400, 0x8, 0xfe7, 0x7fff, 0x400, 0xff, 0x6, 0x0, 0x3, 0x65, 0xbe, 0xff, 0x1, 0x9c40000, 0x8, 0x0, 0x0, 0x1, 0x101, 0x10001, 0x1c, 0x0, 0x200, 0x2, 0xa, 0x0, 0x900b, 0xff, 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f, 0x9, 0x2, 0x1, 0xfff, 0x8, 0xda, 0x0, 0x7fffffff, 0x0, 0x576, 0x3, 0x3, 0x0, 0x4, 0x3, 0x7, 0xfffffff8, 0x0, 0x7, 0x3, 0x4, 0x6e6a, 0x3c3, 0x0, 0x3db8, 0x6, 0x8, 0x9000000, 0x9, 0x9, 0xffff, 0x9e, 0x8, 0x8a33, 0x5aee, 0x9, 0x0, 0x1, 0x80000001, 0xfff, 0x6, 0xfffffffa, 0x3, 0x8, 0xfffffeff, 0x4, 0x4, 0x8, 0x1, 0x8, 0x10, 0x200, 0x4, 0x0, 0x0, 0x10, 0x8001, 0x1ffe, 0x2, 0xb4, 0x0, 0x1, 0x4, 0x7c89, 0x1, 0x8, 0x4, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ac, 0x5, 0x7, 0xa, 0x40000, 0x3, 0x8, 0x4, 0xfe30, 0x1, 0x8ec9, 0xed, 0x6, 0x0, 0xfffffff3, 0x7, 0x8, 0x2, 0x80000000, 0x0, 0x285, 0x800, 0x9, 0x8, 0x0, 0x0, 0x10000, 0x80000001, 0xffff2743, 0x700000, 0x0, 0x2, 0x80000001, 0x0, 0x8, 0xc13c, 0x7, 0x0, 0x7, 0x5, 0x8, 0x6, 0x1, 0x7fff, 0x6, 0x2, 0x9, 0xffff, 0x6, 0x7, 0x7e94, 0x5, 0x9, 0xf, 0x6, 0x5, 0x4, 0x3, 0xfffffff8, 0x10001, 0x8, 0x6, 0x101, 0x3, 0x2, 0x1, 0x10001, 0xe1c, 0x1, 0x0, 0x0, 0x9, 0x0, 0x39d, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xfffffffb, 0x9, 0x2, 0x0, 0x0, 0x0, 0x23, 0x0, 0x3, 0x0, 0x3ff, 0x0, 0xcf5, 0x6, 0x0, 0x7, 0x188, 0x1, 0x0, 0x0, 0x0, 0xa21264e3, 0x401, 0x1e0, 0x1, 0xed, 0x5, 0x7, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff843, 0x22d2, 0x0, 0x3, 0x0, 0x8, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6f9a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x7, 0x76, 0x1, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x0, 0x0, 0x295, 0x6, 0x10001, 0x0, 0x48, 0x2, 0x81, 0xfffffff9, 0x0, 0x7, 0xd4ed, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1a6, 0xb, 0x479d, 0x0, 0x3, 0x2, 0x2, 0x2, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x6, 0xc, 0x0, 0x7, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xa9, 0x0, 0x9, 0x1, 0x0, 0x8001, 0x516, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x9, 0x6, 0xff, 0x4, 0x1, 0x0, 0xb879, 0x8c1, 0x7, 0x9a, 0x2, 0x0, 0x5, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0x7, 0x9, 0x2, 0xf5c, 0x7, 0x0, 0x8, 0x6, 0xfffffff7, 0x7c29, 0x0, 0x7ff, 0x200, 0x24d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0xa0, 0xf6cc, 0x40, 0x9, 0x0, 0xd3c9, 0xa, 0x3, 0x7, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe, 0x0, 0x1, 0x0, 0x0, 0x890, 0x5, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x6, 0x0, 0x50c, 0x6, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x8, 0xa57, 0x10, 0x0, 0x2, 0x0, 0x1, 0x7fffffff, 0x2, 0xfffffff8, 0x8, 0x0, 0x7, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x0, 0xb, 0x1, 0x1, 0xc, 0x9, 0x5, 0x9, 0x401, 0x0, 0x5, 0x7, 0x2c2e, 0x400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x69, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x5, 0x0, 0x8, 0x800, 0x0, 0x0, 0x0, 0xf51, 0x3, 0xffffffff, 0x1, 0x5, 0x400, 0x3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0x0, 0xfffffff7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x1ff, 0x7, 0x9, 0x8, 0x9, 0x6, 0x67e, 0x1000, 0x0, 0x4ee8, 0xb, 0x80, 0x4, 0x0, 0xce1, 0x2, 0x1, 0x1, 0x6, 0x6, 0x8, 0x0, 0x66d4823c, 0x8, 0xb, 0x5, 0x3, 0x9, 0x0, 0x0, 0x2, 0x0, 0xd, 0x5, 0x0, 0xff, 0x40, 0x9, 0x8, 0x4, 0x9, 0x0, 0x400, 0x8, 0x0, 0x0, 0x80000001, 0x633f, 0xff, 0x9b6, 0x9, 0x3, 0x9, 0x0, 0x7ff, 0x8, 0x7, 0xa2d, 0x7, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0xb, 0x61aa, 0xd, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7e21, 0x0, 0x2, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x30b, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x3ff, 0x0, 0x0, 0x6, 0x4, 0x1, 0x401, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x8000, 0x7, 0x0, 0x7fffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x3dd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x60d52fdd, 0x100, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7322, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x5b4, 0x0, 0xfffffff7, 0x10000, 0x2, 0x0, 0xfffffff7, 0x0, 0x0, 0x3, 0x100, 0x8, 0x5, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x6, 0x2, 0x81, 0x0, 0x0, 0xefa, 0x0, 0x2, 0x6, 0xff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9984, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x3, 0x0, 0x8, 0x3, 0xfffffff8, 0x8, 0xc74e, 0x2a53a0f9, 0x0, 0x0, 0x0, 0x3, 0x24a, 0x25, 0xfffffffc, 0x0, 0x3, 0xc, 0x1800000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x270bc00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0xd65d, 0x1, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x3ff, 0x8, 0x8, 0xc20, 0x0, 0x400, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x3, 0x5, 0x0, 0xb, 0x8, 0x8, 0x0, 0x0, 0xe, 0x2, 0x4, 0x0, 0x6, 0x3ea3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0xfffffff7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x7, 0x3, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfbd1, 0x0, 0x10001, 0x1, 0x3, 0x895, 0x0, 0x0, 0x0, 0x5, 0xd18c, 0x7, 0x7, 0x9, 0x1ff, 0x6, 0x0, 0x0, 0x3ff, 0x6ba6, 0x0, 0x0, 0xa, 0x6, 0x0, 0x3, 0x0, 0x5ad, 0x2, 0x0, 0xffff0000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0xc5b2, 0x9, 0x7ff, 0x6, 0x0, 0xffff8000, 0x400, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x4d94, 0xe, 0xe]}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) close(0x3) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3369}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000040)=0xc000000, 0x4) 3.151088363s ago: executing program 1 (id=336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.018360116s ago: executing program 2 (id=337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 0s ago: executing program 2 (id=338): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) kernel console output (not intermixed with test programs): usb 4-1: string descriptor 0 read error: -71 [ 96.092139][ T3560] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.585721][ T3560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.172399][ T3930] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 97.195169][ T3930] syz.2.74: attempt to access beyond end of device [ 97.195169][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 97.224831][ T3930] syz.2.74: attempt to access beyond end of device [ 97.224831][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 97.252746][ T3930] syz.2.74: attempt to access beyond end of device [ 97.252746][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 97.270185][ T3930] syz.2.74: attempt to access beyond end of device [ 97.270185][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 97.296241][ T3930] syz.2.74: attempt to access beyond end of device [ 97.296241][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 97.313528][ T3930] syz.2.74: attempt to access beyond end of device [ 97.313528][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 97.340158][ T3930] syz.2.74: attempt to access beyond end of device [ 97.340158][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 97.357565][ T3930] syz.2.74: attempt to access beyond end of device [ 97.357565][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 97.380733][ T3930] syz.2.74: attempt to access beyond end of device [ 97.380733][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 97.395315][ T3930] syz.2.74: attempt to access beyond end of device [ 97.395315][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 98.114874][ T3560] usb 4-1: can't set config #1, error -71 [ 98.437151][ T3560] usb 4-1: USB disconnect, device number 9 [ 101.086075][ T3819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.649532][ T4003] loop0: detected capacity change from 0 to 32768 [ 101.746301][ T3568] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.756259][ T3568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.764344][ T3568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.772854][ T3568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.782019][ T3568] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 101.789993][ T3568] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 102.213465][ T3930] bio_check_eod: 2394 callbacks suppressed [ 102.213513][ T3930] syz.2.74: attempt to access beyond end of device [ 102.213513][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 102.247435][ T3930] syz.2.74: attempt to access beyond end of device [ 102.247435][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 102.273222][ T3930] syz.2.74: attempt to access beyond end of device [ 102.273222][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 102.290458][ T3930] syz.2.74: attempt to access beyond end of device [ 102.290458][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 102.322345][ T3930] syz.2.74: attempt to access beyond end of device [ 102.322345][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 102.339495][ T3930] syz.2.74: attempt to access beyond end of device [ 102.339495][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 102.364783][ T3930] syz.2.74: attempt to access beyond end of device [ 102.364783][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 102.383799][ T3930] syz.2.74: attempt to access beyond end of device [ 102.383799][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 102.409907][ T3930] syz.2.74: attempt to access beyond end of device [ 102.409907][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 102.427460][ T3930] syz.2.74: attempt to access beyond end of device [ 102.427460][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 102.791139][ T4003] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.826881][ T4003] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 102.855305][ T4024] device batadv0 entered promiscuous mode [ 102.997861][ T4003] BTRFS info (device loop0): disabling free space tree [ 103.018102][ T4003] BTRFS info (device loop0): setting nodatacow, compression disabled [ 103.080227][ T4003] BTRFS info (device loop0): enabling disk space caching [ 103.148556][ T4003] BTRFS info (device loop0): use no compression [ 103.214639][ T4003] BTRFS info (device loop0): disabling disk space caching [ 103.262606][ T4003] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 103.304551][ T3819] usb 2-1: Using ep0 maxpacket: 16 [ 103.367979][ T4003] BTRFS info (device loop0): trying to use backup root at mount time [ 103.424808][ T3819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 103.436566][ T4003] BTRFS error (device loop0): cannot disable free space tree [ 103.474745][ T3819] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 103.529049][ T3819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.603877][ T3819] usb 2-1: config 0 descriptor?? [ 103.660992][ T4003] BTRFS error (device loop0): open_ctree failed [ 103.777486][ T4017] chnl_net:caif_netlink_parms(): no params data found [ 103.894643][ T3568] Bluetooth: hci5: command tx timeout [ 103.911149][ T4016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.100'. [ 103.987721][ T27] audit: type=1326 audit(1720243995.752:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4015 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 104.096148][ T27] audit: type=1326 audit(1720243995.802:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4015 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 104.154509][ T3813] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 104.236266][ T27] audit: type=1326 audit(1720243995.922:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4015 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 104.325993][ T4017] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.345298][ T4017] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.373905][ T27] audit: type=1326 audit(1720243996.102:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4015 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 104.413555][ T4017] device bridge_slave_0 entered promiscuous mode [ 104.454113][ T4017] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.492417][ T4017] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.500327][ T27] audit: type=1326 audit(1720243996.102:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4015 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 104.523797][ T3813] usb 5-1: config 64 has an invalid interface number: 188 but max is 0 [ 104.560716][ T3813] usb 5-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 104.577492][ T4016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.589121][ T4017] device bridge_slave_1 entered promiscuous mode [ 104.611366][ T3813] usb 5-1: config 64 has an invalid interface descriptor of length 2, skipping [ 104.652632][ T4016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.690688][ T3813] usb 5-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 104.709137][ T4016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.754069][ T3813] usb 5-1: config 64 has no interface number 0 [ 104.764668][ T4016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.816574][ T3819] hid (null): invalid report_size 53675 [ 104.822834][ T3819] hid (null): unknown global tag 0xd [ 104.856794][ T3819] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 104.881851][ T3819] hid-generic 0003:0158:0100.0001: unexpected long global item [ 104.908803][ T3819] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 104.945124][ T3813] usb 5-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 104.981140][ T3813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.006356][ T3813] usb 5-1: Product: syz [ 105.043929][ T3813] usb 5-1: Manufacturer: syz [ 105.053958][ T3813] usb 5-1: SerialNumber: syz [ 105.082271][ T935] usb 2-1: USB disconnect, device number 3 [ 105.121298][ T4017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.162312][ T4017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.337423][ T4017] team0: Port device team_slave_0 added [ 105.569099][ T4017] team0: Port device team_slave_1 added [ 106.084906][ T3557] Bluetooth: hci5: command tx timeout [ 106.498518][ T4017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.551627][ T4017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.066194][ T4017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.121325][ T4017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.158850][ T4017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.216272][ T3930] bio_check_eod: 2298 callbacks suppressed [ 107.216292][ T3930] syz.2.74: attempt to access beyond end of device [ 107.216292][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 107.236828][ T3930] syz.2.74: attempt to access beyond end of device [ 107.236828][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 107.253061][ T3930] syz.2.74: attempt to access beyond end of device [ 107.253061][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 107.267795][ T3930] syz.2.74: attempt to access beyond end of device [ 107.267795][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 107.284235][ T3930] syz.2.74: attempt to access beyond end of device [ 107.284235][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 107.298061][ T4017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.309471][ T3930] syz.2.74: attempt to access beyond end of device [ 107.309471][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 107.326099][ T3930] syz.2.74: attempt to access beyond end of device [ 107.326099][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 107.340690][ T3930] syz.2.74: attempt to access beyond end of device [ 107.340690][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 107.357359][ T3930] syz.2.74: attempt to access beyond end of device [ 107.357359][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 107.371964][ T3930] syz.2.74: attempt to access beyond end of device [ 107.371964][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 107.487087][ T4017] device hsr_slave_0 entered promiscuous mode [ 107.519981][ T4017] device hsr_slave_1 entered promiscuous mode [ 107.559288][ T4017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.603430][ T4017] Cannot create hsr debugfs directory [ 108.079648][ T3813] usb-storage 5-1:64.188: USB Mass Storage device detected [ 108.164911][ T4062] device batadv0 entered promiscuous mode [ 108.725144][ T3568] Bluetooth: hci5: command tx timeout [ 109.253808][ T4017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.529847][ T4017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.779702][ T4017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.995798][ T4017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.085260][ T3813] usb-storage 5-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 110.093438][ T3819] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.085768][ T3568] Bluetooth: hci5: command tx timeout [ 111.854469][ T3598] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 112.019625][ T4017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.077949][ T4017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.117442][ T3813] usb 5-1: USB disconnect, device number 8 [ 112.137996][ T3598] usb 1-1: Using ep0 maxpacket: 16 [ 112.226688][ T3930] bio_check_eod: 2166 callbacks suppressed [ 112.226710][ T3930] syz.2.74: attempt to access beyond end of device [ 112.226710][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 112.249269][ T3930] syz.2.74: attempt to access beyond end of device [ 112.249269][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 112.268640][ T3930] syz.2.74: attempt to access beyond end of device [ 112.268640][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 112.285239][ T3930] syz.2.74: attempt to access beyond end of device [ 112.285239][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 112.300481][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 112.302947][ T3930] syz.2.74: attempt to access beyond end of device [ 112.302947][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 112.327238][ T3930] syz.2.74: attempt to access beyond end of device [ 112.327238][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 112.346244][ T3930] syz.2.74: attempt to access beyond end of device [ 112.346244][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 112.351150][ T4073] loop4: detected capacity change from 0 to 32768 [ 112.363262][ T3930] syz.2.74: attempt to access beyond end of device [ 112.363262][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 112.371169][ T3598] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 112.387632][ T3930] syz.2.74: attempt to access beyond end of device [ 112.387632][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 112.411659][ T3930] syz.2.74: attempt to access beyond end of device [ 112.411659][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 112.442046][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.500215][ T3598] usb 1-1: config 0 descriptor?? [ 112.585985][ T3569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (3569) [ 112.783877][ T4085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.118'. [ 112.835920][ T27] audit: type=1326 audit(1720244004.602:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 112.951881][ T27] audit: type=1326 audit(1720244004.622:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 113.078572][ T27] audit: type=1326 audit(1720244004.622:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 113.201834][ T27] audit: type=1326 audit(1720244004.622:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 113.319328][ T27] audit: type=1326 audit(1720244004.622:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 113.442580][ T27] audit: type=1326 audit(1720244004.622:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 113.530484][ T27] audit: type=1326 audit(1720244004.622:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 113.584558][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.619955][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.669918][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.687788][ T27] audit: type=1326 audit(1720244004.622:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 113.744699][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.776121][ T3598] hid (null): invalid report_size 53675 [ 113.792138][ T27] audit: type=1326 audit(1720244004.622:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 113.825772][ T3598] hid (null): unknown global tag 0xd [ 113.838582][ T3598] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 113.865591][ T3598] hid-generic 0003:0158:0100.0002: unexpected long global item [ 113.887445][ T3598] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 113.907357][ T27] audit: type=1326 audit(1720244004.622:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4081 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 114.089112][ T4017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.120441][ T3602] usb 1-1: USB disconnect, device number 14 [ 115.264132][ T4017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.382102][ T4017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.835660][ T3819] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.886817][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.906217][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.944669][ T4017] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.984874][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.025635][ T3814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.061970][ T3814] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.069429][ T3814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.157511][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.183365][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.210545][ T3819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 117.234800][ T3930] bio_check_eod: 2310 callbacks suppressed [ 117.234821][ T3930] syz.2.74: attempt to access beyond end of device [ 117.234821][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 117.253641][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.256659][ T3930] syz.2.74: attempt to access beyond end of device [ 117.256659][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 117.281290][ T3930] syz.2.74: attempt to access beyond end of device [ 117.281290][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 117.296113][ T3930] syz.2.74: attempt to access beyond end of device [ 117.296113][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 117.296480][ T3818] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.313411][ T3930] syz.2.74: attempt to access beyond end of device [ 117.313411][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 117.318964][ T3818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.333845][ T3930] syz.2.74: attempt to access beyond end of device [ 117.333845][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 117.357207][ T3930] syz.2.74: attempt to access beyond end of device [ 117.357207][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 117.373203][ T3930] syz.2.74: attempt to access beyond end of device [ 117.373203][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 117.389539][ T3930] syz.2.74: attempt to access beyond end of device [ 117.389539][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 117.405011][ T3930] syz.2.74: attempt to access beyond end of device [ 117.405011][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 117.434787][ T3819] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 117.475475][ T3819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.514599][ T3819] usb 2-1: Product: syz [ 117.524904][ T3819] usb 2-1: Manufacturer: syz [ 117.545038][ T3819] usb 2-1: SerialNumber: syz [ 117.575843][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.586148][ T3819] usb 2-1: config 0 descriptor?? [ 117.619696][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.698789][ T4100] loop4: detected capacity change from 0 to 32768 [ 117.713120][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.724062][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.751232][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.798407][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.866474][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.887124][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.924920][ T3819] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 117.958683][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.987856][ T3819] usb 2-1: USB disconnect, device number 5 [ 118.022900][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.240048][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.249881][ T4017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.124471][ T3566] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.245942][ T3569] udevd[3569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.114818][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 120.834515][ T3818] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 121.136191][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.143960][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.168511][ T4017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.194785][ T3818] usb 2-1: config 64 has an invalid interface number: 188 but max is 0 [ 121.203169][ T3818] usb 2-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 121.253157][ T3818] usb 2-1: config 64 has an invalid interface descriptor of length 2, skipping [ 121.326386][ T3818] usb 2-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 121.368831][ T3818] usb 2-1: config 64 has no interface number 0 [ 121.420169][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.445803][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.496860][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.539243][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.564736][ T3818] usb 2-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 121.597823][ T4017] device veth0_vlan entered promiscuous mode [ 121.616127][ T3818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.654966][ T4017] device veth1_vlan entered promiscuous mode [ 121.662195][ T3818] usb 2-1: Product: syz [ 121.692812][ T3818] usb 2-1: Manufacturer: syz [ 121.734609][ T3818] usb 2-1: SerialNumber: syz [ 121.788854][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.813424][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.861298][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.910160][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 121.957933][ T4017] device veth0_macvtap entered promiscuous mode [ 122.011785][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.045626][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.056078][ T3818] usb-storage 2-1:64.188: USB Mass Storage device detected [ 122.086805][ T3818] usb-storage 2-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 122.109001][ T4134] loop3: detected capacity change from 0 to 32768 [ 122.118324][ T4017] device veth1_macvtap entered promiscuous mode [ 122.140564][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.171192][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.190391][ T3818] usb 2-1: USB disconnect, device number 6 [ 122.244491][ T3930] bio_check_eod: 2163 callbacks suppressed [ 122.244515][ T3930] syz.2.74: attempt to access beyond end of device [ 122.244515][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 122.266648][ T3930] syz.2.74: attempt to access beyond end of device [ 122.266648][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 122.281101][ T4134] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.281585][ T3930] syz.2.74: attempt to access beyond end of device [ 122.281585][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 122.309187][ T3930] syz.2.74: attempt to access beyond end of device [ 122.309187][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 122.326668][ T3930] syz.2.74: attempt to access beyond end of device [ 122.326668][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 122.330062][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.342909][ T3930] syz.2.74: attempt to access beyond end of device [ 122.342909][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 122.361295][ T4134] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 122.368481][ T3930] syz.2.74: attempt to access beyond end of device [ 122.368481][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 122.392819][ T3930] syz.2.74: attempt to access beyond end of device [ 122.392819][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 122.407859][ T3930] syz.2.74: attempt to access beyond end of device [ 122.407859][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 122.424778][ T3930] syz.2.74: attempt to access beyond end of device [ 122.424778][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 122.427451][ T4134] BTRFS info (device loop3): disabling free space tree [ 122.457105][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.507640][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.534497][ T4134] BTRFS info (device loop3): setting nodatacow, compression disabled [ 122.594713][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.610115][ T4134] BTRFS info (device loop3): enabling disk space caching [ 122.654564][ T4134] BTRFS info (device loop3): use no compression [ 122.671147][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.712695][ T4134] BTRFS info (device loop3): disabling disk space caching [ 122.737689][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.758189][ T4134] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.805720][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.024549][ T4134] BTRFS info (device loop3): trying to use backup root at mount time [ 123.033287][ T4134] BTRFS error (device loop3): cannot disable free space tree [ 123.083303][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.093637][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.115571][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.906670][ T4139] loop4: detected capacity change from 0 to 40427 [ 124.112791][ T4134] BTRFS error (device loop3): open_ctree failed [ 124.112921][ T7] usb 1-1: device descriptor read/64, error -71 [ 124.558254][ T4017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.640701][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.720474][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.824582][ T3598] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.859384][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.914428][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.951952][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.004583][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.032814][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.049720][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.062198][ T4017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.079145][ T4017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.099143][ T4017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.114926][ T3566] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.244874][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 126.463002][ T3598] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 126.482811][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.505618][ T3598] usb 2-1: Product: syz [ 126.520677][ T3598] usb 2-1: Manufacturer: syz [ 126.530514][ T3598] usb 2-1: SerialNumber: syz [ 126.604155][ T3598] usb 2-1: config 0 descriptor?? [ 127.061940][ T4158] netlink: 'syz.1.137': attribute type 16 has an invalid length. [ 127.069806][ T4158] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.137'. [ 127.121169][ T4158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 127.254438][ T3930] bio_check_eod: 2180 callbacks suppressed [ 127.254459][ T3930] syz.2.74: attempt to access beyond end of device [ 127.254459][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 127.277637][ T3930] syz.2.74: attempt to access beyond end of device [ 127.277637][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 127.293250][ T3930] syz.2.74: attempt to access beyond end of device [ 127.293250][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 127.309616][ T3930] syz.2.74: attempt to access beyond end of device [ 127.309616][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 127.325532][ T3930] syz.2.74: attempt to access beyond end of device [ 127.325532][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 127.342617][ T3930] syz.2.74: attempt to access beyond end of device [ 127.342617][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 127.357373][ T3930] syz.2.74: attempt to access beyond end of device [ 127.357373][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 127.373945][ T3930] syz.2.74: attempt to access beyond end of device [ 127.373945][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 127.389573][ T3930] syz.2.74: attempt to access beyond end of device [ 127.389573][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 127.406015][ T3930] syz.2.74: attempt to access beyond end of device [ 127.406015][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.074566][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.084129][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.073838][ T3819] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 129.108438][ T3598] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 129.334549][ T3819] usb 4-1: Using ep0 maxpacket: 16 [ 129.444486][ T3818] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 129.454811][ T3819] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.488197][ T3819] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.530013][ T3819] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.714515][ T3818] usb 1-1: Using ep0 maxpacket: 16 [ 129.724941][ T3819] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.755003][ T3819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.763047][ T3819] usb 4-1: Product: syz [ 129.802340][ T3819] usb 4-1: Manufacturer: syz [ 129.819117][ T3819] usb 4-1: SerialNumber: syz [ 129.834751][ T3818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 129.862476][ T3818] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 129.897090][ T3818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.945846][ T3818] usb 1-1: config 0 descriptor?? [ 130.104031][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.112487][ T3598] usb 2-1: USB disconnect, device number 7 [ 130.198329][ T4184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 130.209138][ T3569] udevd[3569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.257394][ T4186] loop3: detected capacity change from 0 to 512 [ 130.314754][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 130.314770][ T27] audit: type=1326 audit(1720244022.042:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 130.492891][ T4186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.521376][ T27] audit: type=1326 audit(1720244022.042:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 130.551632][ T4186] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 130.864949][ T27] audit: type=1326 audit(1720244022.042:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 131.005775][ T27] audit: type=1326 audit(1720244022.042:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 131.073523][ T4185] loop1: detected capacity change from 0 to 40427 [ 131.087514][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.100441][ T4017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.427565][ T4017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.436376][ T4017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.470699][ T4017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.533694][ T4185] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 131.585902][ T4185] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 131.594825][ T27] audit: type=1326 audit(1720244022.042:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 131.907755][ T4185] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.942919][ T27] audit: type=1326 audit(1720244022.042:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 132.006186][ T4208] kAFS: No cell specified [ 132.264404][ T3930] bio_check_eod: 2263 callbacks suppressed [ 132.264451][ T3930] syz.2.74: attempt to access beyond end of device [ 132.264451][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 132.287912][ T3930] syz.2.74: attempt to access beyond end of device [ 132.287912][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 132.313540][ T3930] syz.2.74: attempt to access beyond end of device [ 132.313540][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 132.330888][ T3930] syz.2.74: attempt to access beyond end of device [ 132.330888][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 132.356821][ T3930] syz.2.74: attempt to access beyond end of device [ 132.356821][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 132.374075][ T3930] syz.2.74: attempt to access beyond end of device [ 132.374075][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 132.400257][ T3930] syz.2.74: attempt to access beyond end of device [ 132.400257][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 132.417697][ T3930] syz.2.74: attempt to access beyond end of device [ 132.417697][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 132.443549][ T3930] syz.2.74: attempt to access beyond end of device [ 132.443549][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 132.460845][ T3930] syz.2.74: attempt to access beyond end of device [ 132.460845][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 132.681070][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.687506][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.883915][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.921428][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.934597][ T3818] usbhid 1-1:0.0: can't add hid device: -71 [ 132.940704][ T3818] usbhid: probe of 1-1:0.0 failed with error -71 [ 132.965445][ T27] audit: type=1326 audit(1720244022.042:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 133.072794][ T3818] usb 1-1: USB disconnect, device number 17 [ 133.104991][ T27] audit: type=1326 audit(1720244022.042:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 133.215339][ T3642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.245348][ T3642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.433985][ T27] audit: type=1326 audit(1720244022.042:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 133.575308][ T27] audit: type=1326 audit(1720244022.042:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4182 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 133.624541][ T3818] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 134.815625][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.823696][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.915013][ T3818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 135.310255][ T3818] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 136.057929][ T3818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.106172][ T3818] usb 5-1: Product: syz [ 136.241626][ T3818] usb 5-1: Manufacturer: syz [ 136.254636][ T3818] usb 5-1: SerialNumber: syz [ 136.342871][ T3818] usb 5-1: config 0 descriptor?? [ 136.415912][ T3818] usb 5-1: can't set config #0, error -71 [ 136.494239][ T3818] usb 5-1: USB disconnect, device number 9 [ 136.554998][ T3813] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 137.276536][ T3930] bio_check_eod: 2172 callbacks suppressed [ 137.276559][ T3930] syz.2.74: attempt to access beyond end of device [ 137.276559][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 137.297445][ T3930] syz.2.74: attempt to access beyond end of device [ 137.297445][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 137.313777][ T3930] syz.2.74: attempt to access beyond end of device [ 137.313777][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 137.328658][ T3930] syz.2.74: attempt to access beyond end of device [ 137.328658][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 137.345270][ T3930] syz.2.74: attempt to access beyond end of device [ 137.345270][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 137.361020][ T3930] syz.2.74: attempt to access beyond end of device [ 137.361020][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 137.377818][ T3930] syz.2.74: attempt to access beyond end of device [ 137.377818][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 137.392899][ T3930] syz.2.74: attempt to access beyond end of device [ 137.392899][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 137.409711][ T3930] syz.2.74: attempt to access beyond end of device [ 137.409711][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 137.424745][ T3930] syz.2.74: attempt to access beyond end of device [ 137.424745][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 137.496233][ T4239] kAFS: No cell specified [ 139.484502][ T3813] usb 1-1: device descriptor read/all, error -71 [ 139.880342][ T3818] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.684151][ T4260] tty tty20: ldisc open failed (-12), clearing slot 19 [ 140.806104][ T3568] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.815734][ T3568] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.823693][ T3568] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.832115][ T3568] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.842354][ T3568] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 140.850155][ T3568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.998289][ T4277] kAFS: No cell specified [ 142.295350][ T3930] bio_check_eod: 2074 callbacks suppressed [ 142.295396][ T3930] syz.2.74: attempt to access beyond end of device [ 142.295396][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 142.319470][ T3930] syz.2.74: attempt to access beyond end of device [ 142.319470][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 142.345990][ T3930] syz.2.74: attempt to access beyond end of device [ 142.345990][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 142.363349][ T3930] syz.2.74: attempt to access beyond end of device [ 142.363349][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 142.389365][ T3930] syz.2.74: attempt to access beyond end of device [ 142.389365][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 142.407189][ T3930] syz.2.74: attempt to access beyond end of device [ 142.407189][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 142.433029][ T3930] syz.2.74: attempt to access beyond end of device [ 142.433029][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 142.454054][ T3930] syz.2.74: attempt to access beyond end of device [ 142.454054][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 142.470294][ T3930] syz.2.74: attempt to access beyond end of device [ 142.470294][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 142.484896][ T3930] syz.2.74: attempt to access beyond end of device [ 142.484896][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 142.854469][ T3813] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 143.094881][ T3568] Bluetooth: hci6: command tx timeout [ 143.104762][ T3813] usb 1-1: Using ep0 maxpacket: 16 [ 143.398427][ T3599] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.498470][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 143.529219][ T4281] fuse: Bad value for 'user_id' [ 143.551849][ T4281] netlink: 'syz.2.172': attribute type 11 has an invalid length. [ 143.977740][ T7] usb 4-1: USB disconnect, device number 10 [ 144.864557][ T3599] usb 2-1: unable to read config index 0 descriptor/all [ 144.875189][ T3599] usb 2-1: can't read configurations, error -71 [ 145.213129][ T3568] Bluetooth: hci6: command tx timeout [ 145.264208][ T3813] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 146.106326][ T3813] usb 1-1: can't read configurations, error -71 [ 146.116492][ T4197] EXT4-fs (loop3): unmounting filesystem. [ 146.572185][ T3813] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 146.814503][ T3813] usb 1-1: Using ep0 maxpacket: 16 [ 146.934765][ T3813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 146.952476][ T3813] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 147.206581][ T3813] usb 1-1: New USB device found, idVendor=d625, idProduct=0100, bcdDevice=25.8b [ 147.246329][ T3813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.270051][ T3813] usb 1-1: Product: syz [ 147.274274][ T3813] usb 1-1: Manufacturer: syz [ 147.284678][ T3813] usb 1-1: SerialNumber: syz [ 147.306858][ T3930] bio_check_eod: 2066 callbacks suppressed [ 147.306882][ T3930] syz.2.74: attempt to access beyond end of device [ 147.306882][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 147.308483][ T3813] usb 1-1: config 0 descriptor?? [ 147.314080][ T3930] syz.2.74: attempt to access beyond end of device [ 147.314080][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 147.349545][ T3568] Bluetooth: hci6: command tx timeout [ 147.350512][ T3930] syz.2.74: attempt to access beyond end of device [ 147.350512][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 147.370325][ T3930] syz.2.74: attempt to access beyond end of device [ 147.370325][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 147.386698][ T3930] syz.2.74: attempt to access beyond end of device [ 147.386698][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 147.402588][ T3930] syz.2.74: attempt to access beyond end of device [ 147.402588][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 147.410437][ T3679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.419379][ T3930] syz.2.74: attempt to access beyond end of device [ 147.419379][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 147.442650][ T3930] syz.2.74: attempt to access beyond end of device [ 147.442650][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 147.459186][ T3930] syz.2.74: attempt to access beyond end of device [ 147.459186][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 147.473924][ T3930] syz.2.74: attempt to access beyond end of device [ 147.473924][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 147.526768][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.534115][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.551260][ T4263] device bridge_slave_0 entered promiscuous mode [ 147.597122][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.604485][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.613065][ T4263] device bridge_slave_1 entered promiscuous mode [ 147.647935][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.660479][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.079058][ T4263] team0: Port device team_slave_0 added [ 148.807796][ T4263] team0: Port device team_slave_1 added [ 149.118108][ T935] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 149.150192][ T3679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.194803][ T3813] usb 1-1: MIDIStreaming interface descriptor not found [ 149.445827][ T3568] Bluetooth: hci6: command tx timeout [ 149.549163][ T4319] kAFS: No cell specified [ 150.275323][ T3813] usb 1-1: USB disconnect, device number 21 [ 150.314457][ T935] usb 5-1: Using ep0 maxpacket: 16 [ 150.454651][ T935] usb 5-1: device descriptor read/all, error -71 [ 150.630725][ T3571] udevd[3571]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.881048][ T4322] loop0: detected capacity change from 0 to 4096 [ 152.098064][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.106207][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.226265][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.239817][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.250320][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.315652][ T3930] bio_check_eod: 1920 callbacks suppressed [ 152.315696][ T3930] syz.2.74: attempt to access beyond end of device [ 152.315696][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 152.344195][ T3930] syz.2.74: attempt to access beyond end of device [ 152.344195][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 152.369754][ T3930] syz.2.74: attempt to access beyond end of device [ 152.369754][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 152.386518][ T3930] syz.2.74: attempt to access beyond end of device [ 152.386518][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 152.409777][ T3930] syz.2.74: attempt to access beyond end of device [ 152.409777][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 152.427469][ T3930] syz.2.74: attempt to access beyond end of device [ 152.427469][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 152.453114][ T3930] syz.2.74: attempt to access beyond end of device [ 152.453114][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 152.470122][ T3930] syz.2.74: attempt to access beyond end of device [ 152.470122][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 152.495546][ T3930] syz.2.74: attempt to access beyond end of device [ 152.495546][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 152.510743][ T3930] syz.2.74: attempt to access beyond end of device [ 152.510743][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.042980][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.159848][ T4322] fuse: Bad value for 'user_id' [ 153.428520][ T3679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.441717][ T4322] netlink: 'syz.0.184': attribute type 11 has an invalid length. [ 153.905914][ T935] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.930526][ T4263] device hsr_slave_0 entered promiscuous mode [ 154.011164][ T4348] kAFS: No cell specified [ 154.107267][ T4263] device hsr_slave_1 entered promiscuous mode [ 154.734486][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.742102][ T4263] Cannot create hsr debugfs directory [ 154.779929][ T3679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.844523][ T935] usb 2-1: Using ep0 maxpacket: 32 [ 154.964680][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.015489][ T935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.084465][ T935] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.361426][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.648597][ T935] usb 2-1: config 0 descriptor?? [ 155.692788][ T935] hub 2-1:0.0: USB hub found [ 155.804566][ T3813] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 155.898008][ T4344] netlink: 104 bytes leftover after parsing attributes in process `syz.1.192'. [ 155.934876][ T935] hub 2-1:0.0: 1 port detected [ 156.095396][ T3813] usb 1-1: Using ep0 maxpacket: 16 [ 156.214813][ T3813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 156.246791][ T3813] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 156.287316][ T3813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.328620][ T3813] usb 1-1: config 0 descriptor?? [ 156.579080][ T4351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.194'. [ 156.631891][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 156.631907][ T27] audit: type=1326 audit(1720244048.392:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 156.741835][ T27] audit: type=1326 audit(1720244048.432:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 156.834964][ T935] hub 2-1:0.0: activate --> -90 [ 156.846098][ T27] audit: type=1326 audit(1720244048.432:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 156.928062][ T27] audit: type=1326 audit(1720244048.432:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 156.993546][ T27] audit: type=1326 audit(1720244048.432:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 157.038430][ T3819] usb 2-1: USB disconnect, device number 10 [ 157.054549][ T935] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 157.088173][ T4366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.088648][ T27] audit: type=1326 audit(1720244048.432:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 157.186094][ T4366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.208078][ T4351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.292989][ T4351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.325158][ T3930] bio_check_eod: 2268 callbacks suppressed [ 157.325179][ T3930] syz.2.74: attempt to access beyond end of device [ 157.325179][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 157.345728][ T3930] syz.2.74: attempt to access beyond end of device [ 157.345728][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 157.362118][ T3930] syz.2.74: attempt to access beyond end of device [ 157.362118][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 157.376718][ T3930] syz.2.74: attempt to access beyond end of device [ 157.376718][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 157.393536][ T3930] syz.2.74: attempt to access beyond end of device [ 157.393536][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 157.395901][ T3813] hid (null): invalid report_size 53675 [ 157.408158][ T3930] syz.2.74: attempt to access beyond end of device [ 157.408158][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 157.429472][ T3930] syz.2.74: attempt to access beyond end of device [ 157.429472][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 157.437615][ T4361] loop4: detected capacity change from 0 to 40427 [ 157.444053][ T3930] syz.2.74: attempt to access beyond end of device [ 157.444053][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 157.453077][ T27] audit: type=1326 audit(1720244048.432:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 157.465950][ T3930] syz.2.74: attempt to access beyond end of device [ 157.465950][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 157.501153][ T3930] syz.2.74: attempt to access beyond end of device [ 157.501153][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 157.530346][ T3813] hid (null): unknown global tag 0xd [ 157.576598][ T3813] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 157.615325][ T4361] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 157.623107][ T4361] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.664575][ T3813] hid-generic 0003:0158:0100.0003: unexpected long global item [ 157.672738][ T3813] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 157.726604][ T27] audit: type=1326 audit(1720244048.432:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 157.989548][ T3813] usb 1-1: USB disconnect, device number 22 [ 158.852742][ T27] audit: type=1326 audit(1720244048.432:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 158.888136][ T27] audit: type=1326 audit(1720244048.432:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4350 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 158.949406][ T4361] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.604381][ T4398] kAFS: No cell specified [ 161.812118][ T4405] loop0: detected capacity change from 0 to 128 [ 161.833884][ T4405] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 161.843279][ T4405] sysv_free_block: trying to free block not in datazone [ 161.851751][ T4405] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 162.335772][ T3930] bio_check_eod: 1944 callbacks suppressed [ 162.335795][ T3930] syz.2.74: attempt to access beyond end of device [ 162.335795][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 162.357455][ T3930] syz.2.74: attempt to access beyond end of device [ 162.357455][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 162.373891][ T3930] syz.2.74: attempt to access beyond end of device [ 162.373891][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 162.388506][ T3930] syz.2.74: attempt to access beyond end of device [ 162.388506][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 162.404744][ T3930] syz.2.74: attempt to access beyond end of device [ 162.404744][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 162.420289][ T3930] syz.2.74: attempt to access beyond end of device [ 162.420289][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 162.436727][ T3930] syz.2.74: attempt to access beyond end of device [ 162.436727][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 162.451904][ T3930] syz.2.74: attempt to access beyond end of device [ 162.451904][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 162.468373][ T3930] syz.2.74: attempt to access beyond end of device [ 162.468373][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 162.483031][ T3930] syz.2.74: attempt to access beyond end of device [ 162.483031][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.844737][ T3813] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 165.444612][ T3813] usb 3-1: Using ep0 maxpacket: 16 [ 165.521366][ T4437] kAFS: No cell specified [ 166.987925][ T4263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.087876][ T4263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.211943][ T4263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.288299][ T4263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.345076][ T3930] bio_check_eod: 2118 callbacks suppressed [ 167.345097][ T3930] syz.2.74: attempt to access beyond end of device [ 167.345097][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 167.365663][ T3930] syz.2.74: attempt to access beyond end of device [ 167.365663][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 167.381993][ T3930] syz.2.74: attempt to access beyond end of device [ 167.381993][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 167.396751][ T3930] syz.2.74: attempt to access beyond end of device [ 167.396751][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 167.413390][ T3930] syz.2.74: attempt to access beyond end of device [ 167.413390][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 167.428507][ T3930] syz.2.74: attempt to access beyond end of device [ 167.428507][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 167.444713][ T3930] syz.2.74: attempt to access beyond end of device [ 167.444713][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 167.459750][ T3930] syz.2.74: attempt to access beyond end of device [ 167.459750][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 167.476034][ T3930] syz.2.74: attempt to access beyond end of device [ 167.476034][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 167.490703][ T3930] syz.2.74: attempt to access beyond end of device [ 167.490703][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 169.049234][ T3813] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 169.103343][ T3813] usb 3-1: can't read configurations, error -71 [ 169.462136][ T4467] kAFS: No cell specified [ 169.944537][ T3737] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 169.954941][ T4478] process 'syz.1.228' launched './file0' with NULL argv: empty string added [ 170.141865][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.194982][ T3737] usb 1-1: Using ep0 maxpacket: 16 [ 170.334991][ T3737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 170.358596][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.398406][ T3737] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 170.443466][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.482427][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.501926][ T3737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.637853][ T3737] usb 1-1: config 0 descriptor?? [ 170.722577][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.745835][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.825004][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.832302][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.855158][ T4483] loop4: detected capacity change from 0 to 1024 [ 170.890690][ T4475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 170.921361][ T4483] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.974915][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.024782][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 171.024801][ T27] audit: type=1326 audit(1720244062.762:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 171.059496][ T4483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.095396][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.112040][ T27] audit: type=1326 audit(1720244062.762:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 171.149367][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.157400][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.278676][ T4483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 171.307682][ T4483] System zones: 0-1, 3-36 [ 171.337184][ T27] audit: type=1326 audit(1720244062.762:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 171.388271][ T4483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.466315][ T27] audit: type=1326 audit(1720244062.782:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 171.489296][ T27] audit: type=1326 audit(1720244062.782:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 171.513910][ T27] audit: type=1326 audit(1720244062.782:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 171.629560][ T4475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.685123][ T4475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.719089][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.736566][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.757939][ T27] audit: type=1326 audit(1720244062.782:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 171.790457][ T4475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.858154][ T4475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.889449][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.925759][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.973677][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.983038][ T3737] hid (null): invalid report_size 53675 [ 171.988925][ T27] audit: type=1326 audit(1720244062.782:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 172.012983][ T3737] hid (null): unknown global tag 0xd [ 172.055467][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.064897][ T3737] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 172.105947][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.114243][ T3737] hid-generic 0003:0158:0100.0004: unexpected long global item [ 172.134474][ T27] audit: type=1326 audit(1720244062.782:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 172.164951][ T3737] hid-generic: probe of 0003:0158:0100.0004 failed with error -22 [ 172.244707][ T3737] usb 1-1: USB disconnect, device number 23 [ 172.282247][ T27] audit: type=1326 audit(1720244062.782:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4474 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9762575bd9 code=0x7ffc0000 [ 172.329556][ T3554] EXT4-fs (loop4): unmounting filesystem. [ 172.356846][ T3930] bio_check_eod: 2394 callbacks suppressed [ 172.356864][ T3930] syz.2.74: attempt to access beyond end of device [ 172.356864][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 172.377897][ T3930] syz.2.74: attempt to access beyond end of device [ 172.377897][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 172.394078][ T3930] syz.2.74: attempt to access beyond end of device [ 172.394078][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 172.408814][ T3930] syz.2.74: attempt to access beyond end of device [ 172.408814][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 172.425217][ T3930] syz.2.74: attempt to access beyond end of device [ 172.425217][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 172.439885][ T3930] syz.2.74: attempt to access beyond end of device [ 172.439885][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 172.456191][ T3930] syz.2.74: attempt to access beyond end of device [ 172.456191][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 172.470776][ T3930] syz.2.74: attempt to access beyond end of device [ 172.470776][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 172.487722][ T3930] syz.2.74: attempt to access beyond end of device [ 172.487722][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 172.502276][ T3930] syz.2.74: attempt to access beyond end of device [ 172.502276][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 172.611456][ T4263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.640126][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.688223][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.698612][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.708249][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.718364][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.727480][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.752816][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.317537][ T4528] kAFS: No cell specified [ 175.573091][ T4535] Zero length message leads to an empty skb [ 177.334433][ T3679] device hsr_slave_0 left promiscuous mode [ 177.365964][ T3930] bio_check_eod: 2384 callbacks suppressed [ 177.365985][ T3930] syz.2.74: attempt to access beyond end of device [ 177.365985][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 177.386591][ T3930] syz.2.74: attempt to access beyond end of device [ 177.386591][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 177.403346][ T3930] syz.2.74: attempt to access beyond end of device [ 177.403346][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 177.408600][ T3679] device hsr_slave_1 left promiscuous mode [ 177.418029][ T3930] syz.2.74: attempt to access beyond end of device [ 177.418029][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 177.439412][ T3930] syz.2.74: attempt to access beyond end of device [ 177.439412][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 177.454522][ T3930] syz.2.74: attempt to access beyond end of device [ 177.454522][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 177.470580][ T3930] syz.2.74: attempt to access beyond end of device [ 177.470580][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 177.485429][ T3930] syz.2.74: attempt to access beyond end of device [ 177.485429][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 177.491047][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.501651][ T3930] syz.2.74: attempt to access beyond end of device [ 177.501651][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 177.522039][ T3930] syz.2.74: attempt to access beyond end of device [ 177.522039][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 177.733926][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.795496][ T3679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.824570][ T3598] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 177.865023][ T3679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.923900][ T3679] device bridge_slave_1 left promiscuous mode [ 177.975305][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.064539][ T3598] usb 2-1: Using ep0 maxpacket: 16 [ 178.078797][ T4569] loop4: detected capacity change from 0 to 8 [ 178.107617][ T3679] device bridge_slave_0 left promiscuous mode [ 178.606104][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 178.654798][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.690255][ T3598] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 178.700362][ T4569] SQUASHFS error: Unable to read inode 0x2a7 [ 178.738910][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.802895][ T3598] usb 2-1: config 0 descriptor?? [ 179.105673][ T3679] device veth1_macvtap left promiscuous mode [ 179.112108][ T3679] device veth0_macvtap left promiscuous mode [ 179.118578][ T3679] device veth1_vlan left promiscuous mode [ 179.506613][ T4560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.247'. [ 179.556878][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 179.556894][ T27] audit: type=1326 audit(1720244071.322:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 179.599248][ T3679] device veth0_vlan left promiscuous mode [ 179.710131][ T27] audit: type=1326 audit(1720244071.352:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 179.839244][ T27] audit: type=1326 audit(1720244071.352:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 179.959329][ T27] audit: type=1326 audit(1720244071.352:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 180.040434][ T4560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.089207][ T27] audit: type=1326 audit(1720244071.352:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 180.093675][ T4560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.112032][ T27] audit: type=1326 audit(1720244071.352:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 180.223624][ T4560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.241325][ T27] audit: type=1326 audit(1720244071.352:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 180.282065][ T4560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.323574][ T27] audit: type=1326 audit(1720244071.352:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 180.355801][ T3598] hid (null): invalid report_size 53675 [ 180.370853][ T3598] hid (null): unknown global tag 0xd [ 180.591781][ T3598] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 180.610323][ T3598] hid-generic 0003:0158:0100.0005: unexpected long global item [ 180.618935][ T27] audit: type=1326 audit(1720244071.352:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 180.752397][ T4582] loop0: detected capacity change from 0 to 128 [ 180.765300][ T4582] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 180.773958][ T4582] sysv_free_block: trying to free block not in datazone [ 180.782975][ T4582] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 180.813514][ T3598] hid-generic: probe of 0003:0158:0100.0005 failed with error -22 [ 180.847957][ T3598] usb 2-1: USB disconnect, device number 11 [ 180.878216][ T27] audit: type=1326 audit(1720244071.352:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.1.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 182.087432][ T3566] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.386403][ T3930] bio_check_eod: 2426 callbacks suppressed [ 182.386450][ T3930] syz.2.74: attempt to access beyond end of device [ 182.386450][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 182.409643][ T3930] syz.2.74: attempt to access beyond end of device [ 182.409643][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 182.434580][ T3930] syz.2.74: attempt to access beyond end of device [ 182.434580][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 182.451948][ T3930] syz.2.74: attempt to access beyond end of device [ 182.451948][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 182.477787][ T3930] syz.2.74: attempt to access beyond end of device [ 182.477787][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 182.523014][ T3930] syz.2.74: attempt to access beyond end of device [ 182.523014][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 182.539354][ T3930] syz.2.74: attempt to access beyond end of device [ 182.539354][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 182.554015][ T3930] syz.2.74: attempt to access beyond end of device [ 182.554015][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 182.570259][ T3930] syz.2.74: attempt to access beyond end of device [ 182.570259][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 182.587312][ T3930] syz.2.74: attempt to access beyond end of device [ 182.587312][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 185.175029][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 185.348888][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 186.116372][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.504022][ T3568] Bluetooth: hci0: command 0x0406 tx timeout [ 186.621427][ T3679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.664619][ T22] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.077701][ T3551] Bluetooth: hci2: command 0x0406 tx timeout [ 187.077933][ T3553] Bluetooth: hci3: command 0x0406 tx timeout [ 187.095898][ T4619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 187.135660][ T3557] Bluetooth: hci4: command 0x0406 tx timeout [ 187.148895][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 187.395028][ T3930] bio_check_eod: 2440 callbacks suppressed [ 187.395049][ T3930] syz.2.74: attempt to access beyond end of device [ 187.395049][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 187.418977][ T3930] syz.2.74: attempt to access beyond end of device [ 187.418977][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 187.435641][ T3930] syz.2.74: attempt to access beyond end of device [ 187.435641][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 187.450920][ T3930] syz.2.74: attempt to access beyond end of device [ 187.450920][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 187.469171][ T3930] syz.2.74: attempt to access beyond end of device [ 187.469171][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 187.484046][ T3930] syz.2.74: attempt to access beyond end of device [ 187.484046][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 187.502090][ T3930] syz.2.74: attempt to access beyond end of device [ 187.502090][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 187.517668][ T3930] syz.2.74: attempt to access beyond end of device [ 187.517668][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 187.535047][ T3930] syz.2.74: attempt to access beyond end of device [ 187.535047][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 187.550145][ T3930] syz.2.74: attempt to access beyond end of device [ 187.550145][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 187.724826][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 187.744498][ T22] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 187.762299][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.773341][ T22] usb 2-1: config 0 descriptor?? [ 188.030196][ T4613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.265'. [ 188.158902][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 188.158923][ T27] audit: type=1326 audit(1720244079.842:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.230209][ T27] audit: type=1326 audit(1720244079.842:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.290122][ T27] audit: type=1326 audit(1720244079.842:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.323580][ T27] audit: type=1326 audit(1720244079.842:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.356829][ T27] audit: type=1326 audit(1720244079.842:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.387557][ T27] audit: type=1326 audit(1720244079.842:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.418364][ T27] audit: type=1326 audit(1720244079.842:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.451261][ T27] audit: type=1326 audit(1720244079.842:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.483958][ T27] audit: type=1326 audit(1720244079.852:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.514575][ T27] audit: type=1326 audit(1720244079.852:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4611 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feab9775bd9 code=0x7ffc0000 [ 188.553400][ T4624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.573834][ T4624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.596554][ T4624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.618619][ T4624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.655985][ T22] hid (null): invalid report_size 53675 [ 188.672018][ T22] hid (null): unknown global tag 0xd [ 188.684030][ T22] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 188.700890][ T22] hid-generic 0003:0158:0100.0006: unexpected long global item [ 188.711685][ T22] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 189.129640][ T22] usb 2-1: USB disconnect, device number 12 [ 189.453325][ T3679] bond0 (unregistering): Released all slaves [ 189.488043][ T3553] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.498204][ T3553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.507376][ T3553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.516124][ T3568] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.523913][ T3553] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 189.533331][ T3553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.075637][ T3602] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 191.105505][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.117958][ T3737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.128650][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 191.634754][ T3553] Bluetooth: hci1: command tx timeout [ 192.405708][ T3930] bio_check_eod: 2096 callbacks suppressed [ 192.405729][ T3930] syz.2.74: attempt to access beyond end of device [ 192.405729][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 192.426282][ T3930] syz.2.74: attempt to access beyond end of device [ 192.426282][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 192.442549][ T3930] syz.2.74: attempt to access beyond end of device [ 192.442549][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 192.457181][ T3930] syz.2.74: attempt to access beyond end of device [ 192.457181][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 192.473365][ T3930] syz.2.74: attempt to access beyond end of device [ 192.473365][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 192.487918][ T3930] syz.2.74: attempt to access beyond end of device [ 192.487918][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 192.504299][ T3930] syz.2.74: attempt to access beyond end of device [ 192.504299][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 192.519070][ T3930] syz.2.74: attempt to access beyond end of device [ 192.519070][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 192.535683][ T3930] syz.2.74: attempt to access beyond end of device [ 192.535683][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 192.550393][ T3930] syz.2.74: attempt to access beyond end of device [ 192.550393][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 192.563816][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.114532][ T3602] usb 1-1: Using ep0 maxpacket: 8 [ 194.003318][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.042638][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.085349][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.095292][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.104009][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.596205][ T3553] Bluetooth: hci1: command tx timeout [ 194.602839][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.732553][ T4263] device veth0_vlan entered promiscuous mode [ 194.825598][ T4649] device batadv0 entered promiscuous mode [ 195.115374][ T3602] usb 1-1: device descriptor read/all, error -71 [ 196.084471][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.092706][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.127317][ T4263] device veth1_vlan entered promiscuous mode [ 196.157416][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 196.171062][ T4660] device wlan0 entered promiscuous mode [ 196.176947][ T4660] device macsec1 entered promiscuous mode [ 196.718582][ T3553] Bluetooth: hci1: command tx timeout [ 197.414920][ T3930] bio_check_eod: 2441 callbacks suppressed [ 197.414941][ T3930] syz.2.74: attempt to access beyond end of device [ 197.414941][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.437217][ T3930] syz.2.74: attempt to access beyond end of device [ 197.437217][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 197.452345][ T3930] syz.2.74: attempt to access beyond end of device [ 197.452345][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.469022][ T3930] syz.2.74: attempt to access beyond end of device [ 197.469022][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 197.484010][ T3930] syz.2.74: attempt to access beyond end of device [ 197.484010][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.500277][ T3930] syz.2.74: attempt to access beyond end of device [ 197.500277][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 197.515068][ T3930] syz.2.74: attempt to access beyond end of device [ 197.515068][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.531259][ T3930] syz.2.74: attempt to access beyond end of device [ 197.531259][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 197.545904][ T3930] syz.2.74: attempt to access beyond end of device [ 197.545904][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.562680][ T3930] syz.2.74: attempt to access beyond end of device [ 197.562680][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 197.624490][ T3602] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 197.738392][ T4629] chnl_net:caif_netlink_parms(): no params data found [ 197.864580][ T3602] usb 1-1: Using ep0 maxpacket: 16 [ 198.014815][ T3602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 198.048503][ T3602] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 198.058515][ T3737] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.095450][ T3602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.132374][ T3602] usb 1-1: config 0 descriptor?? [ 198.174571][ T3602] usb 1-1: can't set config #0, error -71 [ 198.204522][ T3602] usb 1-1: USB disconnect, device number 25 [ 198.334625][ T3737] usb 2-1: Using ep0 maxpacket: 8 [ 198.454726][ T3737] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 198.504529][ T3737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.564244][ T3737] usb 2-1: config 0 descriptor?? [ 198.635860][ T3737] hso 2-1:0.0: Can't find BULK IN endpoint [ 198.784424][ T3553] Bluetooth: hci1: command tx timeout [ 198.843377][ T3737] usb 2-1: USB disconnect, device number 13 [ 199.096609][ T4629] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.127181][ T4629] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.175640][ T4629] device bridge_slave_0 entered promiscuous mode [ 199.216179][ T3553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.234741][ T3553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.243155][ T3553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.252719][ T3553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.260506][ T3553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.270032][ T3553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.003525][ T3568] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.028355][ T3568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.036954][ T3568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.046206][ T3568] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.055228][ T3568] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 201.062579][ T3568] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.314587][ T3568] Bluetooth: hci0: command tx timeout [ 201.524556][ T14] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 201.894588][ T14] usb 2-1: config 64 has an invalid interface number: 188 but max is 0 [ 201.906594][ T14] usb 2-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 201.920671][ T14] usb 2-1: config 64 has an invalid interface descriptor of length 2, skipping [ 201.933601][ T14] usb 2-1: config 64 has an invalid descriptor of length 196, skipping remainder of the config [ 201.949266][ T14] usb 2-1: config 64 has no interface number 0 [ 202.094712][ T4629] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.116836][ T14] usb 2-1: New USB device found, idVendor=085a, idProduct=0028, bcdDevice= 1.10 [ 202.142583][ T4629] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.150564][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.164794][ T4629] device bridge_slave_1 entered promiscuous mode [ 202.171323][ T14] usb 2-1: Product: syz [ 202.184852][ T14] usb 2-1: Manufacturer: syz [ 202.189517][ T14] usb 2-1: SerialNumber: syz [ 202.426976][ T3930] bio_check_eod: 2567 callbacks suppressed [ 202.426994][ T3930] syz.2.74: attempt to access beyond end of device [ 202.426994][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.447785][ T3930] syz.2.74: attempt to access beyond end of device [ 202.447785][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 202.465394][ T3930] syz.2.74: attempt to access beyond end of device [ 202.465394][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.480129][ T3930] syz.2.74: attempt to access beyond end of device [ 202.480129][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 202.496690][ T3930] syz.2.74: attempt to access beyond end of device [ 202.496690][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.512663][ T3930] syz.2.74: attempt to access beyond end of device [ 202.512663][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 202.528252][ T3930] syz.2.74: attempt to access beyond end of device [ 202.528252][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.543114][ T3930] syz.2.74: attempt to access beyond end of device [ 202.543114][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 202.559033][ T3930] syz.2.74: attempt to access beyond end of device [ 202.559033][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.573591][ T3930] syz.2.74: attempt to access beyond end of device [ 202.573591][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 202.645598][ T14] usb-storage 2-1:64.188: USB Mass Storage device detected [ 202.665988][ T14] usb-storage 2-1:64.188: Quirks match for vid 085a pid 0028: 4 [ 203.074627][ T3568] Bluetooth: hci2: command tx timeout [ 203.394511][ T3568] Bluetooth: hci0: command tx timeout [ 204.119161][ T14] usb 2-1: USB disconnect, device number 14 [ 204.262097][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 204.280650][ T4696] device wlan0 entered promiscuous mode [ 204.286449][ T4696] device macsec1 entered promiscuous mode [ 205.012712][ T4629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.068434][ T4629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.254537][ T4629] team0: Port device team_slave_0 added [ 205.418873][ T4629] team0: Port device team_slave_1 added [ 205.628694][ T4629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.643687][ T4629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.762554][ T4629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.827451][ T4629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.858169][ T4629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.978331][ T4629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.077610][ T3568] Bluetooth: hci2: command tx timeout [ 206.083085][ T3568] Bluetooth: hci0: command tx timeout [ 206.585588][ T4709] fuse: Bad value for 'rootmode' [ 206.627903][ T4709] netlink: 'syz.2.293': attribute type 11 has an invalid length. [ 207.435378][ T3930] bio_check_eod: 2848 callbacks suppressed [ 207.435400][ T3930] syz.2.74: attempt to access beyond end of device [ 207.435400][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.455924][ T3930] syz.2.74: attempt to access beyond end of device [ 207.455924][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 207.472091][ T3930] syz.2.74: attempt to access beyond end of device [ 207.472091][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.486747][ T3930] syz.2.74: attempt to access beyond end of device [ 207.486747][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 207.503085][ T3930] syz.2.74: attempt to access beyond end of device [ 207.503085][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.518441][ T3930] syz.2.74: attempt to access beyond end of device [ 207.518441][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 207.534689][ T3930] syz.2.74: attempt to access beyond end of device [ 207.534689][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.549821][ T3930] syz.2.74: attempt to access beyond end of device [ 207.549821][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 207.566066][ T3930] syz.2.74: attempt to access beyond end of device [ 207.566066][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.580747][ T3930] syz.2.74: attempt to access beyond end of device [ 207.580747][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.596865][ T3818] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 208.674475][ T3568] Bluetooth: hci0: command tx timeout [ 208.680574][ T3568] Bluetooth: hci2: command tx timeout [ 208.791484][ T4629] device hsr_slave_0 entered promiscuous mode [ 208.824969][ T4629] device hsr_slave_1 entered promiscuous mode [ 208.857820][ T3818] usb 2-1: Using ep0 maxpacket: 16 [ 209.459779][ T3818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 209.582701][ T4691] chnl_net:caif_netlink_parms(): no params data found [ 210.044385][ T3818] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 210.059836][ T3818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.760430][ T3567] Bluetooth: hci2: command tx timeout [ 211.132168][ T4680] chnl_net:caif_netlink_parms(): no params data found [ 211.394578][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.424603][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.498835][ T4691] device bridge_slave_0 entered promiscuous mode [ 211.571792][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.601457][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.633152][ T4691] device bridge_slave_1 entered promiscuous mode [ 211.792710][ T4691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.848899][ T4691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.936368][ T4680] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.964787][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.988174][ T4680] device bridge_slave_0 entered promiscuous mode [ 212.045189][ T4680] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.063102][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.081963][ T4680] device bridge_slave_1 entered promiscuous mode [ 212.089524][ T3818] usb 2-1: config 0 descriptor?? [ 212.114533][ T3818] usb 2-1: can't set config #0, error -71 [ 212.444519][ T3930] bio_check_eod: 1997 callbacks suppressed [ 212.444545][ T3930] syz.2.74: attempt to access beyond end of device [ 212.444545][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.468148][ T3930] syz.2.74: attempt to access beyond end of device [ 212.468148][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.483162][ T3930] syz.2.74: attempt to access beyond end of device [ 212.483162][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.500722][ T3930] syz.2.74: attempt to access beyond end of device [ 212.500722][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.515445][ T3930] syz.2.74: attempt to access beyond end of device [ 212.515445][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.532457][ T3930] syz.2.74: attempt to access beyond end of device [ 212.532457][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.547584][ T3930] syz.2.74: attempt to access beyond end of device [ 212.547584][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.564534][ T3930] syz.2.74: attempt to access beyond end of device [ 212.564534][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.579402][ T3930] syz.2.74: attempt to access beyond end of device [ 212.579402][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.595765][ T3930] syz.2.74: attempt to access beyond end of device [ 212.595765][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.657906][ T4744] fuse: Bad value for 'rootmode' [ 212.685340][ T4744] netlink: 'syz.2.303': attribute type 11 has an invalid length. [ 213.088305][ T3818] usb 2-1: USB disconnect, device number 15 [ 213.143141][ T4691] team0: Port device team_slave_0 added [ 213.152828][ T4691] team0: Port device team_slave_1 added [ 214.320876][ T4629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.704514][ T3598] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 215.954469][ T3598] usb 3-1: Using ep0 maxpacket: 16 [ 216.074550][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 216.087753][ T3598] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 216.121245][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.158390][ T3598] usb 3-1: config 0 descriptor?? [ 216.181576][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.198686][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.457209][ T4760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 216.503208][ T4691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.518110][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.525239][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.552103][ T4691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.677151][ T4629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.721741][ T4680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.743738][ T4691] device hsr_slave_0 entered promiscuous mode [ 216.764703][ T4691] device hsr_slave_1 entered promiscuous mode [ 216.779160][ T4691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.794012][ T4691] Cannot create hsr debugfs directory [ 216.833119][ T4629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.863228][ T4680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.937442][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.962322][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.974825][ T4629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.002205][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.057230][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.330206][ T4680] team0: Port device team_slave_0 added [ 217.411301][ T4768] sp0: Synchronizing with TNC [ 217.420293][ T4680] team0: Port device team_slave_1 added [ 217.455950][ T3930] bio_check_eod: 2301 callbacks suppressed [ 217.455967][ T3930] syz.2.74: attempt to access beyond end of device [ 217.455967][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.476736][ T3930] syz.2.74: attempt to access beyond end of device [ 217.476736][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.493672][ T3930] syz.2.74: attempt to access beyond end of device [ 217.493672][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.508292][ T3930] syz.2.74: attempt to access beyond end of device [ 217.508292][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.524252][ T3930] syz.2.74: attempt to access beyond end of device [ 217.524252][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.539675][ T3930] syz.2.74: attempt to access beyond end of device [ 217.539675][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.556409][ T3930] syz.2.74: attempt to access beyond end of device [ 217.556409][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.571036][ T3930] syz.2.74: attempt to access beyond end of device [ 217.571036][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.587193][ T3930] syz.2.74: attempt to access beyond end of device [ 217.587193][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.601593][ T3930] syz.2.74: attempt to access beyond end of device [ 217.601593][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.170062][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.192792][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.300387][ T4680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.434543][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.442707][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.696648][ T3598] hid (null): invalid report_size 53675 [ 218.703315][ T3598] hid (null): unknown global tag 0xd [ 218.711392][ T3598] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 218.732820][ T3598] hid-generic 0003:0158:0100.0007: unexpected long global item [ 218.747841][ T4680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.766525][ T3598] hid-generic: probe of 0003:0158:0100.0007 failed with error -22 [ 218.803546][ T3598] usb 3-1: USB disconnect, device number 5 [ 220.318265][ T4680] device hsr_slave_0 entered promiscuous mode [ 220.371872][ T4680] device hsr_slave_1 entered promiscuous mode [ 220.415427][ T4680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.451588][ T4680] Cannot create hsr debugfs directory [ 221.042584][ T4629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.064197][ T4629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.153579][ T4629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.231889][ T4629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.473500][ T4791] sp0: Synchronizing with TNC [ 221.784410][ T4791] sp0: Synchronizing with TNC [ 221.980652][ T4629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.088622][ T3679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.465196][ T3930] bio_check_eod: 2473 callbacks suppressed [ 222.465219][ T3930] syz.2.74: attempt to access beyond end of device [ 222.465219][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.488001][ T3930] syz.2.74: attempt to access beyond end of device [ 222.488001][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.503292][ T3930] syz.2.74: attempt to access beyond end of device [ 222.503292][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.519969][ T3930] syz.2.74: attempt to access beyond end of device [ 222.519969][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.535568][ T3930] syz.2.74: attempt to access beyond end of device [ 222.535568][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.540867][ T3679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.553228][ T3930] syz.2.74: attempt to access beyond end of device [ 222.553228][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.575514][ T3930] syz.2.74: attempt to access beyond end of device [ 222.575514][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.591923][ T3930] syz.2.74: attempt to access beyond end of device [ 222.591923][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.606965][ T3930] syz.2.74: attempt to access beyond end of device [ 222.606965][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.623455][ T3930] syz.2.74: attempt to access beyond end of device [ 222.623455][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.685756][ T3606] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 222.944556][ T3606] usb 3-1: Using ep0 maxpacket: 16 [ 223.073251][ T3606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 223.104643][ T3606] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 223.133320][ T3606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.205672][ T3606] usb 3-1: config 0 descriptor?? [ 223.465889][ T4801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'. [ 223.889096][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.919924][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.948441][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.987201][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.055748][ T3606] hid (null): invalid report_size 53675 [ 224.063049][ T3606] hid (null): unknown global tag 0xd [ 224.091523][ T4629] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.253215][ T3606] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 224.297593][ T3606] hid-generic 0003:0158:0100.0008: unexpected long global item [ 224.337951][ T3606] hid-generic: probe of 0003:0158:0100.0008 failed with error -22 [ 224.389265][ T3606] usb 3-1: USB disconnect, device number 6 [ 224.757035][ T14] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 225.094800][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.103657][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.112915][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.214977][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 226.087662][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.104975][ T3819] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.112156][ T3819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.144724][ T14] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 226.185141][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.234088][ T14] usb 2-1: config 0 descriptor?? [ 226.305516][ T14] hso 2-1:0.0: Can't find BULK IN endpoint [ 226.510281][ T14] usb 2-1: USB disconnect, device number 16 [ 226.914720][ T3567] Bluetooth: hci5: command 0x0406 tx timeout [ 227.094963][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.104267][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.113433][ T3819] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.122048][ T3819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.482116][ T3930] bio_check_eod: 2425 callbacks suppressed [ 227.482236][ T3930] syz.2.74: attempt to access beyond end of device [ 227.482236][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.506225][ T3930] syz.2.74: attempt to access beyond end of device [ 227.506225][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.532093][ T3930] syz.2.74: attempt to access beyond end of device [ 227.532093][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.549848][ T3930] syz.2.74: attempt to access beyond end of device [ 227.549848][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.573576][ T3930] syz.2.74: attempt to access beyond end of device [ 227.573576][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.590923][ T3930] syz.2.74: attempt to access beyond end of device [ 227.590923][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.616589][ T3930] syz.2.74: attempt to access beyond end of device [ 227.616589][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.634253][ T3930] syz.2.74: attempt to access beyond end of device [ 227.634253][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.660120][ T3930] syz.2.74: attempt to access beyond end of device [ 227.660120][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.678575][ T3930] syz.2.74: attempt to access beyond end of device [ 227.678575][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.114859][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.836009][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.852460][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.955601][ T3679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.051838][ T4629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.092750][ T4629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.785564][ T4629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.217070][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.260048][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.300302][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.343425][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.365568][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.394515][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.405835][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.089030][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.101468][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.109865][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.486496][ T3930] bio_check_eod: 2282 callbacks suppressed [ 232.486525][ T3930] syz.2.74: attempt to access beyond end of device [ 232.486525][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.508352][ T3930] syz.2.74: attempt to access beyond end of device [ 232.508352][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 232.527803][ T3930] syz.2.74: attempt to access beyond end of device [ 232.527803][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.544674][ T3930] syz.2.74: attempt to access beyond end of device [ 232.544674][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 232.561136][ T3930] syz.2.74: attempt to access beyond end of device [ 232.561136][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.576883][ T3930] syz.2.74: attempt to access beyond end of device [ 232.576883][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 232.593902][ T3930] syz.2.74: attempt to access beyond end of device [ 232.593902][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.608656][ T3930] syz.2.74: attempt to access beyond end of device [ 232.608656][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 232.625493][ T3930] syz.2.74: attempt to access beyond end of device [ 232.625493][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.641450][ T3930] syz.2.74: attempt to access beyond end of device [ 232.641450][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.137651][ T3679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.088549][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.097535][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.754570][ T3606] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 235.004505][ T3606] usb 3-1: Using ep0 maxpacket: 8 [ 235.144935][ T3606] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 235.165188][ T3606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.231195][ T3606] usb 3-1: config 0 descriptor?? [ 235.287160][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.305415][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.315767][ T3606] hso 3-1:0.0: Can't find BULK IN endpoint [ 235.386585][ T4629] device veth0_vlan entered promiscuous mode [ 235.414286][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.442880][ T3606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.489940][ T4629] device veth1_vlan entered promiscuous mode [ 235.520660][ T3737] usb 3-1: USB disconnect, device number 7 [ 235.552691][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.583808][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.618933][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.746469][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.776537][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.807267][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.860601][ T4629] device veth0_macvtap entered promiscuous mode [ 235.911392][ T4629] device veth1_macvtap entered promiscuous mode [ 236.011351][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.083818][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.150479][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.191409][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.245200][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.363584][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.414582][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.470087][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.532325][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.596921][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.647767][ T4629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.494733][ T3930] bio_check_eod: 2436 callbacks suppressed [ 237.494757][ T3930] syz.2.74: attempt to access beyond end of device [ 237.494757][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.516982][ T3930] syz.2.74: attempt to access beyond end of device [ 237.516982][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.533521][ T3930] syz.2.74: attempt to access beyond end of device [ 237.533521][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.548807][ T3930] syz.2.74: attempt to access beyond end of device [ 237.548807][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.567327][ T3930] syz.2.74: attempt to access beyond end of device [ 237.567327][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.582085][ T3930] syz.2.74: attempt to access beyond end of device [ 237.582085][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.599754][ T3930] syz.2.74: attempt to access beyond end of device [ 237.599754][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.614521][ T3930] syz.2.74: attempt to access beyond end of device [ 237.614521][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.631358][ T3930] syz.2.74: attempt to access beyond end of device [ 237.631358][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.646529][ T3930] syz.2.74: attempt to access beyond end of device [ 237.646529][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.109354][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.165412][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.224797][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.275936][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.326110][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.384573][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.445399][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.534447][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.604416][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.676201][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.731959][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.803664][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.835167][ T28] INFO: task syz.2.74:3952 blocked for more than 143 seconds. [ 238.844109][ T28] Not tainted 6.1.97-syzkaller #0 [ 238.894803][ T4629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.907571][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.937071][ T4629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.978146][ T28] task:syz.2.74 state:D stack:25856 pid:3952 ppid:3558 flags:0x00004004 [ 239.025826][ T28] Call Trace: [ 239.041451][ T28] [ 239.058263][ T28] __schedule+0x142d/0x4550 [ 239.070709][ T4629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.080562][ T28] ? __sched_text_start+0x8/0x8 [ 239.088647][ T28] ? print_irqtrace_events+0x210/0x210 [ 239.097407][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 239.104931][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 239.110679][ T28] schedule+0xbf/0x180 [ 239.117325][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 239.118670][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.187010][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.233988][ T4629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.252917][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 239.288274][ T28] ? down_write_killable_nested+0x90/0x90 [ 239.299878][ T4629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.332498][ T28] ? read_lock_is_recursive+0x10/0x10 [ 239.358774][ T4629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.378646][ T28] ? ima_lsm_policy_change+0x620/0x620 [ 239.404156][ T28] ? rwsem_write_trylock+0x166/0x210 [ 239.423451][ T4629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.442965][ T28] ? clear_nonspinnable+0x60/0x60 [ 239.471661][ T28] process_measurement+0x446/0x21b0 [ 239.531427][ T28] ? mark_lock+0x9a/0x340 [ 239.577676][ T28] ? ima_file_mmap+0x1c0/0x1c0 [ 239.609411][ T28] ? dquot_initialize+0x20/0x20 [ 239.639671][ T28] ? aa_get_current_label+0x111/0x1d0 [ 239.692289][ T28] ? apparmor_current_getsecid_subj+0xac/0x110 [ 239.729610][ T28] ima_file_check+0xed/0x170 [ 239.759316][ T28] ? do_dentry_open+0xce4/0x10f0 [ 239.794708][ T28] ? ima_bprm_check+0x2b0/0x2b0 [ 239.827214][ T28] path_openat+0x2687/0x2e60 [ 239.881065][ T28] ? mark_lock+0x9a/0x340 [ 239.903565][ T28] ? do_filp_open+0x480/0x480 [ 239.934696][ T28] do_filp_open+0x230/0x480 [ 239.954817][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 239.981366][ T28] ? _raw_spin_unlock+0x24/0x40 [ 240.001187][ T28] ? alloc_fd+0x59c/0x640 [ 240.025727][ T28] do_sys_openat2+0x13b/0x500 [ 240.051383][ T28] ? do_sys_open+0x220/0x220 [ 240.075302][ T28] __x64_sys_openat+0x243/0x290 [ 240.098536][ T28] ? __ia32_sys_open+0x270/0x270 [ 240.116396][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 240.138787][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 240.156922][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 240.197953][ T28] do_syscall_64+0x3b/0xb0 [ 240.218161][ T28] ? clear_bhb_loop+0x45/0xa0 [ 240.246694][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.283298][ T28] RIP: 0033:0x7fbbf4f75bd9 [ 240.301497][ T28] RSP: 002b:00007fbbf5e1b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.338233][ T28] RAX: ffffffffffffffda RBX: 00007fbbf5104038 RCX: 00007fbbf4f75bd9 [ 240.378659][ T28] RDX: 0000000000183341 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 240.439876][ T28] RBP: 00007fbbf4fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 240.476780][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.513139][ T28] R13: 000000000000006e R14: 00007fbbf5104038 R15: 00007fffb79e5b08 [ 240.548527][ T28] [ 240.564858][ T28] INFO: task syz.2.74:3953 blocked for more than 144 seconds. [ 240.610348][ T28] Not tainted 6.1.97-syzkaller #0 [ 240.634132][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 240.671288][ T28] task:syz.2.74 state:D stack:26040 pid:3953 ppid:3558 flags:0x00004004 [ 240.725133][ T28] Call Trace: [ 240.740314][ T28] [ 240.752493][ T28] __schedule+0x142d/0x4550 [ 240.779993][ T28] ? __sched_text_start+0x8/0x8 [ 240.803402][ T28] ? print_irqtrace_events+0x210/0x210 [ 240.828303][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 240.850460][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 240.873977][ T28] schedule+0xbf/0x180 [ 240.898015][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 240.923061][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 240.951837][ T28] ? down_write_killable_nested+0x90/0x90 [ 240.974528][ T28] ? read_lock_is_recursive+0x10/0x10 [ 240.993469][ T28] ? rwsem_write_trylock+0x166/0x210 [ 241.077253][ T28] ? clear_nonspinnable+0x60/0x60 [ 241.082488][ T28] f2fs_issue_checkpoint+0x2d2/0x4d0 [ 241.088565][ T28] ? f2fs_destroy_checkpoint_caches+0x20/0x20 [ 241.094907][ T28] ? d_instantiate_new+0x7b/0x110 [ 241.099982][ T28] ? f2fs_create+0x7a7/0xa10 [ 241.108195][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 241.363625][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 241.382571][ T28] ? f2fs_sync_fs+0x201/0x410 [ 241.399476][ T28] f2fs_create+0x862/0xa10 [ 241.426714][ T28] ? f2fs_lookup+0xae0/0xae0 [ 241.444783][ T28] path_openat+0x12f1/0x2e60 [ 241.467654][ T28] ? do_filp_open+0x480/0x480 [ 241.489520][ T28] do_filp_open+0x230/0x480 [ 241.520217][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 241.545677][ T28] ? _raw_spin_unlock+0x24/0x40 [ 241.560653][ T28] ? alloc_fd+0x59c/0x640 [ 241.575394][ T28] do_sys_openat2+0x13b/0x500 [ 241.591526][ T28] ? do_sys_open+0x220/0x220 [ 241.610520][ T28] __x64_sys_openat+0x243/0x290 [ 241.626829][ T28] ? __ia32_sys_open+0x270/0x270 [ 241.644243][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 241.668280][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 241.689847][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 241.719997][ T28] do_syscall_64+0x3b/0xb0 [ 241.741276][ T28] ? clear_bhb_loop+0x45/0xa0 [ 241.756542][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.777903][ T28] RIP: 0033:0x7fbbf4f75bd9 [ 241.792630][ T28] RSP: 002b:00007fbbf5dfa048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 241.824928][ T28] RAX: ffffffffffffffda RBX: 00007fbbf5104110 RCX: 00007fbbf4f75bd9 [ 241.859770][ T28] RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 241.884469][ T28] RBP: 00007fbbf4fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 241.912248][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.939564][ T28] R13: 000000000000006e R14: 00007fbbf5104110 R15: 00007fffb79e5b08 [ 241.968100][ T28] [ 241.978907][ T28] [ 241.978907][ T28] Showing all locks held in the system: [ 242.006837][ T28] 3 locks held by kworker/u4:1/11: [ 242.032996][ T28] 1 lock held by rcu_tasks_kthre/12: [ 242.063275][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 242.079529][ T28] 1 lock held by rcu_tasks_trace/13: [ 242.085771][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 242.098179][ T28] 2 locks held by kworker/0:1/14: [ 242.103245][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 242.114522][ T28] #1: ffffc90000137d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 242.245737][ T28] 1 lock held by khungtaskd/28: [ 242.261255][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 242.296812][ T28] 3 locks held by kworker/1:2/935: [ 242.313739][ T28] #0: ffff88814b921138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 242.356333][ T28] #1: ffffc90004defd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 242.395137][ T28] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 242.433119][ T28] 1 lock held by dhcpcd/3217: [ 242.459158][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 242.490126][ T28] 2 locks held by getty/3309: [ 242.505237][ T28] #0: ffff8880288d6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 242.506805][ T3930] bio_check_eod: 2494 callbacks suppressed [ 242.506823][ T3930] syz.2.74: attempt to access beyond end of device [ 242.506823][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.537156][ T3930] syz.2.74: attempt to access beyond end of device [ 242.537156][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.549662][ T28] #1: [ 242.553935][ T3930] syz.2.74: attempt to access beyond end of device [ 242.553935][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.554880][ T28] ffffc900031262f0 [ 242.557669][ T3930] syz.2.74: attempt to access beyond end of device [ 242.557669][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.592859][ T3930] syz.2.74: attempt to access beyond end of device [ 242.592859][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.601961][ T28] ( [ 242.608583][ T3930] syz.2.74: attempt to access beyond end of device [ 242.608583][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.629398][ T28] &ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 242.629459][ T3930] syz.2.74: attempt to access beyond end of device [ 242.629459][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.654053][ T3930] syz.2.74: attempt to access beyond end of device [ 242.654053][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.671133][ T3930] syz.2.74: attempt to access beyond end of device [ 242.671133][ T3930] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.686965][ T3930] syz.2.74: attempt to access beyond end of device [ 242.686965][ T3930] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.691383][ T28] 3 locks held by kworker/0:7/3602: [ 242.741154][ T28] #0: ffff88814b921138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 242.785974][ T28] #1: ffffc90004bbfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 242.827785][ T28] #2: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 242.865961][ T28] 4 locks held by kworker/u4:7/3678: [ 242.897954][ T28] #0: ffff888018a60138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 242.941588][ T28] #1: ffffc90004ee7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 242.984789][ T28] #2: ffff8880583220e0 (&type->s_umount_key#57){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 243.019425][ T28] #3: ffff888078ad1140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 243.057186][ T28] 4 locks held by kworker/u4:8/3679: [ 243.072977][ T28] 5 locks held by syz.2.74/3930: [ 243.090534][ T28] 2 locks held by syz.2.74/3952: [ 243.102982][ T28] #0: ffff888058322460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 243.119279][ T28] #1: ffff88805df0a4d0 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 243.145012][ T28] 3 locks held by syz.2.74/3953: [ 243.151377][ T28] #0: ffff888058322460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 243.175917][ T28] #1: ffff88805df09bf0 (&type->i_mutex_dir_key#12){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 243.222399][ T28] #2: ffff888078ad1140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x2d2/0x4d0 [ 243.259430][ T28] 3 locks held by syz-executor/4629: [ 243.277318][ T28] #0: ffffffff8e299b68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 243.308546][ T28] #1: ffff88807a6a13e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x224/0x410 [ 243.341928][ T28] #2: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 243.378503][ T28] 5 locks held by syz-executor/4680: [ 243.397442][ T28] #0: ffff88807e960460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xba0 [ 243.430243][ T28] #1: ffff888022299088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 243.463254][ T28] #2: ffff8881453c1a00 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 243.506302][ T28] #3: ffffffff8dc0cf08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 243.541855][ T28] #4: ffff888078a6f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880 [ 243.577721][ T28] 4 locks held by syz-executor/4691: [ 243.596923][ T28] #0: ffff88807e960460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xba0 [ 243.626960][ T28] #1: ffff88805b4da488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 243.659861][ T28] #2: ffff8881453c1918 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 243.697185][ T28] #3: ffffffff8dc0cf08 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 243.732406][ T28] 4 locks held by kvm-nx-lpage-re/4896: [ 243.754495][ T28] #0: ffffffff8d153528 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x23/0xe0 [ 243.795412][ T28] #1: ffffffff8cfc80f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30 [ 243.832253][ T28] #2: ffffffff8d153710 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2d/0xe0 [ 243.870406][ T28] #3: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 243.913024][ T28] [ 243.926652][ T28] ============================================= [ 243.926652][ T28] [ 243.959670][ T28] NMI backtrace for cpu 0 [ 243.964301][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 243.972672][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 243.983741][ T28] Call Trace: [ 243.987065][ T28] [ 243.990244][ T28] dump_stack_lvl+0x1e3/0x2cb [ 243.995069][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 244.000943][ T28] ? panic+0x764/0x764 [ 244.005228][ T28] ? vprintk_emit+0x622/0x740 [ 244.010533][ T28] ? printk_sprint+0x490/0x490 [ 244.015364][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 244.020731][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 244.025990][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 244.032272][ T28] ? _printk+0xd1/0x111 [ 244.037052][ T28] ? panic+0x764/0x764 [ 244.041356][ T28] ? __wake_up_klogd+0xcc/0x100 [ 244.046804][ T28] ? panic+0x764/0x764 [ 244.051272][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 244.057642][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 244.064304][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 244.070432][ T28] watchdog+0xf88/0xfd0 [ 244.074650][ T28] ? watchdog+0x1f8/0xfd0 [ 244.079199][ T28] kthread+0x28d/0x320 [ 244.083417][ T28] ? hungtask_pm_notify+0x50/0x50 [ 244.088896][ T28] ? kthread_blkcg+0xd0/0xd0 [ 244.093535][ T28] ret_from_fork+0x1f/0x30 [ 244.098812][ T28] [ 244.103255][ T28] Sending NMI from CPU 0 to CPUs 1: [ 244.109554][ C1] NMI backtrace for cpu 1 [ 244.109566][ C1] CPU: 1 PID: 3679 Comm: kworker/u4:8 Not tainted 6.1.97-syzkaller #0 [ 244.109585][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 244.109597][ C1] Workqueue: netns cleanup_net [ 244.109627][ C1] RIP: 0010:rcu_is_watching+0x2/0xb0 [ 244.109647][ C1] Code: 44 24 21 02 0f 84 02 ff ff ff e9 6c ff ff ff 48 c7 c7 60 16 13 8d 4c 89 f6 e8 4a 67 f0 02 e9 2b ff ff ff e8 c0 dd 17 09 41 57 <41> 56 53 65 ff 05 7c 23 8f 7e e8 ff f5 17 09 89 c3 83 f8 08 73 76 [ 244.109662][ C1] RSP: 0018:ffffc90004ef77d0 EFLAGS: 00000257 [ 244.109676][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff816a8db7 [ 244.109689][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e7380a8 [ 244.109701][ C1] RBP: ffffc90004ef7910 R08: dffffc0000000000 R09: fffffbfff1ce7016 [ 244.109714][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920009def08 [ 244.109727][ C1] R13: ffffffff8a881fb5 R14: dffffc0000000000 R15: dffffc0000000000 [ 244.109747][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 244.109762][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.109775][ C1] CR2: 00007fe1b0d9cd58 CR3: 000000000ce8e000 CR4: 00000000003526e0 [ 244.109790][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.109801][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.109812][ C1] Call Trace: [ 244.109819][ C1] [ 244.109825][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 244.109853][ C1] ? read_lock_is_recursive+0x10/0x10 [ 244.109881][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 244.109909][ C1] ? nmi_handle+0x25/0x440 [ 244.109943][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 244.109970][ C1] ? nmi_handle+0x12e/0x440 [ 244.109996][ C1] ? nmi_handle+0x25/0x440 [ 244.110022][ C1] ? rcu_is_watching+0x2/0xb0 [ 244.110037][ C1] ? default_do_nmi+0x62/0x150 [ 244.110055][ C1] ? exc_nmi+0xa8/0x100 [ 244.110072][ C1] ? end_repeat_nmi+0x16/0x31 [ 244.110097][ C1] ? xa_get_mark+0x175/0x680 [ 244.110124][ C1] ? lock_release+0xc7/0xa20 [ 244.110148][ C1] ? rcu_is_watching+0x2/0xb0 [ 244.110164][ C1] ? rcu_is_watching+0x2/0xb0 [ 244.110181][ C1] ? rcu_is_watching+0x2/0xb0 [ 244.110197][ C1] [ 244.110201][ C1] [ 244.110207][ C1] lock_release+0xd6/0xa20 [ 244.110233][ C1] ? read_lock_is_recursive+0x10/0x10 [ 244.110259][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 244.110291][ C1] ? xa_get_mark+0x175/0x680 [ 244.110315][ C1] xa_get_mark+0x604/0x680 [ 244.110340][ C1] ? xa_get_mark+0x175/0x680 [ 244.110366][ C1] ? __xa_clear_mark+0x2f0/0x2f0 [ 244.110394][ C1] ? devlinks_xa_find_get+0x12b/0x2d0 [ 244.110416][ C1] ? xa_clear_mark+0x2c0/0x2c0 [ 244.110440][ C1] ? devlinks_xa_find_get+0x29/0x2d0 [ 244.110458][ C1] devlinks_xa_find_get+0x122/0x2d0 [ 244.110478][ C1] ? devlinks_xa_find_get+0x29/0x2d0 [ 244.110500][ C1] devlink_pernet_pre_exit+0xd6/0x2c0 [ 244.110528][ C1] ? devlink_trap_notify+0x1b0/0x1b0 [ 244.110552][ C1] ? nfct_timeout_pernet+0x1ef/0x230 [ 244.110572][ C1] ? cttimeout_net_pre_exit+0x1e0/0x1f0 [ 244.110593][ C1] cleanup_net+0x59c/0xb60 [ 244.110621][ C1] ? ops_free_list+0x3b0/0x3b0 [ 244.110650][ C1] ? process_one_work+0x7a9/0x11d0 [ 244.110670][ C1] process_one_work+0x8a9/0x11d0 [ 244.110699][ C1] ? worker_detach_from_pool+0x260/0x260 [ 244.110721][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 244.110748][ C1] ? kthread_data+0x4e/0xc0 [ 244.110776][ C1] ? wq_worker_running+0x97/0x190 [ 244.110805][ C1] worker_thread+0xa47/0x1200 [ 244.110826][ C1] ? _raw_spin_unlock+0x40/0x40 [ 244.110848][ C1] ? __sched_text_start+0x8/0x8 [ 244.110876][ C1] ? _raw_spin_unlock+0x40/0x40 [ 244.110903][ C1] kthread+0x28d/0x320 [ 244.110918][ C1] ? worker_clr_flags+0x190/0x190 [ 244.110937][ C1] ? kthread_blkcg+0xd0/0xd0 [ 244.110953][ C1] ret_from_fork+0x1f/0x30 [ 244.110985][ C1] [ 244.641326][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 244.649030][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 244.658028][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 244.672888][ T28] Call Trace: [ 244.676485][ T28] [ 244.679784][ T28] dump_stack_lvl+0x1e3/0x2cb [ 244.684704][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 244.690575][ T28] ? panic+0x764/0x764 [ 244.695480][ T28] ? llist_add_batch+0x160/0x1d0 [ 244.701092][ T28] ? vscnprintf+0x59/0x80 [ 244.705498][ T28] panic+0x318/0x764 [ 244.712236][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 244.719846][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 244.725401][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 244.732645][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 244.739430][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 244.745651][ T28] watchdog+0xfc7/0xfd0 [ 244.749864][ T28] ? watchdog+0x1f8/0xfd0 [ 244.754492][ T28] kthread+0x28d/0x320 [ 244.760448][ T28] ? hungtask_pm_notify+0x50/0x50 [ 244.767091][ T28] ? kthread_blkcg+0xd0/0xd0 [ 244.771739][ T28] ret_from_fork+0x1f/0x30 [ 244.776318][ T28] [ 244.780259][ T28] Kernel Offset: disabled [ 244.785140][ T28] Rebooting in 86400 seconds..