last executing test programs: 14.279519554s ago: executing program 0 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$sock_int(r1, 0x1, 0x4, 0x0, 0x0) 13.383932518s ago: executing program 3 (id=657): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x2de, &(0x7f00000003c0)="$eJzs3bGLI1UcB/Df7a6erNwlhQgK4kMbbYZNaosLsguHAUUvggrCnDvRkEmyZEIgh7h2tv4TFieWgoUg/gPb+DfYbbPlFYeRuzlzG1kr9QK3n0/zvvDLN7zHg2G6OX3r29GwX2X9fBZbN67Ezo2IrXtXohlbsR21r+PN7346e+WDjz5+p9Pt7r+f0kHnVqudUrr+6i+ffPnDa7/Onv/wx+s/X42T5qenZ+3fT148een0j1tfDKo0qNJ4Mkt5uj2ZzPLbZZEOB9UwS+m9ssirIg3GVTFdm/fLydHRIuXjw2u7R9OiqlI+XqRhsUizSZpNFyn/PB+MU5Zl6dpu8G/0vr+3XMbZsrbp3fDkuf/Lzf1fbu7/cjv3UvdcxOibeW/eq9d63unHIMooYi8acT9iuVLng5vd/b30UDPujo4f9Y/nve31fisa0by436r7ab3/TOye77ejES9c3G9f2H823nj9XD+LRvz2WUyijMN40H3c/6qV0tvvdv/Wv/rwdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADydsrTSjLuj43lv3ot4sG7X8+yf5nW/049BlFHEXjTifsRypc4HN7v7e4/+YL2/Ey/vbPbsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCXanFnmJdlMRUEQViFTT+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ml7/NHvTe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATaoWd4Z5WRbT/zFs+owAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwX/kzAAD//3/b5DI=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12.489516411s ago: executing program 4 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)) 11.255488551s ago: executing program 4 (id=661): io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="8d5deea6fee55c0e6cadc87aee0e7011ca6e4cf4c17c01c7a8c4508a7330886f33a7e25d082ead6f7ac99aa662b61987570a1171057bcb2888d411fd2a7c869847f830bc98437fffc84873e7d0e65c0cf7014748eb920ba5d50be661aa42b1f3b0229def38997ba0d41d835e54c48d409f68f35737d979ed8dbba9c1adf39482c65c71a761820277d3353104e000557663842307b0fad32da6daac31aec673e0c2524d537efac90fae0e130276", 0xad}]) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 10.325826337s ago: executing program 0 (id=663): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}}}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8}, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001640), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000002740)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB="0400fefffffffddbdf2511000000080015000000000008001500c100000008001500c000000008000100", @ANYBLOB="e75c304ae877a463218c951c612ef29f2ca527a754724c5c3146dd796cc774157d8823a243cd75fdb3256e847593ac5f8853da6c67da93fd89203a2abe2f6d162e544ef9dbdcb7f364c9efd2eaf5e886f071935ec2efbb073f30016dce6907b07682f84c72cda22b99891f89c047a6482cdbd9593da78478d2edb7d9e2c61474ddba1b466314d1a1a0a64ef64a170c9ec3582aa031288034f335364190c0549e3861d131c3b6541cb73fc73476bf091adc4db06150d2ea3e8f456ed5afab2fa5d6bf54cbc08f7041207c777e02d9bf48baa5b3ae35243e27280edab432317c3e5ae97eb378483f2fc3495d65b6626aa075ad9bf8646dfae049a1c89a77effbaedcf9c9c50e5e8ecd075a1ec751017cf12f0ba676dca3d7b2b787b8901886c21c015bad6b2400dd6c31e2428184d14b9b33d3a30cd7e4806b47fc7ac3143645059ac1a9764da8ce6b2d4c257ccffaad1fedb2832ed930129b530c331a0a78b372b45a76be81fbfcbd5a06f6e06c53304c37b08eb7f0ecdfb6fbd5c3b82f774b236127fab0a408d5f0969e8862ab99ef71f8f4455c801aa1268fbbdc696611d8ad6dfadfe3ae62c9ff7184321cf6ec9c23fbe47ef0a5cde5e142bfdab117bf98dc0c8e2961b0dec6977768b90935182c1b2335b590146861916aa516ea51c6f66c50d8c85bb9b0093c9627637094aa75fe36ed72be108947902a1dbb686c60fb534f54cedff98cae3b9610839793c33ca8e65926ab3c17d2168e02c6ab84e177794058494ba794a54c43784265a680190711008a8b73a506d804124a0ec7c73799f1aa37be3dbd211f7cfbe2e2a3ded3777399f6cfdacb01c9ab2427987855e5947c1dfd6ba57d933428e9289449fc18df18db01ca30ce582d04378062a7e069aed55b53d18566e992db695a394cdcd7d3773b93628a37065f10d0c9469219b01dc646ed2039380d05f07f8dc75f4f97c81f0059a2d26a6a092f72f20185fd9d13a6f431f0bd47f87e6a61499af9be07c4b7e5e76708345698842e429cd04a8d0ad63f7c19a4e5090137b89b61015d64b9c57a79fa833ae4fc71cd68f431e849ae5f071e357464a6fed0f2513127757ad7a100b61fb2e4cb3d8005e63243c26813673a25e63bad59f3920581c884432a311ff4077e6fe6bccd5b1e2d749623bf73f090b302d3b3d4c922617701713268ad478ca29c2b389d6ac045955ad29f8cb0703d5e042d69980823caec799af547159f2394d90f7d304bbbe179411b0b18193ac64726ca0e3b8a1047b80434f27b9d8179672bb505d2308f562c6e6f92e1719521b1e10a59a334ab364c99413f399dd04975c7504bd461112399973f12c14c2295bfdb9dce27c41026535e55b64ad4c334ab22dd9cfef3542d1a781244e268ecb1958b6fde25ec370d91ed36c0bc85ff1b9bfc33450c99bd14220172da0bd1b4a45d285d4d3a5681a3e95ee1cd0b4493def7c4035a46e9beaaa469f0bf528665ca6166fd787c42a53a0e1c4b70dd8c491dca3a4e9d3fc398a9f0d28e7ab07a0ae84fc12f792252f5bf8ec11f0c21f561634fc38c1a44ffe7ddc9e3616d86b701156c9c28d973347b44dd281e0e47730a96e89b1c007f270bea75705a116e876ee96e3b6eb4ca73c4fe461fc234122a19c451bbcbd1e73f9c5a5680cb6b8b6c47b937a5e8d7244e2c7238d04c4309540b8bf08cad0b234f59d2cec4ee26d4b5bbceb51b45e47ffc4a3ab8e39457f2da28245ff0a9f6fc2cfc9089fa3fbe641f3017063088c62fda5daf676654e9185aa4801320c3763e36bd01542307e6de82ccec3bd535414bfc184bdb81500aa32ad20d463092c7576ac974a56e5c7ee0b139c5ceb50cfbd9b04a07459d27f884096c4c31699b54100171e7d6de67d87bb4ccc5366f20589e767c330bf230f33475f584e2d3fc1476931f5db3bfa969bb81fc8098c428321914f2390ff159db4428b7b7351e80f317f439627620ea8721afad2f7d244976f3112d8cb3fab485438e7c7568de212a822691f173dd4281a803bbcdc7256fa09b09a1135bc8b33318d3f9ea5663de8542e493c1cc0a70d8f379926a901ef546144619454b68ba353c74d94fa8c59875303bddc37cd3efac712ca0704b2affe5800c73b495bdedbb5ce6999742bc365af7bf308a1dd6f8365bad7b55621e7a66abe96c099a95634084aecc41b38c2009a25d20b2e21a941257c6c092e9e4ffba8b67901cd3fa25a653a4e6e5e7ab510aef2ede657f58e20a6071bb01d8a148c141480e02d50c9e235e7acf68c26ab42cf15c8a9f357dcc3cc4e81a52ac3f21366af83709bc948db4ad4e5ff3449c1e6e1bd7bf96a200b1ab62a9f3181e3297fd36bc2e487ec290c8146acc7869ccc1883a8bbb1d5f427465ff4d76cb369757447d77e520b292ea64760a660a915340b3a082e76af7bd353aeb1ae866867e3d51babd2870e9eb18b84bfe107b06ad1e746e1f318fb6a67a29bdaa5d478b167963e8f43924e33e0801d78bf1f22b16fbe6241d67c93561297928a3a0d03d2a935aa92331685b691a018a67396ce210299db604bc3ace89bc37f63f7d815cf971a005ec97d995767286ec7feb1f8293dafbe687f81a1712b889c683bbec156f7281e44cdd45cbd442fb6405f2cf229c1886f7fe496326dcf37ca52b660b3df7abff290aa766208588706797f661833f0678a0336cdc7819136d66e7132ea85197f71e66de0534caf836b4cef62582ba87a7fea7a40526e59b0b7ce03002e7892460ffb7bfc60f9035a9daf4d1589f32acced79cd598df5bfba5e6728affceb98659c892bcf65c50987962a2d21d8507725446f3209f90d4723a67f92d8d9f4f2312869cace4896b2bbdb73920c526ad41fc8a7ae5ac0125c0b0059358b9179ab796f0c531c392e894424c228df6341bb0d53f3de5fe73cb420e7b1cd2c98ad8563ee4cf4908a388bef9accf8e2546f56ea1dbe3b014ac8523e4b28df0364a81785b085a3c8dd804cd14705f1bfda84cca6a4015d6fa1cc40a9ea9df5b55ed9c02c3706407e4f9891d772b726d1a985e014d5c4abc8981b598df362729df4582f992e030503fd69dbf66124dccfadafa5b8625fdcc5e5d17d459a870d0cfc7cb7cc9f00da97a12c508fa854c48f36c9cb616bc8a56f444dcccfa91f5477e98c06916c60ea5922d6c10a9f44666cf9bed27a23187295ef70efcfb2356bbf1501c04a811743b9e62219d87a53372975960d85d9e42b90b26fed02b0a2d04575d7ef1be736f9a983feb8a36ba6c9dea0c584e5719d7302880c723805c35881475726d6a9368adcfe98c838e0c8b97d876a94dc55d155effaf1db17ba30917193cc059579515079353b587fb6fa47f1b4d46689d79702471ee017df6b8103059283ca6738e727e316437c69505e24b3d65173ab9c72d9ed66db5c013b6a8f3ca1409fe063af4235200f33b845f2147ab73207ee01ad84a67528f2685eacd3ae26a4d7c40d303429833a012395e9a3ff26bdf5273c73a70cf570641ae26ec5786ea189be02163f07779cd4c33918856cabd9e38094a33eb1dab40da779108750f2033e54609108d5d29ef44b1c9197b3dabd8c4034fb67a6284fd2c1967d5365a217ec0d7145d09c99b5ba7aa20dc86a38a094cc85b49087af33b9171a9456b6ca392b216ead5ce8d79194086222e530e1be7c6b35db3073ea35cc6ea883a1837289abbd36109fae86bdada69b5c4cf3dc67dbde4d17bc109b913668c8ec85d97b604dd5863aa34b65a8343c91845066474d811e6b17370f1fca64641b2d7acd615bc551e881035425e2bae6ce345cd3ac082aadaeaeb08d0d724d7ee124f58912deb7c863a5666236b20a496e505cbe32e35b7bc55a9fd5f5c3e3ebb19b9ef2c8f6ea2c2d8cf1e6958747d6d209307efe4eb65f82bdded712c11ac825aba679c4db731193a9a73c1bb6aa7ecc55d034f0a7cba0b44d56feb74fe49ec2199e8420827a1b510f9308c288df7b265b0c8a2f6d8957d626b514da5685639a0675a1e64f32012d701db35e704e586b710140759cb35e39d1334c59b751463dcdd1fa32b208fd8289951695f40e36b1efad2719700f859161b1520e63b05e596ba1b2dbbb83b31536c1301f5444a21f82cb26aef045cf62f94d3b57d7e039ffea15a7bd6e242a44e5e425a7d803453cc4ab0237f6281b233e710e45f10a75276fb5e09fb1ad940eff17e5b855e204792916ba5d89588f5f75fc85524e8165ca7155ef41fd5a9452ed4db619623d3449e64f75544c92769f077a68b1f19883415145e1bf9e2f2a0ed4e30ee6567960ca4a166dabccb974bf18501c551e1f091baff3f6d9c86bd8d0e866ea38b8737a887608c54215a9b69ef81c98793693c1e9ebd36b3ba92b8b6e053e2cb1af29be7c1f63218bc9cfc6a45c31f8675c17c768e2c20353a3f123ef42a705eb5e026de7d571bcb7cf024df8fa3fcd6678c5a4b415454f3f058d80db61fe4b17c8ee625c11c5ea5370881977a5be7073c86b5f466649856fda11a46ccfe214ccebe0426ce51af76639d96a057559de5b7446bbd8de481d8bd3b36e3bc2ecf7bbf3a795d1646382587b9feabbbb0fa376fecebaf10f02821aab5eeeca02b1523d967b12fa2ae7ad3cc30bb5ab89fc5d808dc64861c4a3b0d1199e7af7a25b904b7ce866c79e34f1f9da3bcdc8bf51f08133d55a85bfc3393c63952d2a258a86ce6f578d59786e26ea3544313360be5cbe1c9435061768d1cc2c41d74390dea22fc10d75db2a6ad1a9f208ae393cec50eddc775f5a229927fcfeeb53605b885daf01dae41d4917c2ab2f44a56146316e55dffcd4778669a23f31ea534d9c03024635f3fc0fb09f74acc85d53a78086c8a19d2c7868d1c3ac298571a58985591ce0b210c6d047b6bf2213284b85901c4bdc2e321e004eef5db97f376be3aa9bffc269baf89b7605618d8b5944cfed24eb6b6c51f10173273f4ddc3ea5218cfb1f07bb90de3dbc25a172606ac1d8073e093a1dd07afd0fc2a50b60ed509b8faf943583d2f31d0cc6dba70934c1b978b0a19155f20fd67d8ed4b3977e4acce0a51a5663385e83ac6a10b294f2e49326baecc54fc5220eaf67a02434c9972e7116d7ceeb50ee1b559ccd1e5e92e0debdf980a3c8445ec7110c1a6fd92c17832c4bc2a7673d3199708044f4b673aa7bb067ed6bbe1ae684013ff19b06f8258dd8206a16d94a754a805babc7e8f8894b6a347c38e9f7dde7d32bdb1dc853bb58d5ad3877db4ba897cc034f75f95c2601cb7db078f87989b9a24b0a631347179e3ca5f799ee9c29f381fb971cbbbd30562367f268980e6f0dd0b544671b0c34b6ce283cb449debe02c75d7aafc5e5a64adffd6ee7631ad7447741857b9414c791ca2c0af51a503d60180738dee4caf2c5f55e0b087c3fabd1551a42bf5a67609496607ca538fbc3743a0fe74043823a05cc942c09152e295d862e84bc1173bcf75478e8734062bf4ce64c94633fea65211acea7558523b2a2cf066dd6bcd99a833a4e450d8c2f0bfd0c1305f4aba6e4d6e51cccf67cc1c2f16ca9cca889e3adc00637364cb34b745ee2381a26df482b864c34de86bb0e509cb36217c809c03c1a1a0c544d365fd2f842b4d5dd26769cf845269b14ff2aa5cb20f4003e614cbc718a191cc243dc96c2c164f629b7b8a85dcf9b0bc796b313a05d243ad9070f0acc5925be386c840e2fad45620cc46eb3b54d96d9d9e0c2379fd6737700217b7f2ba3fcde210839eb2efb3663a8a3df9a67ae05f8393738608c4f6", @ANYBLOB="402d83398a09d925756aaa8782b43b1e94b1c98cd87d13b742c91d5780c2f565b1e670ba1ca38148d9b7871e2a050b709c76b3d43bedaab5e41586a9c11988e6d1b9bcf6262f9d80cf8acfecbc63183b2611e1c3e9b6ffae944b268b12405f6a7de08af374dc981dbe90729fd3ad7f0cd3f05e96f1"], 0x34}}, 0x80808) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8de853fe007a3b24600000000000000fc00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3ba}, {}, 0xffffffff}}, 0xb8}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffe39}]}) fadvise64(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000100)={@null, 0x0, 'lo\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 10.192191738s ago: executing program 3 (id=664): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}, @NL802154_ATTR_PAGE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x0) syz_emit_ethernet(0xfb3, &(0x7f0000000340)={@dev, @empty, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x2, 0x1, 0xfa5, 0x0, 0x0, 0x7, 0x21, 0x0, @remote, @remote, {[@generic={0x0, 0x2}]}}, {{0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, "6c926e", 0x7, "b69c88"}, "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"}}}}}, 0x0) 9.624373405s ago: executing program 4 (id=665): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 8.860972236s ago: executing program 2 (id=667): r0 = syz_io_uring_complete(0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, 0x0, 0x0) accept4$ax25(r0, &(0x7f0000000180)={{0x3, @null}, [@remote, @null, @remote, @netrom, @remote, @null, @bcast, @netrom]}, &(0x7f0000000280)=0x48, 0x800) r6 = openat$vcs(0xffffffffffffff9c, 0x0, 0x6080, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000000c0)={0x3}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @private2}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) 8.739417656s ago: executing program 3 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 8.125446837s ago: executing program 2 (id=670): socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 7.983009368s ago: executing program 3 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)) 6.872508649s ago: executing program 3 (id=673): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0xc}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000800)=ANY=[], 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x1, 0x14}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x15) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 6.544586576s ago: executing program 0 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$sock_int(r1, 0x1, 0x4, 0x0, 0x0) 5.440632176s ago: executing program 1 (id=676): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001040)={{0x2, 0x0, 0x7f, 0x0, 0x0, 0xffff}, 0x375, [0x4, 0x0, 0x1ff, 0x0, 0x2, 0x952d, 0x4, 0x8000, 0xffffffff, 0x3565, 0x70ec, 0x5, 0x0, 0xffffffc0, 0x46, 0x6, 0xfffffbff, 0x1, 0xfa, 0xd7, 0x0, 0x0, 0x6, 0x40, 0xa581, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x2, 0xc0, 0x0, 0x4, 0x401, 0xeb, 0x0, 0x3, 0x7, 0x6, 0x8, 0xbe7b, 0x2, 0x0, 0x7d5d, 0x3c8, 0x7, 0x3, 0x0, 0x9, 0x7, 0x3, 0xe, 0x5, 0x2, 0x9, 0x7a, 0x0, 0x6, 0x4, 0x1, 0xfffffffe, 0x0, 0x3, 0x3, 0x0, 0x4, 0x1, 0x80000000, 0x6, 0x5, 0x40, 0x80000001, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x400, 0x8, 0xfe7, 0x7fff, 0x400, 0xff, 0x6, 0x0, 0x3, 0x65, 0xbe, 0xff, 0x1, 0x9c40000, 0x8, 0x0, 0x0, 0x1, 0x101, 0x10001, 0x1c, 0x0, 0x200, 0x2, 0xa, 0x0, 0x900b, 0xff, 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f, 0x9, 0x2, 0x1, 0xfff, 0x8, 0xda, 0x0, 0x7fffffff, 0x0, 0x576, 0x3, 0x3, 0x0, 0x4, 0x3, 0x7, 0xfffffff8, 0x0, 0x7, 0x3, 0x4, 0x6e6a, 0x3c3, 0x0, 0x3db8, 0x6, 0x8, 0x9000000, 0x9, 0x9, 0xffff, 0x9e, 0x8, 0x8a33, 0x5aee, 0x9, 0x0, 0x1, 0x80000001, 0xfff, 0x6, 0xfffffffa, 0x3, 0x8, 0xfffffeff, 0x4, 0x4, 0x8, 0x1, 0x8, 0x10, 0x200, 0x4, 0x0, 0x0, 0x10, 0x8001, 0x1ffe, 0x2, 0xb4, 0x0, 0x1, 0x4, 0x7c89, 0x1, 0x8, 0x4, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ac, 0x5, 0x7, 0xa, 0x40000, 0x3, 0x8, 0x4, 0xfe30, 0x1, 0x8ec9, 0xed, 0x6, 0x0, 0xfffffff3, 0x7, 0x8, 0x2, 0x80000000, 0x0, 0x285, 0x800, 0x9, 0x8, 0x0, 0x0, 0x10000, 0x80000001, 0xffff2743, 0x700000, 0x0, 0x2, 0x80000001, 0x0, 0x8, 0xc13c, 0x7, 0x0, 0x7, 0x5, 0x8, 0x6, 0x1, 0x7fff, 0x6, 0x2, 0x9, 0xffff, 0x6, 0x7, 0x7e94, 0x5, 0x9, 0xf, 0x6, 0x5, 0x4, 0x3, 0xfffffff8, 0x10001, 0x8, 0x6, 0x101, 0x3, 0x2, 0x1, 0x10001, 0xe1c, 0x1, 0x1, 0xfff, 0x9, 0x6, 0x39d, 0x0, 0x10000, 0x3, 0xd, 0x9, 0x5, 0x7fff, 0x7fffffff, 0x8, 0x96, 0xfffffffb, 0x9, 0x2, 0xfffffff8, 0x0, 0x2, 0x23, 0x452, 0x3, 0x8749, 0x3ff, 0x2, 0xcf5, 0x6, 0x3ff, 0x7, 0x188, 0x1, 0x6, 0x7fff, 0x0, 0xa21264e3, 0x401, 0x1e0, 0x1, 0xed, 0x5, 0x7, 0x9, 0x0, 0x80000001, 0x4, 0x8, 0x0, 0x0, 0x60000, 0x7, 0x10000, 0xfffff843, 0x22d2, 0x0, 0x3, 0x1, 0x8, 0x3, 0x2, 0x3, 0x9, 0x1, 0x0, 0x6, 0x9, 0x5, 0x0, 0x3ff, 0x6, 0x1000, 0x10000, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6f9a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x7, 0x76, 0x1, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x0, 0x0, 0x295, 0x6, 0x10001, 0x0, 0x48, 0x2, 0x81, 0xfffffff9, 0x0, 0x7, 0xd4ed, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1a6, 0xb, 0x479d, 0x0, 0x3, 0x2, 0x2, 0x2, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x6, 0xc, 0x0, 0x7, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xa9, 0x0, 0x9, 0x1, 0x0, 0x8001, 0x516, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x9, 0x6, 0xff, 0x4, 0x1, 0x0, 0xb879, 0x8c1, 0x7, 0x9a, 0x2, 0x0, 0x5, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0x7, 0x9, 0x2, 0xf5c, 0x7, 0x0, 0x8, 0x6, 0xfffffff7, 0x7c29, 0x0, 0x7ff, 0x200, 0x24d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0xa0, 0xf6cc, 0x40, 0x9, 0x0, 0xd3c9, 0xa, 0x3, 0x7, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe, 0x0, 0x1, 0x0, 0x0, 0x890, 0x5, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x6, 0x0, 0x50c, 0x6, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x8, 0xa57, 0x10, 0x0, 0x2, 0x0, 0x1, 0x7fffffff, 0x2, 0xfffffff8, 0x8, 0x0, 0x7, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x0, 0xb, 0x1, 0x1, 0xc, 0x9, 0x5, 0x9, 0x401, 0x0, 0x5, 0x7, 0x2c2e, 0x400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x69, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x5, 0x0, 0x8, 0x800, 0x0, 0x0, 0x0, 0xf51, 0x3, 0xffffffff, 0x1, 0x5, 0x400, 0x3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0x0, 0xfffffff7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x1ff, 0x7, 0x9, 0x8, 0x9, 0x6, 0x67e, 0x1000, 0x0, 0x4ee8, 0xb, 0x80, 0x4, 0x0, 0xce1, 0x2, 0x1, 0x1, 0x6, 0x6, 0x8, 0x0, 0x66d4823c, 0x8, 0xb, 0x5, 0x3, 0x9, 0x0, 0x0, 0x2, 0x0, 0xd, 0x5, 0x0, 0xff, 0x40, 0x9, 0x8, 0x4, 0x9, 0x0, 0x400, 0x8, 0x0, 0x0, 0x80000001, 0x633f, 0xff, 0x9b6, 0x9, 0x3, 0x9, 0x0, 0x7ff, 0x8, 0x7, 0xa2d, 0x7, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0xb, 0x61aa, 0xd, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7e21, 0x0, 0x2, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x30b, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x3ff, 0x0, 0x0, 0x6, 0x4, 0x1, 0x401, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x8000, 0x7, 0x0, 0x7fffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x3dd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x60d52fdd, 0x100, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7322, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x5b4, 0x0, 0xfffffff7, 0x10000, 0x2, 0x0, 0xfffffff7, 0x0, 0x0, 0x3, 0x100, 0x8, 0x5, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x6, 0x2, 0x81, 0x0, 0x0, 0xefa, 0x0, 0x2, 0x6, 0xff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9984, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x3, 0x0, 0x8, 0x3, 0xfffffff8, 0x8, 0xc74e, 0x2a53a0f9, 0x0, 0x0, 0x0, 0x3, 0x24a, 0x25, 0xfffffffc, 0x0, 0x3, 0xc, 0x1800000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x270bc00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0xd65d, 0x1, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x3ff, 0x8, 0x8, 0xc20, 0x0, 0x400, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x3, 0x5, 0x0, 0xb, 0x8, 0x8, 0x0, 0x0, 0xe, 0x2, 0x4, 0x0, 0x6, 0x3ea3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0xfffffff7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x7, 0x3, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfbd1, 0x0, 0x10001, 0x1, 0x3, 0x895, 0x0, 0x0, 0x0, 0x5, 0xd18c, 0x7, 0x7, 0x9, 0x1ff, 0x6, 0x0, 0x0, 0x3ff, 0x6ba6, 0x0, 0x0, 0xa, 0x6, 0x0, 0x3, 0x0, 0x5ad, 0x2, 0x0, 0xffff0000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0xc5b2, 0x9, 0x7ff, 0x6, 0x0, 0xffff8000, 0x400, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x4d94, 0xe, 0xe]}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) close(0x3) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3369}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000040)=0xc000000, 0x4) 5.317994436s ago: executing program 2 (id=677): io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="8d5deea6fee55c0e6cadc87aee0e7011ca6e4cf4c17c01c7a8c4508a7330886f33a7e25d082ead6f7ac99aa662b61987570a1171057bcb2888d411fd2a7c869847f830bc98437fffc84873e7d0e65c0cf7014748eb920ba5d50be661aa42b1f3b0229def38997ba0d41d835e54c48d409f68f35737d979ed8dbba9c1adf39482c65c71a761820277d3353104e000557663842307b0fad32da6daac31aec673e0c2524d537efac90fae0e130276", 0xad}]) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 4.77363682s ago: executing program 4 (id=678): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}, @NL802154_ATTR_PAGE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x0) syz_emit_ethernet(0xfb3, &(0x7f0000000340)={@dev, @empty, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x2, 0x1, 0xfa5, 0x0, 0x0, 0x7, 0x21, 0x0, @remote, @remote, {[@generic={0x0, 0x2}]}}, {{0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, "6c926e", 0x7, "b69c88"}, "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"}}}}}, 0x0) 3.874712843s ago: executing program 1 (id=679): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 3.874348804s ago: executing program 2 (id=680): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) 3.873628754s ago: executing program 1 (id=681): r0 = syz_io_uring_complete(0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f00000000c0)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, 0x0, 0x0) accept4$ax25(r0, &(0x7f0000000180)={{0x3, @null}, [@remote, @null, @remote, @netrom, @remote, @null, @bcast, @netrom]}, &(0x7f0000000280)=0x48, 0x800) r6 = openat$vcs(0xffffffffffffff9c, 0x0, 0x6080, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f00000000c0)={0x3}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4, @private2}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) 3.873430724s ago: executing program 4 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 3.837389097s ago: executing program 2 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)) 3.825980927s ago: executing program 3 (id=684): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}}}, 0x30) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8}, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001640), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000002740)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB="0400fefffffffddbdf2511000000080015000000000008001500c100000008001500c000000008000100", @ANYBLOB="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", @ANYBLOB="402d83398a09d925756aaa8782b43b1e94b1c98cd87d13b742c91d5780c2f565b1e670ba1ca38148d9b7871e2a050b709c76b3d43bedaab5e41586a9c11988e6d1b9bcf6262f9d80cf8acfecbc63183b2611e1c3e9b6ffae944b268b12405f6a7de08af374dc981dbe90729fd3ad7f0cd3f05e96f1"], 0x34}}, 0x80808) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8de853fe007a3b24600000000000000fc000000000000000000000000000000fc000000000000000000000000001100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3ba}, {}, 0xffffffff}}, 0xb8}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffe39}]}) fadvise64(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000100)={@null, 0x0, 'lo\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.255483794s ago: executing program 1 (id=685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[]) 3.255029154s ago: executing program 0 (id=686): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.031549692s ago: executing program 4 (id=687): socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 2.298208622s ago: executing program 2 (id=688): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 1.275667125s ago: executing program 0 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.147293666s ago: executing program 1 (id=690): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001040)={{0x2, 0x0, 0x7f, 0x0, 0x0, 0xffff}, 0x375, [0x4, 0x0, 0x1ff, 0x0, 0x2, 0x952d, 0x4, 0x8000, 0xffffffff, 0x3565, 0x70ec, 0x5, 0x0, 0xffffffc0, 0x46, 0x6, 0xfffffbff, 0x1, 0xfa, 0xd7, 0x0, 0x0, 0x6, 0x40, 0xa581, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x2, 0xc0, 0x0, 0x4, 0x401, 0xeb, 0x0, 0x3, 0x7, 0x6, 0x8, 0xbe7b, 0x2, 0x0, 0x7d5d, 0x3c8, 0x7, 0x3, 0x0, 0x9, 0x7, 0x3, 0xe, 0x5, 0x2, 0x9, 0x7a, 0x0, 0x6, 0x4, 0x1, 0xfffffffe, 0x0, 0x3, 0x3, 0x0, 0x4, 0x1, 0x80000000, 0x6, 0x5, 0x40, 0x80000001, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x400, 0x8, 0xfe7, 0x7fff, 0x400, 0xff, 0x6, 0x0, 0x3, 0x65, 0xbe, 0xff, 0x1, 0x9c40000, 0x8, 0x0, 0x0, 0x1, 0x101, 0x10001, 0x1c, 0x0, 0x200, 0x2, 0xa, 0x0, 0x900b, 0xff, 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f, 0x9, 0x2, 0x1, 0xfff, 0x8, 0xda, 0x0, 0x7fffffff, 0x0, 0x576, 0x3, 0x3, 0x0, 0x4, 0x3, 0x7, 0xfffffff8, 0x0, 0x7, 0x3, 0x4, 0x6e6a, 0x3c3, 0x0, 0x3db8, 0x6, 0x8, 0x9000000, 0x9, 0x9, 0xffff, 0x9e, 0x8, 0x8a33, 0x5aee, 0x9, 0x0, 0x1, 0x80000001, 0xfff, 0x6, 0xfffffffa, 0x3, 0x8, 0xfffffeff, 0x4, 0x4, 0x8, 0x1, 0x8, 0x10, 0x200, 0x4, 0x0, 0x0, 0x10, 0x8001, 0x1ffe, 0x2, 0xb4, 0x0, 0x1, 0x4, 0x7c89, 0x1, 0x8, 0x4, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6ac, 0x5, 0x7, 0xa, 0x40000, 0x3, 0x8, 0x4, 0xfe30, 0x1, 0x8ec9, 0xed, 0x6, 0x0, 0xfffffff3, 0x7, 0x8, 0x2, 0x80000000, 0x0, 0x285, 0x800, 0x9, 0x8, 0x0, 0x0, 0x10000, 0x80000001, 0xffff2743, 0x700000, 0x0, 0x2, 0x80000001, 0x0, 0x8, 0xc13c, 0x7, 0x0, 0x7, 0x5, 0x8, 0x6, 0x1, 0x7fff, 0x6, 0x2, 0x9, 0xffff, 0x6, 0x7, 0x7e94, 0x5, 0x9, 0xf, 0x6, 0x5, 0x4, 0x3, 0xfffffff8, 0x10001, 0x8, 0x6, 0x101, 0x3, 0x2, 0x1, 0x10001, 0xe1c, 0x1, 0x1, 0xfff, 0x9, 0x6, 0x39d, 0x0, 0x10000, 0x3, 0xd, 0x9, 0x5, 0x7fff, 0x7fffffff, 0x8, 0x96, 0xfffffffb, 0x9, 0x2, 0xfffffff8, 0x0, 0x2, 0x23, 0x452, 0x3, 0x8749, 0x3ff, 0x2, 0xcf5, 0x6, 0x3ff, 0x7, 0x188, 0x1, 0x6, 0x7fff, 0x0, 0xa21264e3, 0x401, 0x1e0, 0x1, 0xed, 0x5, 0x7, 0x9, 0x0, 0x80000001, 0x4, 0x8, 0x0, 0x0, 0x60000, 0x7, 0x10000, 0xfffff843, 0x22d2, 0x0, 0x3, 0x1, 0x8, 0x3, 0x2, 0x3, 0x9, 0x1, 0x0, 0x6, 0x9, 0x5, 0x0, 0x3ff, 0x6, 0x1000, 0x10000, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x6f9a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x7, 0x76, 0x1, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x0, 0x0, 0x295, 0x6, 0x10001, 0x0, 0x48, 0x2, 0x81, 0xfffffff9, 0x0, 0x7, 0xd4ed, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1a6, 0xb, 0x479d, 0x0, 0x3, 0x2, 0x2, 0x2, 0x0, 0x0, 0x100, 0x3, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x6, 0xc, 0x0, 0x7, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xa9, 0x0, 0x9, 0x1, 0x0, 0x8001, 0x516, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x9, 0x6, 0xff, 0x4, 0x1, 0x0, 0xb879, 0x8c1, 0x7, 0x9a, 0x2, 0x0, 0x5, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0x2, 0x0, 0x3, 0x7, 0x9, 0x2, 0xf5c, 0x7, 0x0, 0x8, 0x6, 0xfffffff7, 0x7c29, 0x0, 0x7ff, 0x200, 0x24d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0xa0, 0xf6cc, 0x40, 0x9, 0x0, 0xd3c9, 0xa, 0x3, 0x7, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xe, 0x0, 0x1, 0x0, 0x0, 0x890, 0x5, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x6, 0x0, 0x50c, 0x6, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x8, 0xa57, 0x10, 0x0, 0x2, 0x0, 0x1, 0x7fffffff, 0x2, 0xfffffff8, 0x8, 0x0, 0x7, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x0, 0xb, 0x1, 0x1, 0xc, 0x9, 0x5, 0x9, 0x401, 0x0, 0x5, 0x7, 0x2c2e, 0x400, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x69, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x5, 0x0, 0x8, 0x800, 0x0, 0x0, 0x0, 0xf51, 0x3, 0xffffffff, 0x1, 0x5, 0x400, 0x3, 0x0, 0x0, 0x1, 0x8, 0x0, 0x9, 0x0, 0xfffffff7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x1ff, 0x7, 0x9, 0x8, 0x9, 0x6, 0x67e, 0x1000, 0x0, 0x4ee8, 0xb, 0x80, 0x4, 0x0, 0xce1, 0x2, 0x1, 0x1, 0x6, 0x6, 0x8, 0x0, 0x66d4823c, 0x8, 0xb, 0x5, 0x3, 0x9, 0x0, 0x0, 0x2, 0x0, 0xd, 0x5, 0x0, 0xff, 0x40, 0x9, 0x8, 0x4, 0x9, 0x0, 0x400, 0x8, 0x0, 0x0, 0x80000001, 0x633f, 0xff, 0x9b6, 0x9, 0x3, 0x9, 0x0, 0x7ff, 0x8, 0x7, 0xa2d, 0x7, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0xb, 0x61aa, 0xd, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7e21, 0x0, 0x2, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x30b, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x3ff, 0x0, 0x0, 0x6, 0x4, 0x1, 0x401, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x8000, 0x7, 0x0, 0x7fffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x3dd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x60d52fdd, 0x100, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7322, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x5b4, 0x0, 0xfffffff7, 0x10000, 0x2, 0x0, 0xfffffff7, 0x0, 0x0, 0x3, 0x100, 0x8, 0x5, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x6, 0x2, 0x81, 0x0, 0x0, 0xefa, 0x0, 0x2, 0x6, 0xff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9984, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x3, 0x0, 0x8, 0x3, 0xfffffff8, 0x8, 0xc74e, 0x2a53a0f9, 0x0, 0x0, 0x0, 0x3, 0x24a, 0x25, 0xfffffffc, 0x0, 0x3, 0xc, 0x1800000, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x270bc00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0xd65d, 0x1, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x3ff, 0x8, 0x8, 0xc20, 0x0, 0x400, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x3, 0x5, 0x0, 0xb, 0x8, 0x8, 0x0, 0x0, 0xe, 0x2, 0x4, 0x0, 0x6, 0x3ea3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0xfffffff7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x7, 0x3, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfbd1, 0x0, 0x10001, 0x1, 0x3, 0x895, 0x0, 0x0, 0x0, 0x5, 0xd18c, 0x7, 0x7, 0x9, 0x1ff, 0x6, 0x0, 0x0, 0x3ff, 0x6ba6, 0x0, 0x0, 0xa, 0x6, 0x0, 0x3, 0x0, 0x5ad, 0x2, 0x0, 0xffff0000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0xc5b2, 0x9, 0x7ff, 0x6, 0x0, 0xffff8000, 0x400, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x4d94, 0xe, 0xe]}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) close(0x3) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3369}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000040)=0xc000000, 0x4) 1.002664298s ago: executing program 0 (id=691): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2", 0xc) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x100000530) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xf07, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0xf800}], 0x1, 0x0, 0xf, 0x7000000}}], 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=692): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet6_int(r1, 0x29, 0xd0, 0x0, &(0x7f0000000140)) kernel console output (not intermixed with test programs): pat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 127.677376][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.707380][ T26] audit: type=1326 audit(1720242498.401:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 127.756960][ T26] audit: type=1326 audit(1720242498.401:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 127.785025][ T26] audit: type=1326 audit(1720242498.401:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 127.820102][ T26] audit: type=1326 audit(1720242498.401:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 127.862491][ T26] audit: type=1326 audit(1720242498.401:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 127.885972][ T4697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.894594][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.922857][ T4464] EXT4-fs (loop2): unmounting filesystem. [ 128.030228][ T7] hid (null): invalid report_size 53675 [ 128.060230][ T7] hid (null): unknown global tag 0xd [ 128.096193][ T7] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 128.121616][ T7] hid-generic 0003:0158:0100.0002: unexpected long global item [ 128.156341][ T7] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 128.217444][ T4693] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 128.229845][ T4693] syz.0.264: attempt to access beyond end of device [ 128.229845][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.232986][ T7] usb 4-1: USB disconnect, device number 6 [ 128.245492][ T4693] syz.0.264: attempt to access beyond end of device [ 128.245492][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.267749][ T4693] syz.0.264: attempt to access beyond end of device [ 128.267749][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.283559][ T4693] syz.0.264: attempt to access beyond end of device [ 128.283559][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.299724][ T4693] syz.0.264: attempt to access beyond end of device [ 128.299724][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.314293][ T4693] syz.0.264: attempt to access beyond end of device [ 128.314293][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.330252][ T4693] syz.0.264: attempt to access beyond end of device [ 128.330252][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.344805][ T4693] syz.0.264: attempt to access beyond end of device [ 128.344805][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 128.360876][ T4693] syz.0.264: attempt to access beyond end of device [ 128.360876][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 128.375444][ T4693] syz.0.264: attempt to access beyond end of device [ 128.375444][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 129.408156][ T4729] netlink: 'syz.1.276': attribute type 10 has an invalid length. [ 129.635293][ T4729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.276'. [ 129.666872][ T3595] libceph: connect (1)[c::]:6789 error -101 [ 130.391019][ T3595] libceph: mon0 (1)[c::]:6789 connect error [ 130.434786][ T4729] team0: Port device geneve0 added [ 130.513418][ T4734] ceph: No mds server is up or the cluster is laggy [ 132.002702][ T4760] syz.3.285 (4760) used greatest stack depth: 19808 bytes left [ 132.511516][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.563832][ T4770] loop1: detected capacity change from 0 to 2048 [ 132.675327][ T4770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.776405][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 132.781983][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.793839][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.236580][ T4693] bio_check_eod: 2332 callbacks suppressed [ 133.236597][ T4693] syz.0.264: attempt to access beyond end of device [ 133.236597][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.257285][ T4693] syz.0.264: attempt to access beyond end of device [ 133.257285][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.274535][ T4693] syz.0.264: attempt to access beyond end of device [ 133.274535][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.289379][ T4693] syz.0.264: attempt to access beyond end of device [ 133.289379][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.305480][ T4693] syz.0.264: attempt to access beyond end of device [ 133.305480][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.320175][ T4693] syz.0.264: attempt to access beyond end of device [ 133.320175][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.326388][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 133.336070][ T4693] syz.0.264: attempt to access beyond end of device [ 133.336070][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.359291][ T4693] syz.0.264: attempt to access beyond end of device [ 133.359291][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.376459][ T4693] syz.0.264: attempt to access beyond end of device [ 133.376459][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 133.391086][ T4693] syz.0.264: attempt to access beyond end of device [ 133.391086][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 133.404966][ T7] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 133.434710][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.489143][ T7] usb 4-1: config 0 descriptor?? [ 133.499431][ T3562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.508916][ T3561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.517628][ T3562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.526466][ T3561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.545256][ T3562] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.552647][ T3561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.597658][ T3914] EXT4-fs (loop1): unmounting filesystem. [ 133.611067][ T3548] libceph: connect (1)[c::]:6789 error -101 [ 133.627409][ T4780] ceph: No mds server is up or the cluster is laggy [ 133.656211][ T3548] libceph: mon0 (1)[c::]:6789 connect error [ 133.840041][ T4766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.288'. [ 133.910522][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 133.910535][ T26] audit: type=1326 audit(1720242505.451:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 134.116106][ T26] audit: type=1326 audit(1720242505.521:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 134.261852][ T26] audit: type=1326 audit(1720242505.521:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 134.365851][ T26] audit: type=1326 audit(1720242505.521:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 134.400807][ T4784] chnl_net:caif_netlink_parms(): no params data found [ 134.558186][ T4766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.649889][ T4766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.690349][ T4800] netlink: 'syz.1.293': attribute type 10 has an invalid length. [ 134.736135][ T26] audit: type=1326 audit(1720242505.521:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 134.759399][ T4800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'. [ 134.768732][ T4766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.994384][ T4766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.386947][ T26] audit: type=1326 audit(1720242505.521:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 135.675139][ T7] hid (null): invalid report_size 53675 [ 135.680885][ T3560] Bluetooth: hci3: command tx timeout [ 135.688575][ T7] hid (null): unknown global tag 0xd [ 135.697020][ T7] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 135.704532][ T7] hid-generic 0003:0158:0100.0003: unexpected long global item [ 135.712658][ T7] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 135.837967][ T26] audit: type=1326 audit(1720242505.521:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 135.906177][ T3548] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.996647][ T7] usb 4-1: USB disconnect, device number 7 [ 136.051950][ T26] audit: type=1326 audit(1720242505.521:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 136.157064][ T4784] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.164189][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.176271][ T3548] usb 3-1: Using ep0 maxpacket: 32 [ 136.223875][ T26] audit: type=1326 audit(1720242505.521:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 136.260020][ T4784] device bridge_slave_0 entered promiscuous mode [ 136.300288][ T4784] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.342237][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.360116][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.372061][ T3548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.386476][ T26] audit: type=1326 audit(1720242505.531:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4765 comm="syz.3.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b32375bd9 code=0x7ffc0000 [ 136.388038][ T4784] device bridge_slave_1 entered promiscuous mode [ 136.431106][ T3548] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.462020][ T3548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.503807][ T3548] usb 3-1: config 0 descriptor?? [ 136.594678][ T3548] hub 3-1:0.0: USB hub found [ 136.718322][ T4784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.773896][ T4784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.797733][ T4806] netlink: 104 bytes leftover after parsing attributes in process `syz.2.297'. [ 137.036557][ T3548] hub 3-1:0.0: 1 port detected [ 137.759124][ T3560] Bluetooth: hci3: command tx timeout [ 137.821362][ T4784] team0: Port device team_slave_0 added [ 137.867166][ T4784] team0: Port device team_slave_1 added [ 138.055449][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.248288][ T4693] bio_check_eod: 2402 callbacks suppressed [ 138.248308][ T4693] syz.0.264: attempt to access beyond end of device [ 138.248308][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.268790][ T4693] syz.0.264: attempt to access beyond end of device [ 138.268790][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.285197][ T4693] syz.0.264: attempt to access beyond end of device [ 138.285197][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.299788][ T4693] syz.0.264: attempt to access beyond end of device [ 138.299788][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.316045][ T4693] syz.0.264: attempt to access beyond end of device [ 138.316045][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.330622][ T4693] syz.0.264: attempt to access beyond end of device [ 138.330622][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.346763][ T4693] syz.0.264: attempt to access beyond end of device [ 138.346763][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.361356][ T4693] syz.0.264: attempt to access beyond end of device [ 138.361356][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.377303][ T4693] syz.0.264: attempt to access beyond end of device [ 138.377303][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 138.392184][ T4693] syz.0.264: attempt to access beyond end of device [ 138.392184][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 138.426776][ T4826] loop3: detected capacity change from 0 to 2048 [ 138.476087][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.545608][ T3589] libceph: connect (1)[c::]:6789 error -101 [ 138.572816][ T4826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.591782][ T3589] libceph: mon0 (1)[c::]:6789 connect error [ 138.617015][ T4831] ceph: No mds server is up or the cluster is laggy [ 138.874911][ T3548] hub 3-1:0.0: activate --> -90 [ 139.023195][ T4784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.057798][ T4784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.085115][ T4784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.128058][ T3289] libceph: connect (1)[c::]:6789 error -101 [ 139.134084][ T3289] libceph: mon0 (1)[c::]:6789 connect error [ 139.162153][ T3549] EXT4-fs (loop3): unmounting filesystem. [ 139.314243][ T4784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.481367][ T4784] device hsr_slave_0 entered promiscuous mode [ 139.529944][ T4784] device hsr_slave_1 entered promiscuous mode [ 139.570494][ T4784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.605619][ T4784] Cannot create hsr debugfs directory [ 139.767699][ T3289] usb 3-1: USB disconnect, device number 3 [ 140.008756][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.366116][ T7] usb 3-1-port1: cannot reset (err = -71) [ 140.372499][ T7] usb 3-1-port1: attempt power cycle [ 140.406140][ T3560] Bluetooth: hci3: command tx timeout [ 141.382680][ T4784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.521209][ T4784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.593979][ T4871] loop1: detected capacity change from 0 to 2048 [ 142.772079][ T4871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.816144][ T3589] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 143.026488][ T3560] Bluetooth: hci3: command tx timeout [ 143.256894][ T4693] bio_check_eod: 2348 callbacks suppressed [ 143.256914][ T4693] syz.0.264: attempt to access beyond end of device [ 143.256914][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.277317][ T4693] syz.0.264: attempt to access beyond end of device [ 143.277317][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.294005][ T4693] syz.0.264: attempt to access beyond end of device [ 143.294005][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.302413][ T3760] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.308931][ T4693] syz.0.264: attempt to access beyond end of device [ 143.308931][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.332902][ T4693] syz.0.264: attempt to access beyond end of device [ 143.332902][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.347500][ T4693] syz.0.264: attempt to access beyond end of device [ 143.347500][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.363333][ T4693] syz.0.264: attempt to access beyond end of device [ 143.363333][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.377861][ T4693] syz.0.264: attempt to access beyond end of device [ 143.377861][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.380436][ T4784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.393600][ T4693] syz.0.264: attempt to access beyond end of device [ 143.393600][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 143.416163][ T4693] syz.0.264: attempt to access beyond end of device [ 143.416163][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 143.446068][ T3589] usb 4-1: Using ep0 maxpacket: 8 [ 143.488274][ T3914] EXT4-fs (loop1): unmounting filesystem. [ 143.513115][ T3289] libceph: connect (1)[c::]:6789 error -101 [ 143.524355][ T3289] libceph: mon0 (1)[c::]:6789 connect error [ 143.556169][ T3760] usb 5-1: Using ep0 maxpacket: 8 [ 143.566498][ T3589] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 143.583806][ T3589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.609719][ T3589] usb 4-1: config 0 descriptor?? [ 143.634544][ T4882] ceph: No mds server is up or the cluster is laggy [ 143.647127][ T3589] hso 4-1:0.0: Can't find BULK IN endpoint [ 143.676264][ T3760] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 143.700559][ T3760] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 143.715124][ T3760] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.732433][ T3760] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.751810][ T3760] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.761339][ T3760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.863677][ T154] usb 4-1: USB disconnect, device number 8 [ 144.026314][ T3760] usb 5-1: GET_CAPABILITIES returned 0 [ 144.031837][ T3760] usbtmc 5-1:16.0: can't read capabilities [ 144.226124][ T3760] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.244490][ T154] usb 5-1: USB disconnect, device number 6 [ 144.466228][ T3760] usb 3-1: Using ep0 maxpacket: 32 [ 144.555241][ T4784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.586560][ T3760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.614862][ T3760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.679952][ T3760] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.717943][ T3760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.770161][ T3760] usb 3-1: config 0 descriptor?? [ 144.847226][ T3760] hub 3-1:0.0: USB hub found [ 145.185449][ T4889] netlink: 104 bytes leftover after parsing attributes in process `syz.2.318'. [ 145.827672][ T3760] hub 3-1:0.0: 1 port detected [ 146.201605][ T4912] loop4: detected capacity change from 0 to 1764 [ 146.259297][ T4912] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 146.306970][ T4912] ISOFS: unable to read i-node block [ 146.339806][ T4784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.355148][ T4912] isofs_fill_super: get root inode failed [ 146.392076][ T4784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.406522][ T4784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.489981][ T4784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.586194][ T3760] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 147.592827][ T3760] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 147.946219][ T3760] usbhid 3-1:0.0: can't add hid device: -71 [ 147.952279][ T3760] usbhid: probe of 3-1:0.0 failed with error -71 [ 148.108114][ T4929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 148.267953][ T4693] bio_check_eod: 2336 callbacks suppressed [ 148.268001][ T4693] syz.0.264: attempt to access beyond end of device [ 148.268001][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.291082][ T4693] syz.0.264: attempt to access beyond end of device [ 148.291082][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.314398][ T4693] syz.0.264: attempt to access beyond end of device [ 148.314398][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.331428][ T4693] syz.0.264: attempt to access beyond end of device [ 148.331428][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.356300][ T4693] syz.0.264: attempt to access beyond end of device [ 148.356300][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.373287][ T4693] syz.0.264: attempt to access beyond end of device [ 148.373287][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.423753][ T4693] syz.0.264: attempt to access beyond end of device [ 148.423753][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.440724][ T4693] syz.0.264: attempt to access beyond end of device [ 148.440724][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.465280][ T4693] syz.0.264: attempt to access beyond end of device [ 148.465280][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 148.482314][ T4693] syz.0.264: attempt to access beyond end of device [ 148.482314][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 148.557825][ T7] libceph: connect (1)[c::]:6789 error -101 [ 148.570579][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 148.583350][ T4925] ceph: No mds server is up or the cluster is laggy [ 148.607895][ T4784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.625734][ T3589] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.634921][ T3760] usb 3-1: USB disconnect, device number 8 [ 149.150188][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.158257][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.169517][ T4784] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.184353][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.193625][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.202260][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.209384][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.295555][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.311178][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.319935][ T3589] usb 5-1: config 0 has no interfaces? [ 149.381197][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.430772][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.437994][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.486383][ T3589] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.506571][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.516781][ T3589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.537267][ T4950] 9pnet_fd: Insufficient options for proto=fd [ 149.563951][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.572857][ T3589] usb 5-1: Product: syz [ 149.591749][ T3589] usb 5-1: Manufacturer: syz [ 149.613319][ T3589] usb 5-1: SerialNumber: syz [ 149.665273][ T3589] usb 5-1: config 0 descriptor?? [ 149.686776][ T4784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.758810][ T4784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.813935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.847743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.898754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.966234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.992793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.012308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.024312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.040645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.084824][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.103788][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.226185][ T154] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.283388][ T4958] loop2: detected capacity change from 0 to 1764 [ 150.322493][ T4958] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 150.363377][ T4958] ISOFS: unable to read i-node block [ 150.379300][ T4958] isofs_fill_super: get root inode failed [ 150.426188][ T3289] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.476151][ T154] usb 4-1: Using ep0 maxpacket: 8 [ 150.499218][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.510253][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.577823][ T4784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.776395][ T154] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 150.799116][ T154] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.390629][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.403865][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.522158][ T3289] usb 2-1: Using ep0 maxpacket: 16 [ 151.527889][ T154] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.538015][ T154] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.551285][ T154] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.560385][ T154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.653066][ T3289] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.836218][ T154] usb 4-1: GET_CAPABILITIES returned 0 [ 151.844221][ T154] usbtmc 4-1:16.0: can't read capabilities [ 151.850658][ T3289] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.869982][ T3289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.925661][ T3289] usb 2-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 152.022623][ T3289] usb 2-1: Manufacturer: ࠄ [ 152.054452][ T3289] usb 2-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 152.134537][ T154] usb 4-1: USB disconnect, device number 9 [ 152.388624][ T7] usb 5-1: USB disconnect, device number 7 [ 152.460587][ T4969] loop1: detected capacity change from 0 to 512 [ 152.533462][ T4969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.549469][ T4969] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 153.286049][ T4693] bio_check_eod: 2450 callbacks suppressed [ 153.286092][ T4693] syz.0.264: attempt to access beyond end of device [ 153.286092][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.309062][ T4693] syz.0.264: attempt to access beyond end of device [ 153.309062][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.331210][ T4693] syz.0.264: attempt to access beyond end of device [ 153.331210][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.348341][ T4693] syz.0.264: attempt to access beyond end of device [ 153.348341][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.370898][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.396834][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.417579][ T4693] syz.0.264: attempt to access beyond end of device [ 153.417579][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.433227][ T4693] syz.0.264: attempt to access beyond end of device [ 153.433227][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.449547][ T4693] syz.0.264: attempt to access beyond end of device [ 153.449547][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.464085][ T4693] syz.0.264: attempt to access beyond end of device [ 153.464085][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.480176][ T4693] syz.0.264: attempt to access beyond end of device [ 153.480176][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 153.494755][ T4693] syz.0.264: attempt to access beyond end of device [ 153.494755][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 153.916221][ T3591] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.166711][ T3591] usb 3-1: Using ep0 maxpacket: 16 [ 154.185397][ T4995] 9pnet_fd: Insufficient options for proto=fd [ 154.393158][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.401570][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.411920][ T4784] device veth0_vlan entered promiscuous mode [ 154.456678][ T3591] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 154.491061][ T3591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.512846][ T4784] device veth1_vlan entered promiscuous mode [ 154.528559][ T3591] usb 3-1: Product: syz [ 154.546126][ T3591] usb 3-1: Manufacturer: syz [ 154.568846][ T3591] usb 3-1: SerialNumber: syz [ 154.602954][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.619716][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.636020][ T4784] device veth0_macvtap entered promiscuous mode [ 154.655776][ T4784] device veth1_macvtap entered promiscuous mode [ 154.689534][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.705452][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.721324][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.736219][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.752260][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.765462][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.796201][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.816241][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.886058][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.926262][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.964016][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.009135][ T5000] loop4: detected capacity change from 0 to 2048 [ 155.035710][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.062369][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.081438][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.104695][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.134366][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.156273][ T5000] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.177449][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.244141][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.456336][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.474065][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.625931][ T3591] usb 3-1: config 0 descriptor?? [ 155.668251][ T3591] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 155.677842][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.689698][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.700197][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.712629][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.733650][ T4784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.799071][ T4784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.841121][ T4784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.862325][ T4784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.883701][ T4784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.907500][ T4784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.922238][ T4784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.028131][ T3706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.055787][ T3706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.093105][ T3706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.108902][ T3706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.367215][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.370342][ T3591] gspca_sn9c2028: read1 error -71 [ 157.384590][ T3914] EXT4-fs (loop1): unmounting filesystem. [ 157.387709][ T3289] usb 2-1: USB disconnect, device number 11 [ 157.404351][ T3839] EXT4-fs (loop4): unmounting filesystem. [ 157.448279][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.476697][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.507821][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.537017][ T3591] gspca_sn9c2028: read1 error -71 [ 157.556740][ T3591] gspca_sn9c2028: read1 error -71 [ 157.561902][ T3591] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 157.606144][ T3591] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 157.612717][ T3760] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 157.632649][ T3591] usb 3-1: No valid video chain found. [ 157.660320][ T3591] usb 3-1: USB disconnect, device number 9 [ 158.297527][ T4693] bio_check_eod: 3320 callbacks suppressed [ 158.297543][ T4693] syz.0.264: attempt to access beyond end of device [ 158.297543][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.317749][ T4693] syz.0.264: attempt to access beyond end of device [ 158.317749][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.332647][ T4693] syz.0.264: attempt to access beyond end of device [ 158.332647][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.347192][ T4693] syz.0.264: attempt to access beyond end of device [ 158.347192][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.362110][ T4693] syz.0.264: attempt to access beyond end of device [ 158.362110][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.376592][ T4693] syz.0.264: attempt to access beyond end of device [ 158.376592][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.391509][ T4693] syz.0.264: attempt to access beyond end of device [ 158.391509][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.405911][ T4693] syz.0.264: attempt to access beyond end of device [ 158.405911][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 158.420874][ T4693] syz.0.264: attempt to access beyond end of device [ 158.420874][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 158.435308][ T4693] syz.0.264: attempt to access beyond end of device [ 158.435308][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 159.856065][ T3760] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.096201][ T3760] usb 5-1: Using ep0 maxpacket: 8 [ 160.216220][ T3760] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 160.234201][ T3760] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.245432][ T3760] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.262771][ T3760] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.282889][ T3760] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.292425][ T3760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.552386][ T5028] 9pnet_fd: Insufficient options for proto=fd [ 160.576205][ T3760] usb 5-1: GET_CAPABILITIES returned 0 [ 160.581839][ T3760] usbtmc 5-1:16.0: can't read capabilities [ 160.787195][ T3760] usb 5-1: USB disconnect, device number 9 [ 160.796526][ T154] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 160.899613][ T5033] loop3: detected capacity change from 0 to 2048 [ 161.037357][ T5033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.046191][ T154] usb 3-1: Using ep0 maxpacket: 32 [ 161.316321][ T154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.626922][ T154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.637432][ T154] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 161.646790][ T154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.663115][ T154] usb 3-1: config 0 descriptor?? [ 161.720006][ T3549] EXT4-fs (loop3): unmounting filesystem. [ 161.747824][ T154] hub 3-1:0.0: USB hub found [ 161.914523][ T5029] netlink: 104 bytes leftover after parsing attributes in process `syz.2.355'. [ 161.989524][ T154] hub 3-1:0.0: 1 port detected [ 162.106342][ T3591] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.283216][ T5055] loop4: detected capacity change from 0 to 512 [ 162.350564][ T5055] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.363: casefold flag without casefold feature [ 162.363334][ T3591] usb 2-1: Using ep0 maxpacket: 16 [ 162.412422][ T5055] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.363: missing EA_INODE flag [ 162.477960][ T5055] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.363: error while reading EA inode 2 err=-117 [ 162.519104][ T5055] EXT4-fs (loop4): 1 orphan inode deleted [ 162.565587][ T5055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.636278][ T154] hub 3-1:0.0: activate --> -90 [ 162.646395][ T3591] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 162.670503][ T3591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.706047][ T3591] usb 2-1: Product: syz [ 162.726106][ T3591] usb 2-1: Manufacturer: syz [ 162.730750][ T3591] usb 2-1: SerialNumber: syz [ 162.791869][ T3591] usb 2-1: config 0 descriptor?? [ 162.859125][ T3591] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 162.879856][ T3839] EXT4-fs (loop4): unmounting filesystem. [ 163.307063][ T4693] bio_check_eod: 3328 callbacks suppressed [ 163.307079][ T4693] syz.0.264: attempt to access beyond end of device [ 163.307079][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.327520][ T4693] syz.0.264: attempt to access beyond end of device [ 163.327520][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.343550][ T4693] syz.0.264: attempt to access beyond end of device [ 163.343550][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.358115][ T4693] syz.0.264: attempt to access beyond end of device [ 163.358115][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.374179][ T4693] syz.0.264: attempt to access beyond end of device [ 163.374179][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.382780][ T5070] loop3: detected capacity change from 0 to 2048 [ 163.388674][ T4693] syz.0.264: attempt to access beyond end of device [ 163.388674][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.410573][ T4693] syz.0.264: attempt to access beyond end of device [ 163.410573][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.425177][ T4693] syz.0.264: attempt to access beyond end of device [ 163.425177][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.441170][ T4693] syz.0.264: attempt to access beyond end of device [ 163.441170][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 163.455718][ T4693] syz.0.264: attempt to access beyond end of device [ 163.455718][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.526445][ T5070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 163.566182][ T3595] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.801325][ T3591] gspca_sn9c2028: read1 error -32 [ 163.976217][ T154] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 163.984269][ T3591] gspca_sn9c2028: read1 error -32 [ 164.013410][ T22] usb 3-1: USB disconnect, device number 10 [ 164.026362][ T154] usb 3-1-port1: cannot reset (err = -71) [ 164.046695][ T3591] gspca_sn9c2028: read1 error 0 [ 164.051732][ T3591] sn9c2028: probe of 2-1:0.0 failed with error -5 [ 164.067527][ T154] usb 3-1-port1: Cannot enable. Maybe the USB cable is bad? [ 164.097532][ T3591] usb 2-1: Found UVC 0.00 device syz (0458:7005) [ 164.112069][ T154] usb 3-1-port1: attempt power cycle [ 164.125091][ T3591] usb 2-1: No valid video chain found. [ 164.142149][ T5076] 9pnet_fd: Insufficient options for proto=fd [ 164.290061][ T5078] ALSA: seq fatal error: cannot create timer (-22) [ 164.326346][ T3595] usb 1-1: Using ep0 maxpacket: 16 [ 164.335702][ T3549] EXT4-fs (loop3): unmounting filesystem. [ 164.346568][ T3607] usb 2-1: USB disconnect, device number 12 [ 164.676478][ T3595] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 164.712919][ T3595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.761902][ T3595] usb 1-1: Product: syz [ 164.792926][ T3595] usb 1-1: Manufacturer: syz [ 164.824778][ T3595] usb 1-1: SerialNumber: syz [ 164.858443][ T3595] usb 1-1: config 0 descriptor?? [ 164.874138][ T5088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'. [ 164.937985][ T3595] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 165.313196][ T3595] gp8psk: usb in 128 operation failed. [ 165.319332][ T3607] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.366492][ T3595] gp8psk: usb in 137 operation failed. [ 165.383437][ T3595] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.191401][ T3595] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 166.224456][ T3595] usb 1-1: media controller created [ 166.314157][ T3595] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.406339][ T3607] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 166.434204][ T5101] 9pnet_fd: Insufficient options for proto=fd [ 166.448228][ T3607] usb 5-1: config 1 has no interface number 0 [ 166.485148][ T3595] gp8psk_fe: Frontend revision 1 attached [ 166.515283][ T3607] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.565046][ T3595] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 166.603531][ T3607] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 166.624119][ T3595] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 166.694295][ T3607] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.781717][ T5105] ALSA: seq fatal error: cannot create timer (-22) [ 167.076330][ T3607] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.105913][ T3595] gp8psk: usb in 138 operation failed. [ 167.450586][ T3607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.459403][ T3595] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 167.470394][ T3607] usb 5-1: Product: syz [ 167.474577][ T3607] usb 5-1: Manufacturer: syz [ 167.479552][ T3595] gp8psk: found Genpix USB device pID = 201 (hex) [ 167.486221][ T3607] usb 5-1: SerialNumber: syz [ 167.494549][ T3595] usb 1-1: USB disconnect, device number 4 [ 167.791615][ T3595] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 167.900388][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 168.317907][ T4693] bio_check_eod: 2460 callbacks suppressed [ 168.317953][ T4693] syz.0.264: attempt to access beyond end of device [ 168.317953][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.340598][ T4693] syz.0.264: attempt to access beyond end of device [ 168.340598][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.364285][ T4693] syz.0.264: attempt to access beyond end of device [ 168.364285][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.381081][ T4693] syz.0.264: attempt to access beyond end of device [ 168.381081][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.404707][ T4693] syz.0.264: attempt to access beyond end of device [ 168.404707][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.421577][ T4693] syz.0.264: attempt to access beyond end of device [ 168.421577][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.445169][ T4693] syz.0.264: attempt to access beyond end of device [ 168.445169][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.462018][ T4693] syz.0.264: attempt to access beyond end of device [ 168.462018][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 168.485130][ T4693] syz.0.264: attempt to access beyond end of device [ 168.485130][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 168.501953][ T4693] syz.0.264: attempt to access beyond end of device [ 168.501953][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 170.276554][ T5143] ALSA: seq fatal error: cannot create timer (-22) [ 170.386157][ T3607] cdc_ncm 5-1:1.1: bind() failure [ 170.403465][ T3607] usb 5-1: USB disconnect, device number 10 [ 171.116235][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 171.187920][ T5147] loop2: detected capacity change from 0 to 2048 [ 171.356230][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 171.383248][ T5147] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.762389][ T4464] EXT4-fs (loop2): unmounting filesystem. [ 172.796213][ T22] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 172.805300][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.861468][ T22] usb 4-1: Product: syz [ 172.875853][ T22] usb 4-1: Manufacturer: syz [ 172.903845][ T22] usb 4-1: SerialNumber: syz [ 172.975918][ T22] usb 4-1: config 0 descriptor?? [ 173.006194][ T22] usb 4-1: can't set config #0, error -71 [ 173.065062][ T22] usb 4-1: USB disconnect, device number 11 [ 173.154371][ T5173] netlink: 'syz.1.405': attribute type 10 has an invalid length. [ 173.162606][ T5172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'. [ 173.193722][ T5173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.405'. [ 173.327004][ T4693] bio_check_eod: 2034 callbacks suppressed [ 173.327023][ T4693] syz.0.264: attempt to access beyond end of device [ 173.327023][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.347403][ T4693] syz.0.264: attempt to access beyond end of device [ 173.347403][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.363348][ T4693] syz.0.264: attempt to access beyond end of device [ 173.363348][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.377974][ T4693] syz.0.264: attempt to access beyond end of device [ 173.377974][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.394086][ T4693] syz.0.264: attempt to access beyond end of device [ 173.394086][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.408637][ T4693] syz.0.264: attempt to access beyond end of device [ 173.408637][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.424658][ T4693] syz.0.264: attempt to access beyond end of device [ 173.424658][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.439199][ T4693] syz.0.264: attempt to access beyond end of device [ 173.439199][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.455299][ T4693] syz.0.264: attempt to access beyond end of device [ 173.455299][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 173.469798][ T4693] syz.0.264: attempt to access beyond end of device [ 173.469798][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 173.631203][ T5184] ALSA: seq fatal error: cannot create timer (-22) [ 175.108417][ T5198] loop1: detected capacity change from 0 to 2048 [ 175.319442][ T5198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.336190][ T3595] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.907402][ T3595] usb 4-1: Using ep0 maxpacket: 16 [ 175.957939][ T3914] EXT4-fs (loop1): unmounting filesystem. [ 176.079106][ T5213] netlink: 'syz.2.418': attribute type 10 has an invalid length. [ 176.124222][ T5213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.418'. [ 176.206499][ T3595] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 176.235920][ T3595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.276728][ T5213] team0: Port device geneve0 added [ 176.288285][ T3595] usb 4-1: Product: syz [ 176.296682][ T3595] usb 4-1: Manufacturer: syz [ 176.301308][ T3595] usb 4-1: SerialNumber: syz [ 177.206951][ T3562] Bluetooth: hci4: command 0x0406 tx timeout [ 177.213529][ T3562] Bluetooth: hci0: command 0x0406 tx timeout [ 177.241738][ T3595] usb 4-1: config 0 descriptor?? [ 177.338052][ T3595] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 177.368184][ T5220] ALSA: seq fatal error: cannot create timer (-22) [ 177.546336][ T3595] gp8psk: usb in 128 operation failed. [ 177.599988][ T3595] gp8psk: usb in 137 operation failed. [ 177.610223][ T3595] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.930736][ T3595] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 178.338348][ T4693] bio_check_eod: 2051 callbacks suppressed [ 178.338390][ T4693] syz.0.264: attempt to access beyond end of device [ 178.338390][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.368986][ T4693] syz.0.264: attempt to access beyond end of device [ 178.368986][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.385967][ T4693] syz.0.264: attempt to access beyond end of device [ 178.385967][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.410632][ T4693] syz.0.264: attempt to access beyond end of device [ 178.410632][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.427659][ T4693] syz.0.264: attempt to access beyond end of device [ 178.427659][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.452277][ T4693] syz.0.264: attempt to access beyond end of device [ 178.452277][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.473264][ T4693] syz.0.264: attempt to access beyond end of device [ 178.473264][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.489396][ T4693] syz.0.264: attempt to access beyond end of device [ 178.489396][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.503949][ T4693] syz.0.264: attempt to access beyond end of device [ 178.503949][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.520068][ T4693] syz.0.264: attempt to access beyond end of device [ 178.520068][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 178.601165][ T3595] usb 4-1: media controller created [ 178.759384][ T3595] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.944816][ T3595] gp8psk_fe: Frontend revision 1 attached [ 178.998843][ T3595] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 179.078951][ T3595] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 179.392116][ T5252] loop3: detected capacity change from 0 to 2048 [ 180.140147][ T3595] gp8psk: usb in 138 operation failed. [ 180.145666][ T3595] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 180.183156][ T5252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.227236][ T3595] gp8psk: found Genpix USB device pID = 201 (hex) [ 180.242328][ T3595] usb 4-1: USB disconnect, device number 12 [ 180.302751][ T5267] ALSA: seq fatal error: cannot create timer (-22) [ 180.503954][ T3595] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 181.436355][ T3594] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 181.605604][ T3549] EXT4-fs (loop3): unmounting filesystem. [ 181.726214][ T3594] usb 3-1: Using ep0 maxpacket: 16 [ 181.957186][ T3595] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.036516][ T3594] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 182.045602][ T3594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.117066][ T3594] usb 3-1: Product: syz [ 182.131288][ T3594] usb 3-1: Manufacturer: syz [ 182.153617][ T3594] usb 3-1: SerialNumber: syz [ 182.187889][ T3594] usb 3-1: config 0 descriptor?? [ 182.226215][ T3595] usb 1-1: Using ep0 maxpacket: 16 [ 182.231543][ T3594] usb 3-1: can't set config #0, error -71 [ 182.276498][ T3594] usb 3-1: USB disconnect, device number 15 [ 183.346152][ T4693] bio_check_eod: 2014 callbacks suppressed [ 183.346168][ T4693] syz.0.264: attempt to access beyond end of device [ 183.346168][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.367879][ T4693] syz.0.264: attempt to access beyond end of device [ 183.367879][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.382441][ T4693] syz.0.264: attempt to access beyond end of device [ 183.382441][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.416897][ T4693] syz.0.264: attempt to access beyond end of device [ 183.416897][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.421508][ T5297] 9pnet_fd: Insufficient options for proto=fd [ 183.431438][ T4693] syz.0.264: attempt to access beyond end of device [ 183.431438][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.453682][ T4693] syz.0.264: attempt to access beyond end of device [ 183.453682][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.468520][ T4693] syz.0.264: attempt to access beyond end of device [ 183.468520][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.484496][ T4693] syz.0.264: attempt to access beyond end of device [ 183.484496][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.499204][ T4693] syz.0.264: attempt to access beyond end of device [ 183.499204][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 183.509797][ T5300] loop1: detected capacity change from 0 to 512 [ 183.515017][ T4693] syz.0.264: attempt to access beyond end of device [ 183.515017][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 183.661297][ T5300] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.446: casefold flag without casefold feature [ 183.794651][ T5300] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.446: missing EA_INODE flag [ 183.844380][ T5300] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.446: error while reading EA inode 2 err=-117 [ 183.956687][ T5300] EXT4-fs (loop1): 1 orphan inode deleted [ 184.003133][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.511417][ T3914] EXT4-fs (loop1): unmounting filesystem. [ 184.838660][ T3559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 184.848014][ T3559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 184.855915][ T3559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 184.866621][ T3559] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.876229][ T3562] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 184.884703][ T3559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 185.386131][ T3595] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 185.395229][ T3595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.403660][ T3595] usb 1-1: Product: syz [ 185.407889][ T3595] usb 1-1: Manufacturer: syz [ 185.412493][ T3595] usb 1-1: SerialNumber: syz [ 185.883431][ T5315] chnl_net:caif_netlink_parms(): no params data found [ 186.227101][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.234292][ T5315] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.273364][ T5315] device bridge_slave_0 entered promiscuous mode [ 186.323438][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.366299][ T5315] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.369002][ T3595] usb 1-1: config 0 descriptor?? [ 186.395831][ T5314] loop2: detected capacity change from 0 to 32768 [ 186.402753][ T3595] usb 1-1: can't set config #0, error -71 [ 186.477241][ T5315] device bridge_slave_1 entered promiscuous mode [ 186.555161][ T5314] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.453 (5314) [ 186.678574][ T5314] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 186.711657][ T5315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.746294][ T5314] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 186.788068][ T5315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.807494][ T5314] BTRFS info (device loop2): using free space tree [ 186.826201][ T3589] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.936252][ T3559] Bluetooth: hci6: command tx timeout [ 186.995237][ T5315] team0: Port device team_slave_0 added [ 187.042031][ T5314] BTRFS info (device loop2): enabling ssd optimizations [ 187.053479][ T5315] team0: Port device team_slave_1 added [ 187.066103][ T3589] usb 2-1: Using ep0 maxpacket: 16 [ 187.186447][ T3589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 187.247943][ T3589] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 187.295195][ T3589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.371065][ T3589] usb 2-1: config 0 descriptor?? [ 187.377391][ T3595] usb 1-1: USB disconnect, device number 5 [ 187.410761][ T4464] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 187.423340][ T5315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.459753][ T5315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.672463][ T5315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.927540][ T5330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.952638][ T5315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.971880][ T5330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.980489][ T5315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.048963][ T3589] hid (null): unknown global tag 0xa5 [ 188.054403][ T3589] hid (null): unknown global tag 0xd [ 188.072507][ T3589] hid (null): unknown global tag 0xc [ 188.093375][ T3589] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 188.111470][ T5315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.136156][ T3589] hid-generic 0003:0158:0100.0004: unexpected long global item [ 188.187687][ T3589] hid-generic: probe of 0003:0158:0100.0004 failed with error -22 [ 188.356311][ T4693] bio_check_eod: 2903 callbacks suppressed [ 188.356329][ T4693] syz.0.264: attempt to access beyond end of device [ 188.356329][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.376771][ T4693] syz.0.264: attempt to access beyond end of device [ 188.376771][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.416347][ T4693] syz.0.264: attempt to access beyond end of device [ 188.416347][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.419586][ T5315] device hsr_slave_0 entered promiscuous mode [ 188.431083][ T4693] syz.0.264: attempt to access beyond end of device [ 188.431083][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.452419][ T4693] syz.0.264: attempt to access beyond end of device [ 188.452419][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.467871][ T4693] syz.0.264: attempt to access beyond end of device [ 188.467871][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.483812][ T4693] syz.0.264: attempt to access beyond end of device [ 188.483812][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.498336][ T4693] syz.0.264: attempt to access beyond end of device [ 188.498336][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.514358][ T4693] syz.0.264: attempt to access beyond end of device [ 188.514358][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 188.528994][ T4693] syz.0.264: attempt to access beyond end of device [ 188.528994][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 188.596925][ T5315] device hsr_slave_1 entered promiscuous mode [ 188.624833][ T5315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.685342][ T5315] Cannot create hsr debugfs directory [ 189.016099][ T3559] Bluetooth: hci6: command tx timeout [ 191.096307][ T3559] Bluetooth: hci6: command tx timeout [ 191.173967][ T3589] usb 2-1: USB disconnect, device number 13 [ 191.571577][ T5315] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.726157][ T3589] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 191.868816][ T5315] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.006391][ T3589] usb 3-1: Using ep0 maxpacket: 16 [ 192.105330][ T5315] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.286395][ T3589] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 192.326379][ T3589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.370452][ T3589] usb 3-1: Product: syz [ 192.386892][ T3589] usb 3-1: Manufacturer: syz [ 192.426247][ T3589] usb 3-1: SerialNumber: syz [ 192.452229][ T3589] usb 3-1: config 0 descriptor?? [ 193.206094][ T3559] Bluetooth: hci6: command tx timeout [ 193.271755][ T3589] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 193.287802][ T5315] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.367164][ T4693] bio_check_eod: 2318 callbacks suppressed [ 193.367186][ T4693] syz.0.264: attempt to access beyond end of device [ 193.367186][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.380945][ T5410] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 193.387489][ T4693] syz.0.264: attempt to access beyond end of device [ 193.387489][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.410620][ T4693] syz.0.264: attempt to access beyond end of device [ 193.410620][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.425153][ T4693] syz.0.264: attempt to access beyond end of device [ 193.425153][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.441240][ T4693] syz.0.264: attempt to access beyond end of device [ 193.441240][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.455745][ T4693] syz.0.264: attempt to access beyond end of device [ 193.455745][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.456141][ T3589] gspca_sn9c2028: read1 error -32 [ 193.471576][ T4693] syz.0.264: attempt to access beyond end of device [ 193.471576][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.489023][ T4693] syz.0.264: attempt to access beyond end of device [ 193.489023][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.505136][ T4693] syz.0.264: attempt to access beyond end of device [ 193.505136][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 193.519614][ T4693] syz.0.264: attempt to access beyond end of device [ 193.519614][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 193.546343][ T3589] gspca_sn9c2028: read1 error -32 [ 193.596440][ T3589] gspca_sn9c2028: read1 error 0 [ 193.601376][ T3589] sn9c2028: probe of 3-1:0.0 failed with error -5 [ 193.616650][ T3589] usb 3-1: Found UVC 0.00 device syz (0458:7005) [ 193.636294][ T3589] usb 3-1: No valid video chain found. [ 194.090406][ T3589] usb 3-1: USB disconnect, device number 16 [ 194.380680][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.387057][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.458138][ T3559] Bluetooth: hci2: command 0x0406 tx timeout [ 198.377584][ T4693] bio_check_eod: 2336 callbacks suppressed [ 198.377606][ T4693] syz.0.264: attempt to access beyond end of device [ 198.377606][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.414508][ T4693] syz.0.264: attempt to access beyond end of device [ 198.414508][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.430545][ T4693] syz.0.264: attempt to access beyond end of device [ 198.430545][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.445136][ T4693] syz.0.264: attempt to access beyond end of device [ 198.445136][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.461365][ T4693] syz.0.264: attempt to access beyond end of device [ 198.461365][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.475890][ T4693] syz.0.264: attempt to access beyond end of device [ 198.475890][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.492591][ T4693] syz.0.264: attempt to access beyond end of device [ 198.492591][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.507198][ T4693] syz.0.264: attempt to access beyond end of device [ 198.507198][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.523273][ T4693] syz.0.264: attempt to access beyond end of device [ 198.523273][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 198.538395][ T4693] syz.0.264: attempt to access beyond end of device [ 198.538395][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 198.832943][ T5315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.855371][ T5458] loop2: detected capacity change from 0 to 512 [ 198.936261][ T5458] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.491: casefold flag without casefold feature [ 198.985045][ T5458] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.491: missing EA_INODE flag [ 199.066547][ T5458] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.491: error while reading EA inode 2 err=-117 [ 199.135716][ T5458] EXT4-fs (loop2): 1 orphan inode deleted [ 199.167201][ T5458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 200.400499][ T5315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.521117][ T5315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.896252][ T5315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.738847][ T4464] EXT4-fs (loop2): unmounting filesystem. [ 202.037357][ T3559] Bluetooth: hci5: command 0x0406 tx timeout [ 203.086659][ T5315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.206681][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.214571][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.338847][ T5315] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.387334][ T4693] bio_check_eod: 2494 callbacks suppressed [ 203.387355][ T4693] syz.0.264: attempt to access beyond end of device [ 203.387355][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.406981][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.408733][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.415732][ T4693] syz.0.264: attempt to access beyond end of device [ 203.415732][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.439240][ T4693] syz.0.264: attempt to access beyond end of device [ 203.439240][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.453776][ T4693] syz.0.264: attempt to access beyond end of device [ 203.453776][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.469871][ T4693] syz.0.264: attempt to access beyond end of device [ 203.469871][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.484365][ T4693] syz.0.264: attempt to access beyond end of device [ 203.484365][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.500600][ T4693] syz.0.264: attempt to access beyond end of device [ 203.500600][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.508293][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.521672][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.530102][ T4693] syz.0.264: attempt to access beyond end of device [ 203.530102][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 203.546225][ T4693] syz.0.264: attempt to access beyond end of device [ 203.546225][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 203.561003][ T4693] syz.0.264: attempt to access beyond end of device [ 203.561003][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.458771][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.476870][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.557000][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.616980][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.624125][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.726439][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.842559][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.877457][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.944747][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.017145][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.097237][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.142925][ T5315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.238520][ T5315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.330651][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.357528][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.435468][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.484259][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.513164][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.571892][ T5503] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 205.636144][ T5503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.505'. [ 205.839298][ T5503] team0: Port device geneve0 added [ 205.899471][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.776906][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.822319][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.889314][ T5315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.166519][ T5520] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 208.311774][ T5520] device bond1 entered promiscuous mode [ 208.413874][ T4693] bio_check_eod: 2521 callbacks suppressed [ 208.413894][ T4693] syz.0.264: attempt to access beyond end of device [ 208.413894][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.437021][ T4693] syz.0.264: attempt to access beyond end of device [ 208.437021][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.451608][ T4693] syz.0.264: attempt to access beyond end of device [ 208.451608][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.467891][ T4693] syz.0.264: attempt to access beyond end of device [ 208.467891][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.482461][ T4693] syz.0.264: attempt to access beyond end of device [ 208.482461][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.498744][ T4693] syz.0.264: attempt to access beyond end of device [ 208.498744][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.513574][ T4693] syz.0.264: attempt to access beyond end of device [ 208.513574][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.530786][ T4693] syz.0.264: attempt to access beyond end of device [ 208.530786][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.545634][ T4693] syz.0.264: attempt to access beyond end of device [ 208.545634][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 208.548729][ T5520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.568520][ T4693] syz.0.264: attempt to access beyond end of device [ 208.568520][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 208.674346][ T5525] bond1: (slave bridge1): making interface the new active one [ 208.712634][ T5525] device bridge1 entered promiscuous mode [ 208.750695][ T5525] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 209.856753][ T5543] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 209.864533][ T5543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.516'. [ 210.306962][ T5315] device veth0_vlan entered promiscuous mode [ 210.373619][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 210.384342][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.395054][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.403904][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.412345][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.388943][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.398341][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.408049][ T5315] device veth1_vlan entered promiscuous mode [ 211.698801][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.719716][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.775025][ T5315] device veth0_macvtap entered promiscuous mode [ 212.019943][ T5315] device veth1_macvtap entered promiscuous mode [ 212.051344][ T5359] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 212.775376][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.834842][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.144819][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.423754][ T4693] bio_check_eod: 2565 callbacks suppressed [ 213.423795][ T4693] syz.0.264: attempt to access beyond end of device [ 213.423795][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.446362][ T4693] syz.0.264: attempt to access beyond end of device [ 213.446362][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.470207][ T4693] syz.0.264: attempt to access beyond end of device [ 213.470207][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.486847][ T4693] syz.0.264: attempt to access beyond end of device [ 213.486847][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.510618][ T4693] syz.0.264: attempt to access beyond end of device [ 213.510618][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.527210][ T4693] syz.0.264: attempt to access beyond end of device [ 213.527210][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.549590][ T4693] syz.0.264: attempt to access beyond end of device [ 213.549590][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.566312][ T4693] syz.0.264: attempt to access beyond end of device [ 213.566312][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.590364][ T4693] syz.0.264: attempt to access beyond end of device [ 213.590364][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 213.607286][ T4693] syz.0.264: attempt to access beyond end of device [ 213.607286][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 213.837715][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.883339][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.924666][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.986623][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.069655][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.116991][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.201226][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.291107][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.353563][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.391191][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.401778][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.413446][ T5315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.396132][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.405008][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.458598][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.520099][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.601578][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.648545][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.702173][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.762043][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.815629][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.875203][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.942588][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.009463][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.063600][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.112923][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.185142][ T5315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.241947][ T5315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.284658][ T5315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.333880][ T5315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.378782][ T5315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.393447][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.437895][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.866233][ T3592] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.887645][ T3840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.957734][ T3840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.032579][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.234272][ T3706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.326990][ T3706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.340953][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.800599][ T5615] ALSA: seq fatal error: cannot create timer (-22) [ 218.186420][ T3592] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 218.205559][ T3592] usb 2-1: config 1 has no interface number 0 [ 218.230904][ T3592] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.293422][ T3592] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 218.366120][ T3592] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.426186][ T4693] bio_check_eod: 2865 callbacks suppressed [ 218.426203][ T4693] syz.0.264: attempt to access beyond end of device [ 218.426203][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.448152][ T4693] syz.0.264: attempt to access beyond end of device [ 218.448152][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.463623][ T4693] syz.0.264: attempt to access beyond end of device [ 218.463623][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.479627][ T4693] syz.0.264: attempt to access beyond end of device [ 218.479627][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.494309][ T4693] syz.0.264: attempt to access beyond end of device [ 218.494309][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.510924][ T4693] syz.0.264: attempt to access beyond end of device [ 218.510924][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.525575][ T4693] syz.0.264: attempt to access beyond end of device [ 218.525575][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.541536][ T4693] syz.0.264: attempt to access beyond end of device [ 218.541536][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.556229][ T4693] syz.0.264: attempt to access beyond end of device [ 218.556229][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 218.573047][ T4693] syz.0.264: attempt to access beyond end of device [ 218.573047][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 218.576291][ T3592] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.668407][ T3592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.736196][ T3592] usb 2-1: Product: syz [ 218.770868][ T3592] usb 2-1: Manufacturer: syz [ 218.775571][ T3592] usb 2-1: SerialNumber: syz [ 219.123437][ T5633] loop4: detected capacity change from 0 to 512 [ 219.130016][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 219.386123][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 219.506277][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.543516][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.776390][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.795077][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.805248][ T5606] netlink: 224 bytes leftover after parsing attributes in process `syz.1.536'. [ 219.844870][ T27] usb 1-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 219.880233][ T3592] cdc_ncm 2-1:1.1: bind() failure [ 220.010597][ T27] usb 1-1: Manufacturer: ࠄ [ 220.025580][ T27] usb 1-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 220.129495][ T5359] usb 2-1: USB disconnect, device number 14 [ 220.256137][ T3592] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 221.583410][ T5649] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 221.650739][ T5649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.549'. [ 221.986504][ T3592] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.998817][ T3592] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 222.008792][ T3592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.014923][ T5649] team0: Port device geneve0 added [ 222.030493][ T3592] usb 3-1: config 0 descriptor?? [ 222.302732][ T5657] ALSA: seq fatal error: cannot create timer (-22) [ 223.236354][ T3592] video4linux radio32: keene_cmd_main failed (-71) [ 223.243261][ T3592] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 223.312062][ T3592] usb 3-1: USB disconnect, device number 17 [ 223.336378][ T27] usb 1-1: 0:2 : does not exist [ 223.420226][ T27] usb 1-1: USB disconnect, device number 6 [ 223.438195][ T4693] bio_check_eod: 2473 callbacks suppressed [ 223.438214][ T4693] syz.0.264: attempt to access beyond end of device [ 223.438214][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.458580][ T4693] syz.0.264: attempt to access beyond end of device [ 223.458580][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.475647][ T4693] syz.0.264: attempt to access beyond end of device [ 223.475647][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.490290][ T4693] syz.0.264: attempt to access beyond end of device [ 223.490290][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.506454][ T4693] syz.0.264: attempt to access beyond end of device [ 223.506454][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.521053][ T4693] syz.0.264: attempt to access beyond end of device [ 223.521053][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.523369][ T3684] udevd[3684]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.536866][ T4693] syz.0.264: attempt to access beyond end of device [ 223.536866][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.565796][ T4693] syz.0.264: attempt to access beyond end of device [ 223.565796][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.582296][ T4693] syz.0.264: attempt to access beyond end of device [ 223.582296][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 223.596931][ T4693] syz.0.264: attempt to access beyond end of device [ 223.596931][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 223.738185][ T3559] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 223.748330][ T3559] Bluetooth: hci1: Injecting HCI hardware error event [ 223.758685][ T3560] Bluetooth: hci1: hardware error 0x00 [ 224.516110][ T3595] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 224.756304][ T3594] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 224.776190][ T3595] usb 3-1: Using ep0 maxpacket: 32 [ 224.948534][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.980512][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.028494][ T3595] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.136570][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.901330][ T3595] usb 3-1: config 0 descriptor?? [ 225.907276][ T3594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 225.932523][ T3594] usb 2-1: config 1 has no interface number 0 [ 225.957311][ T3595] hub 3-1:0.0: USB hub found [ 225.967273][ T3594] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.978769][ T3560] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 226.018774][ T3594] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 226.059490][ T3594] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.165052][ T5680] netlink: 104 bytes leftover after parsing attributes in process `syz.2.561'. [ 226.206617][ T3595] hub 3-1:0.0: 1 port detected [ 226.286300][ T3594] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.305301][ T3594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.466212][ T3594] usb 2-1: Product: syz [ 226.486028][ T3594] usb 2-1: Manufacturer: syz [ 226.506032][ T3594] usb 2-1: SerialNumber: syz [ 227.406380][ T3607] hub 3-1:0.0: activate --> -90 [ 227.875887][ T5684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.562'. [ 227.900074][ T3560] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 228.395633][ T5359] usb 3-1: USB disconnect, device number 18 [ 228.449649][ T4693] bio_check_eod: 2738 callbacks suppressed [ 228.449688][ T4693] syz.0.264: attempt to access beyond end of device [ 228.449688][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.472764][ T4693] syz.0.264: attempt to access beyond end of device [ 228.472764][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.500383][ T4693] syz.0.264: attempt to access beyond end of device [ 228.500383][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.515019][ T4693] syz.0.264: attempt to access beyond end of device [ 228.515019][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.531118][ T4693] syz.0.264: attempt to access beyond end of device [ 228.531118][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.545666][ T4693] syz.0.264: attempt to access beyond end of device [ 228.545666][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.561729][ T4693] syz.0.264: attempt to access beyond end of device [ 228.561729][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.576512][ T4693] syz.0.264: attempt to access beyond end of device [ 228.576512][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.592590][ T4693] syz.0.264: attempt to access beyond end of device [ 228.592590][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 228.607449][ T4693] syz.0.264: attempt to access beyond end of device [ 228.607449][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 228.616981][ T3607] usb 3-1-port1: attempt power cycle [ 228.627712][ T3594] cdc_ncm 2-1:1.1: bind() failure [ 228.786124][ T3595] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 228.817468][ T7] usb 2-1: USB disconnect, device number 15 [ 228.905455][ T5713] ALSA: seq fatal error: cannot create timer (-22) [ 230.076394][ T3595] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.083157][ T3595] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 230.166730][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.207566][ T5723] loop2: detected capacity change from 0 to 512 [ 230.226373][ T3595] usb 4-1: config 0 descriptor?? [ 231.416478][ T3595] video4linux radio32: keene_cmd_main failed (-71) [ 231.423043][ T3595] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 231.531338][ T3595] usb 4-1: USB disconnect, device number 14 [ 231.695483][ T5731] device batadv0 entered promiscuous mode [ 231.986244][ T3560] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 231.994896][ T3560] Bluetooth: hci4: Injecting HCI hardware error event [ 232.003367][ T3559] Bluetooth: hci4: hardware error 0x00 [ 232.607017][ T5745] ALSA: seq fatal error: cannot create timer (-22) [ 233.236070][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 233.458421][ T4693] bio_check_eod: 2584 callbacks suppressed [ 233.458444][ T4693] syz.0.264: attempt to access beyond end of device [ 233.458444][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.481068][ T4693] syz.0.264: attempt to access beyond end of device [ 233.481068][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.505866][ T4693] syz.0.264: attempt to access beyond end of device [ 233.505866][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.523754][ T4693] syz.0.264: attempt to access beyond end of device [ 233.523754][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.552039][ T4693] syz.0.264: attempt to access beyond end of device [ 233.552039][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.569061][ T4693] syz.0.264: attempt to access beyond end of device [ 233.569061][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.593923][ T4693] syz.0.264: attempt to access beyond end of device [ 233.593923][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.611108][ T4693] syz.0.264: attempt to access beyond end of device [ 233.611108][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.636724][ T4693] syz.0.264: attempt to access beyond end of device [ 233.636724][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 233.653882][ T4693] syz.0.264: attempt to access beyond end of device [ 233.653882][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.135701][ T3559] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 234.267005][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 234.457932][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.496556][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.550721][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.584977][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.629314][ T14] usb 1-1: config 0 descriptor?? [ 234.656274][ T3595] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 234.677505][ T14] hub 1-1:0.0: USB hub found [ 234.884001][ T5750] netlink: 104 bytes leftover after parsing attributes in process `syz.0.587'. [ 234.916890][ T14] hub 1-1:0.0: 1 port detected [ 234.921850][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.047135][ T3595] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.096280][ T3595] usb 3-1: config 1 has no interface number 0 [ 235.116056][ T3595] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.164321][ T3595] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 235.196170][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 235.224662][ T3595] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.338940][ T7] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 235.377885][ T3592] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 235.386684][ T7] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 235.419765][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.456514][ T3595] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.501470][ T3595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.537338][ T3595] usb 3-1: Product: syz [ 235.547557][ T3595] usb 3-1: Manufacturer: syz [ 235.564591][ T3595] usb 3-1: SerialNumber: syz [ 235.606540][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.621299][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.657377][ T3607] hub 1-1:0.0: activate --> -90 [ 235.671086][ T7] usb 4-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 235.723881][ T5771] ALSA: seq fatal error: cannot create timer (-22) [ 235.784560][ T7] usb 4-1: Manufacturer: ࠄ [ 235.802242][ T7] usb 4-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 236.267733][ T5777] loop4: detected capacity change from 0 to 512 [ 236.298401][ T5781] loop3: detected capacity change from 0 to 512 [ 236.447002][ T3607] usb 1-1: USB disconnect, device number 7 [ 236.467026][ T14] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 236.474120][ T14] usb 1-1-port1: attempt power cycle [ 236.607173][ T3723] device hsr_slave_0 left promiscuous mode [ 236.643541][ T3723] device hsr_slave_1 left promiscuous mode [ 236.662427][ T5781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.687524][ T5758] netlink: 224 bytes leftover after parsing attributes in process `syz.2.589'. [ 236.706289][ T5781] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038 (0x7fffffff) [ 236.723794][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.747675][ T3595] cdc_ncm 3-1:1.1: bind() failure [ 236.775455][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.069647][ T3723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.406649][ T3723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.879831][ T3723] device bridge_slave_1 left promiscuous mode [ 237.886227][ T3723] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.320494][ T3723] device bridge_slave_0 left promiscuous mode [ 238.467620][ T4693] bio_check_eod: 2346 callbacks suppressed [ 238.467662][ T4693] syz.0.264: attempt to access beyond end of device [ 238.467662][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.490422][ T4693] syz.0.264: attempt to access beyond end of device [ 238.490422][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.514938][ T4693] syz.0.264: attempt to access beyond end of device [ 238.514938][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.531824][ T4693] syz.0.264: attempt to access beyond end of device [ 238.531824][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.556280][ T4693] syz.0.264: attempt to access beyond end of device [ 238.556280][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.573075][ T4693] syz.0.264: attempt to access beyond end of device [ 238.573075][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.597026][ T4693] syz.0.264: attempt to access beyond end of device [ 238.597026][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.613917][ T4693] syz.0.264: attempt to access beyond end of device [ 238.613917][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 238.636254][ T4693] syz.0.264: attempt to access beyond end of device [ 238.636254][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 238.653115][ T4693] syz.0.264: attempt to access beyond end of device [ 238.653115][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.050594][ T3723] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.223597][ T3723] device veth1_macvtap left promiscuous mode [ 239.250137][ T3723] device veth0_macvtap left promiscuous mode [ 239.277049][ T3723] device veth1_vlan left promiscuous mode [ 239.299670][ T3723] device veth0_vlan left promiscuous mode [ 239.896480][ T3592] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 239.992500][ T3723] team0 (unregistering): Port device geneve0 removed [ 240.260947][ T3592] usb 5-1: config 0 interface 0 has no altsetting 0 [ 240.279522][ T3592] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 240.316083][ T3592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.360398][ T3592] usb 5-1: config 0 descriptor?? [ 241.266320][ T3592] video4linux radio32: keene_cmd_main failed (-71) [ 241.272945][ T3592] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 241.325962][ T3592] usb 5-1: USB disconnect, device number 12 [ 241.636607][ T3723] team0 (unregistering): Port device team_slave_1 removed [ 241.646260][ T154] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 241.794804][ T3723] team0 (unregistering): Port device team_slave_0 removed [ 241.836067][ T154] usb 2-1: device descriptor read/64, error -71 [ 242.023753][ T3723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.106149][ T154] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 242.226328][ T3723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.306261][ T154] usb 2-1: device descriptor read/64, error -71 [ 242.434133][ T154] usb usb2-port1: attempt power cycle [ 242.849197][ T154] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 242.946175][ T154] usb 2-1: device descriptor read/8, error -71 [ 243.216154][ T154] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 243.327076][ T154] usb 2-1: device descriptor read/8, error -71 [ 243.394262][ T3723] bond0 (unregistering): Released all slaves [ 243.458524][ T154] usb usb2-port1: unable to enumerate USB device [ 243.477368][ T4693] bio_check_eod: 2790 callbacks suppressed [ 243.477384][ T4693] syz.0.264: attempt to access beyond end of device [ 243.477384][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.498173][ T4693] syz.0.264: attempt to access beyond end of device [ 243.498173][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.513869][ T4693] syz.0.264: attempt to access beyond end of device [ 243.513869][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.528564][ T4693] syz.0.264: attempt to access beyond end of device [ 243.528564][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.544504][ T4693] syz.0.264: attempt to access beyond end of device [ 243.544504][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.559096][ T4693] syz.0.264: attempt to access beyond end of device [ 243.559096][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.575218][ T4693] syz.0.264: attempt to access beyond end of device [ 243.575218][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.589780][ T4693] syz.0.264: attempt to access beyond end of device [ 243.589780][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.605836][ T4693] syz.0.264: attempt to access beyond end of device [ 243.605836][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 243.620349][ T4693] syz.0.264: attempt to access beyond end of device [ 243.620349][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 243.635921][ T3549] EXT4-fs (loop3): unmounting filesystem. [ 243.656118][ T3559] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 243.664770][ T3559] Bluetooth: hci6: Injecting HCI hardware error event [ 243.674412][ T3560] Bluetooth: hci6: hardware error 0x00 [ 243.696418][ T154] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 243.734662][ T3592] usb 3-1: USB disconnect, device number 23 [ 244.026792][ T5833] fuse: Bad value for 'user_id' [ 244.774904][ T154] usb 1-1: Using ep0 maxpacket: 8 [ 244.896254][ T154] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 244.935813][ T154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.997864][ T154] usb 1-1: config 0 descriptor?? [ 245.039765][ T154] hso 1-1:0.0: Can't find BULK IN endpoint [ 245.242324][ T154] usb 1-1: USB disconnect, device number 12 [ 245.306229][ T3592] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 245.314003][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 245.398108][ T7] usb 4-1: 0:2 : does not exist [ 245.566239][ T3592] usb 2-1: Using ep0 maxpacket: 16 [ 245.571489][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 245.686268][ T3592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 245.701077][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.730282][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.740685][ T3560] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 245.750609][ T3592] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 245.801358][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.810882][ T3592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.870700][ T3592] usb 2-1: config 0 descriptor?? [ 245.883014][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.938484][ T27] usb 3-1: config 0 descriptor?? [ 246.006376][ T27] hub 3-1:0.0: USB hub found [ 246.123650][ T7] usb 4-1: USB disconnect, device number 15 [ 246.217540][ T5843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.618'. [ 246.263203][ T5845] netlink: 104 bytes leftover after parsing attributes in process `syz.2.619'. [ 246.315901][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 246.315915][ T26] audit: type=1326 audit(1720242617.851:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 246.567113][ T4420] udevd[4420]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.576708][ T27] hub 3-1:0.0: 1 port detected [ 247.409690][ T26] audit: type=1326 audit(1720242618.071:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 247.656403][ T26] audit: type=1326 audit(1720242618.071:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 247.751531][ T26] audit: type=1326 audit(1720242618.071:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 247.841507][ T26] audit: type=1326 audit(1720242618.071:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 247.879533][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.909927][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.936279][ T151] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 247.974674][ T5843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.989512][ T26] audit: type=1326 audit(1720242618.071:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 248.032780][ T5843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.093368][ T26] audit: type=1326 audit(1720242618.071:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 248.183911][ T26] audit: type=1326 audit(1720242618.071:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 248.264959][ T26] audit: type=1326 audit(1720242618.071:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 248.287315][ T26] audit: type=1326 audit(1720242618.071:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79ce975bd9 code=0x7ffc0000 [ 248.310510][ T151] usb 5-1: Using ep0 maxpacket: 16 [ 248.464256][ T151] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 248.483022][ T151] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 248.488189][ T4693] bio_check_eod: 2420 callbacks suppressed [ 248.488204][ T4693] syz.0.264: attempt to access beyond end of device [ 248.488204][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.512233][ T151] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.513462][ T4693] syz.0.264: attempt to access beyond end of device [ 248.513462][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.537856][ T4693] syz.0.264: attempt to access beyond end of device [ 248.537856][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.552463][ T4693] syz.0.264: attempt to access beyond end of device [ 248.552463][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.569509][ T4693] syz.0.264: attempt to access beyond end of device [ 248.569509][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.584110][ T4693] syz.0.264: attempt to access beyond end of device [ 248.584110][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.600185][ T4693] syz.0.264: attempt to access beyond end of device [ 248.600185][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.614747][ T4693] syz.0.264: attempt to access beyond end of device [ 248.614747][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.630672][ T4693] syz.0.264: attempt to access beyond end of device [ 248.630672][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 248.645296][ T4693] syz.0.264: attempt to access beyond end of device [ 248.645296][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 248.776246][ T151] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.805778][ T151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.846223][ T151] usb 5-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 249.043285][ T151] usb 5-1: Manufacturer: ࠄ [ 249.063015][ T151] usb 5-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 249.377216][ T3592] hid (null): invalid report_size 53675 [ 249.383477][ T3592] hid (null): unknown global tag 0xd [ 249.392527][ T3592] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 249.400020][ T3592] hid-generic 0003:0158:0100.0005: unexpected long global item [ 249.408098][ T3592] hid-generic: probe of 0003:0158:0100.0005 failed with error -22 [ 250.393499][ T3592] usb 2-1: USB disconnect, device number 20 [ 250.399811][ T5879] loop4: detected capacity change from 0 to 512 [ 250.647560][ T5879] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 250.700386][ T5879] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 251.102942][ T27] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 251.388282][ T27] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 251.896172][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 251.903322][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 252.007254][ T27] usb 3-1: USB disconnect, device number 24 [ 252.384092][ T5898] loop2: detected capacity change from 0 to 512 [ 253.506057][ T4693] bio_check_eod: 1986 callbacks suppressed [ 253.506099][ T4693] syz.0.264: attempt to access beyond end of device [ 253.506099][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.534788][ T4693] syz.0.264: attempt to access beyond end of device [ 253.534788][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.560381][ T4693] syz.0.264: attempt to access beyond end of device [ 253.560381][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.577370][ T4693] syz.0.264: attempt to access beyond end of device [ 253.577370][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.602589][ T4693] syz.0.264: attempt to access beyond end of device [ 253.602589][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.619728][ T4693] syz.0.264: attempt to access beyond end of device [ 253.619728][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.641449][ T4693] syz.0.264: attempt to access beyond end of device [ 253.641449][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.656067][ T4693] syz.0.264: attempt to access beyond end of device [ 253.656067][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 253.672172][ T4693] syz.0.264: attempt to access beyond end of device [ 253.672172][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 253.686746][ T4693] syz.0.264: attempt to access beyond end of device [ 253.686746][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 255.382044][ T5315] EXT4-fs (loop4): unmounting filesystem. [ 256.356394][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.362734][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.376151][ T151] usb 5-1: 0:2 : does not exist [ 256.636176][ T5921] 9pnet_fd: Insufficient options for proto=fd [ 256.746132][ T27] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 256.986206][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 257.212600][ T151] usb 5-1: USB disconnect, device number 13 [ 257.311634][ T5933] loop1: detected capacity change from 0 to 512 [ 258.466261][ T3559] Bluetooth: hci3: command 0x0406 tx timeout [ 258.516304][ T4693] bio_check_eod: 2328 callbacks suppressed [ 258.516329][ T4693] syz.0.264: attempt to access beyond end of device [ 258.516329][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.536834][ T4693] syz.0.264: attempt to access beyond end of device [ 258.536834][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 258.553507][ T4693] syz.0.264: attempt to access beyond end of device [ 258.553507][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.557965][ T4420] udevd[4420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.568039][ T4693] syz.0.264: attempt to access beyond end of device [ 258.568039][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 258.599301][ T4693] syz.0.264: attempt to access beyond end of device [ 258.599301][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.613888][ T4693] syz.0.264: attempt to access beyond end of device [ 258.613888][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 258.630032][ T4693] syz.0.264: attempt to access beyond end of device [ 258.630032][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.644617][ T4693] syz.0.264: attempt to access beyond end of device [ 258.644617][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 258.660806][ T4693] syz.0.264: attempt to access beyond end of device [ 258.660806][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 258.675360][ T4693] syz.0.264: attempt to access beyond end of device [ 258.675360][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 259.750964][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.397725][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.407598][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 261.373728][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.407659][ T27] usb 4-1: config 0 descriptor?? [ 261.860556][ T27] usb 4-1: can't set config #0, error -71 [ 261.946943][ T27] usb 4-1: USB disconnect, device number 16 [ 262.032392][ T5964] loop3: detected capacity change from 0 to 512 [ 263.546048][ T4693] bio_check_eod: 2418 callbacks suppressed [ 263.546101][ T4693] syz.0.264: attempt to access beyond end of device [ 263.546101][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.574694][ T4693] syz.0.264: attempt to access beyond end of device [ 263.574694][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 263.614878][ T4693] syz.0.264: attempt to access beyond end of device [ 263.614878][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.637047][ T4693] syz.0.264: attempt to access beyond end of device [ 263.637047][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 263.681585][ T4693] syz.0.264: attempt to access beyond end of device [ 263.681585][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.702679][ T4693] syz.0.264: attempt to access beyond end of device [ 263.702679][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 263.718761][ T4693] syz.0.264: attempt to access beyond end of device [ 263.718761][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.733336][ T4693] syz.0.264: attempt to access beyond end of device [ 263.733336][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 263.749460][ T4693] syz.0.264: attempt to access beyond end of device [ 263.749460][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 263.764083][ T4693] syz.0.264: attempt to access beyond end of device [ 263.764083][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 266.446123][ T3649] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 267.026340][ T5995] device batadv0 entered promiscuous mode [ 268.556202][ T4693] bio_check_eod: 2235 callbacks suppressed [ 268.556220][ T4693] syz.0.264: attempt to access beyond end of device [ 268.556220][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.578119][ T4693] syz.0.264: attempt to access beyond end of device [ 268.578119][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.592855][ T4693] syz.0.264: attempt to access beyond end of device [ 268.592855][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.608990][ T4693] syz.0.264: attempt to access beyond end of device [ 268.608990][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.623649][ T4693] syz.0.264: attempt to access beyond end of device [ 268.623649][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.639508][ T4693] syz.0.264: attempt to access beyond end of device [ 268.639508][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.654142][ T4693] syz.0.264: attempt to access beyond end of device [ 268.654142][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.670202][ T4693] syz.0.264: attempt to access beyond end of device [ 268.670202][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.684799][ T4693] syz.0.264: attempt to access beyond end of device [ 268.684799][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 268.700837][ T4693] syz.0.264: attempt to access beyond end of device [ 268.700837][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 268.937372][ T3649] usb 1-1: Using ep0 maxpacket: 32 [ 269.006388][ T3649] usb 1-1: device descriptor read/all, error -71 [ 273.566633][ T4693] bio_check_eod: 2235 callbacks suppressed [ 273.566679][ T4693] syz.0.264: attempt to access beyond end of device [ 273.566679][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.589745][ T4693] syz.0.264: attempt to access beyond end of device [ 273.589745][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.613914][ T4693] syz.0.264: attempt to access beyond end of device [ 273.613914][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.630811][ T4693] syz.0.264: attempt to access beyond end of device [ 273.630811][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.653136][ T4693] syz.0.264: attempt to access beyond end of device [ 273.653136][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.670214][ T4693] syz.0.264: attempt to access beyond end of device [ 273.670214][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.693318][ T4693] syz.0.264: attempt to access beyond end of device [ 273.693318][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.710260][ T4693] syz.0.264: attempt to access beyond end of device [ 273.710260][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.734665][ T4693] syz.0.264: attempt to access beyond end of device [ 273.734665][ T4693] loop0: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 273.751553][ T4693] syz.0.264: attempt to access beyond end of device [ 273.751553][ T4693] loop0: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 274.006133][ T3594] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 274.276253][ T3594] usb 4-1: Using ep0 maxpacket: 32 [ 275.248059][ T3594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.303368][ T3594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.364144][ T3594] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.377010][ T28] INFO: task kworker/u4:2:34 blocked for more than 144 seconds. [ 275.399700][ T28] Not tainted 6.1.97-syzkaller #0 [ 275.405633][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.446887][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.456779][ T28] task:kworker/u4:2 state:D stack:22368 pid:34 ppid:2 flags:0x00004000 [ 275.526259][ T28] Workqueue: writeback wb_workfn (flush-7:0) [ 275.547289][ T3594] usb 4-1: config 0 descriptor?? [ 275.566376][ T28] Call Trace: [ 275.583716][ T28] [ 275.602514][ T28] __schedule+0x142d/0x4550 [ 275.608782][ T3594] hub 4-1:0.0: USB hub found [ 275.636328][ T28] ? __sched_text_start+0x8/0x8 [ 275.662518][ T28] ? blk_check_plugged+0x250/0x250 [ 275.691046][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 275.748540][ T28] ? wq_worker_sleeping+0x5f/0x270 [ 275.769371][ T28] schedule+0xbf/0x180 [ 275.787953][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 275.818570][ T6052] netlink: 104 bytes leftover after parsing attributes in process `syz.3.684'. [ 275.828047][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 275.854372][ T28] ? down_write_killable_nested+0x90/0x90 [ 275.873721][ T28] ? read_lock_is_recursive+0x10/0x10 [ 275.879730][ T3594] hub 4-1:0.0: 1 port detected [ 275.894900][ T28] ? rwsem_write_trylock+0x166/0x210 [ 275.911474][ T28] ? clear_nonspinnable+0x60/0x60 [ 275.929858][ T28] ? from_kgid+0x1a3/0x730 [ 275.951765][ T28] f2fs_balance_fs+0x4fb/0x6c0 [ 275.970183][ T28] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 275.988017][ T28] ? folio_unlock+0x122/0x2f0 [ 276.007337][ T28] f2fs_write_inode+0x4c3/0x540 [ 276.017964][ T28] __writeback_single_inode+0x67d/0x11e0 [ 276.037491][ T28] writeback_sb_inodes+0xc2b/0x1b20 [ 276.055110][ T28] ? queue_io+0x630/0x630 [ 276.065421][ T28] ? __writeback_inodes_wb+0x400/0x400 [ 276.084296][ T28] __writeback_inodes_wb+0x114/0x400 [ 276.100867][ T28] wb_writeback+0x4b1/0xe10 [ 276.130263][ T28] ? percpu_ref_tryget+0x260/0x260 [ 276.154540][ T28] ? _find_next_bit+0x11b/0x120 [ 276.180108][ T28] wb_workfn+0xc9e/0x1020 [ 276.205916][ T28] ? inode_wait_for_writeback+0x280/0x280 [ 276.238537][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 276.256691][ T28] ? print_irqtrace_events+0x210/0x210 [ 276.262285][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 276.281932][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 276.300891][ T28] ? process_one_work+0x7a9/0x11d0 [ 276.321635][ T28] process_one_work+0x8a9/0x11d0 [ 276.352187][ T28] ? worker_detach_from_pool+0x260/0x260 [ 276.371267][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 276.376938][ T28] ? kthread_data+0x4e/0xc0 [ 276.381483][ T28] ? wq_worker_running+0x97/0x190 [ 276.386595][ T28] worker_thread+0xa47/0x1200 [ 276.391406][ T28] ? __sched_text_start+0x8/0x8 [ 276.396377][ T28] kthread+0x28d/0x320 [ 276.400463][ T28] ? worker_clr_flags+0x190/0x190 [ 276.405641][ T28] ? kthread_blkcg+0xd0/0xd0 [ 276.410318][ T28] ret_from_fork+0x1f/0x30 [ 276.444745][ T28] [ 276.448462][ T28] INFO: task syz.0.264:4694 blocked for more than 145 seconds. [ 276.465839][ T28] Not tainted 6.1.97-syzkaller #0 [ 276.471843][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.487540][ T28] task:syz.0.264 state:D stack:26384 pid:4694 ppid:3545 flags:0x00004004 [ 276.501591][ T28] Call Trace: [ 276.504959][ T28] [ 276.511258][ T28] __schedule+0x142d/0x4550 [ 276.515893][ T28] ? __sched_text_start+0x8/0x8 [ 276.526751][ T28] ? print_irqtrace_events+0x210/0x210 [ 276.532378][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 276.545701][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 276.552622][ T28] schedule+0xbf/0x180 [ 276.562493][ T3649] hub 4-1:0.0: activate --> -90 [ 276.568687][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 276.574682][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 276.586552][ T28] ? down_write_killable_nested+0x90/0x90 [ 276.592424][ T28] ? read_lock_is_recursive+0x10/0x10 [ 276.603981][ T28] ? ima_lsm_policy_change+0x620/0x620 [ 276.611041][ T28] ? rwsem_write_trylock+0x166/0x210 [ 276.625571][ T28] ? clear_nonspinnable+0x60/0x60 [ 276.634131][ T28] process_measurement+0x446/0x21b0 [ 276.643373][ T28] ? mark_lock+0x9a/0x340 [ 276.651720][ T28] ? ima_file_mmap+0x1c0/0x1c0 [ 276.660282][ T28] ? dquot_initialize+0x20/0x20 [ 276.665237][ T28] ? aa_get_current_label+0x111/0x1d0 [ 276.674391][ T28] ? apparmor_current_getsecid_subj+0xac/0x110 [ 276.684897][ T28] ima_file_check+0xed/0x170 [ 276.693231][ T28] ? do_dentry_open+0xce4/0x10f0 [ 276.702922][ T28] ? ima_bprm_check+0x2b0/0x2b0 [ 276.711502][ T28] path_openat+0x2687/0x2e60 [ 276.719843][ T28] ? mark_lock+0x9a/0x340 [ 276.725361][ T28] ? do_filp_open+0x480/0x480 [ 276.734516][ T28] do_filp_open+0x230/0x480 [ 276.742766][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 276.751131][ T28] ? _raw_spin_unlock+0x24/0x40 [ 276.761932][ T28] ? alloc_fd+0x59c/0x640 [ 276.770120][ T28] do_sys_openat2+0x13b/0x500 [ 276.774993][ T28] ? do_sys_open+0x220/0x220 [ 276.784320][ T28] __x64_sys_openat+0x243/0x290 [ 276.792954][ T28] ? __ia32_sys_open+0x270/0x270 [ 276.801803][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 276.811659][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 276.820662][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 276.831541][ T28] do_syscall_64+0x3b/0xb0 [ 276.840541][ T28] ? clear_bhb_loop+0x45/0xa0 [ 276.845360][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.855034][ T28] RIP: 0033:0x7f2d90975bd9 [ 276.863402][ T28] RSP: 002b:00007f2d9168e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 276.879758][ T28] RAX: ffffffffffffffda RBX: 00007f2d90b04110 RCX: 00007f2d90975bd9 [ 276.891464][ T28] RDX: 0000000000183341 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 276.903289][ T28] RBP: 00007f2d909e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 276.915101][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.928074][ T28] R13: 000000000000006e R14: 00007f2d90b04110 R15: 00007ffd47c94ea8 [ 276.942159][ T28] [ 276.945313][ T28] INFO: task syz.0.264:4695 blocked for more than 146 seconds. [ 276.955171][ T28] Not tainted 6.1.97-syzkaller #0 [ 276.966751][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.975599][ T28] task:syz.0.264 state:D stack:26040 pid:4695 ppid:3545 flags:0x00004004 [ 276.992827][ T28] Call Trace: [ 276.997855][ T28] [ 277.000880][ T28] __schedule+0x142d/0x4550 [ 277.005655][ T28] ? __sched_text_start+0x8/0x8 [ 277.016711][ T28] ? print_irqtrace_events+0x210/0x210 [ 277.022420][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 277.035131][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 277.042017][ T28] schedule+0xbf/0x180 [ 277.052147][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 277.060170][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 277.072036][ T28] ? down_write_killable_nested+0x90/0x90 [ 277.079282][ T28] ? read_lock_is_recursive+0x10/0x10 [ 277.084814][ T28] ? rwsem_write_trylock+0x166/0x210 [ 277.096224][ T28] ? clear_nonspinnable+0x60/0x60 [ 277.101366][ T28] f2fs_issue_checkpoint+0x2d2/0x4d0 [ 277.112936][ T28] ? f2fs_destroy_checkpoint_caches+0x20/0x20 [ 277.120681][ T28] ? d_instantiate_new+0x7b/0x110 [ 277.125805][ T28] ? f2fs_create+0x7a7/0xa10 [ 277.137556][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 277.142974][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 277.153416][ T28] ? f2fs_sync_fs+0x201/0x410 [ 277.160765][ T28] f2fs_create+0x862/0xa10 [ 277.165384][ T28] ? f2fs_lookup+0xae0/0xae0 [ 277.175601][ T28] path_openat+0x12f1/0x2e60 [ 277.182844][ T28] ? do_filp_open+0x480/0x480 [ 277.192366][ T28] do_filp_open+0x230/0x480 [ 277.202384][ T3594] usb 4-1: USB disconnect, device number 17 [ 277.208613][ T3649] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 277.229450][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 277.235636][ T3649] usb 4-1-port1: attempt power cycle [ 277.244588][ T28] ? _raw_spin_unlock+0x24/0x40 [ 277.253472][ T28] ? alloc_fd+0x59c/0x640 [ 277.261512][ T28] do_sys_openat2+0x13b/0x500 [ 277.270071][ T28] ? do_sys_open+0x220/0x220 [ 277.274783][ T28] __x64_sys_openat+0x243/0x290 [ 277.284025][ T28] ? __ia32_sys_open+0x270/0x270 [ 277.292824][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 277.302541][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 277.311744][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 277.321508][ T28] do_syscall_64+0x3b/0xb0 [ 277.327747][ T28] ? clear_bhb_loop+0x45/0xa0 [ 277.332590][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.347069][ T28] RIP: 0033:0x7f2d90975bd9 [ 277.351602][ T28] RSP: 002b:00007f2d9166d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 277.367485][ T28] RAX: ffffffffffffffda RBX: 00007f2d90b041e8 RCX: 00007f2d90975bd9 [ 277.375814][ T28] RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 277.387437][ T28] RBP: 00007f2d909e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 277.395636][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.404594][ T28] R13: 000000000000006e R14: 00007f2d90b041e8 R15: 00007ffd47c94ea8 [ 277.413075][ T28] [ 277.426161][ T28] [ 277.426161][ T28] Showing all locks held in the system: [ 277.435234][ T28] 1 lock held by rcu_tasks_kthre/12: [ 277.449547][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 277.468366][ T28] 1 lock held by rcu_tasks_trace/13: [ 277.473912][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 277.490137][ T28] 1 lock held by khungtaskd/28: [ 277.495095][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 277.509732][ T28] 4 locks held by kworker/u4:2/34: [ 277.514962][ T28] #0: ffff888017a7c138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 277.532890][ T28] #1: ffffc90000ab7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 277.549075][ T28] #2: ffff88807c9340e0 (&type->s_umount_key#67){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 277.566196][ T28] #3: ffff88805f151140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 277.576426][ T28] 2 locks held by getty/3306: [ 277.581207][ T28] #0: ffff888028b92098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 277.597797][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 277.624765][ T28] 3 locks held by kworker/0:4/3594: [ 277.638186][ T28] #0: ffff88823bc18f38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 277.662445][ T28] #1: ffffc900044bfd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 277.678933][ T28] #2: ffff888144b03190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 277.691758][ T28] 4 locks held by syz.0.264/4693: [ 277.700487][ T28] 2 locks held by syz.0.264/4694: [ 277.705600][ T28] #0: ffff88807c934460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 277.718784][ T28] #1: ffff8880749aa4d0 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 277.733904][ T28] 3 locks held by syz.0.264/4695: [ 277.744431][ T28] #0: ffff88807c934460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 277.779353][ T28] #1: ffff8880749a9bf0 (&type->i_mutex_dir_key#11){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 277.824121][ T28] #2: ffff88805f151140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x2d2/0x4d0 [ 277.838496][ T28] [ 277.840964][ T28] ============================================= [ 277.840964][ T28] [ 277.856541][ T28] NMI backtrace for cpu 0 [ 277.860920][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 277.868739][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 277.878801][ T28] Call Trace: [ 277.882086][ T28] [ 277.885018][ T28] dump_stack_lvl+0x1e3/0x2cb [ 277.889711][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 277.895181][ T28] ? panic+0x764/0x764 [ 277.899263][ T28] ? vprintk_emit+0x622/0x740 [ 277.903954][ T28] ? printk_sprint+0x490/0x490 [ 277.908818][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 277.913942][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 277.918894][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 277.925060][ T28] ? _printk+0xd1/0x111 [ 277.929225][ T28] ? panic+0x764/0x764 [ 277.933300][ T28] ? __wake_up_klogd+0xcc/0x100 [ 277.938154][ T28] ? panic+0x764/0x764 [ 277.942230][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 277.948320][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 277.954402][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 277.960395][ T28] watchdog+0xf88/0xfd0 [ 277.964591][ T28] ? watchdog+0x1f8/0xfd0 [ 277.968961][ T28] kthread+0x28d/0x320 [ 277.973047][ T28] ? hungtask_pm_notify+0x50/0x50 [ 277.978097][ T28] ? kthread_blkcg+0xd0/0xd0 [ 277.982717][ T28] ret_from_fork+0x1f/0x30 [ 277.987184][ T28] [ 277.991006][ T28] Sending NMI from CPU 0 to CPUs 1: [ 277.996425][ C1] NMI backtrace for cpu 1 [ 277.996436][ C1] CPU: 1 PID: 4693 Comm: syz.0.264 Not tainted 6.1.97-syzkaller #0 [ 277.996452][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 277.996461][ C1] RIP: 0010:kasan_check_range+0x33/0x290 [ 277.996482][ C1] Code: 85 f6 0f 84 9a 01 00 00 48 89 fd 48 01 f5 0f 82 5a 02 00 00 48 89 fd 48 c1 ed 2f 81 fd ff ff 01 00 0f 82 47 02 00 00 48 89 fb <48> c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4e 8d 0c 03 4c 8d 54 37 [ 277.996494][ C1] RSP: 0018:ffffc9000317e998 EFLAGS: 00000246 [ 277.996508][ C1] RAX: 0000000000000001 RBX: ffff88807e400060 RCX: ffffffff8a946c0a [ 277.996519][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88807e400060 [ 277.996528][ C1] RBP: 000000000001ffff R08: dffffc0000000000 R09: ffffed100fc8000d [ 277.996539][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200062fd44 [ 277.996549][ C1] R13: dffffc0000000000 R14: ffff8880779a9dc1 R15: 1ffff1100fc8000c [ 277.996559][ C1] FS: 00007f2d916af6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 277.996572][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.996583][ C1] CR2: 000000110c3f34bb CR3: 0000000074641000 CR4: 00000000003506e0 [ 277.996596][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.996605][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 277.996614][ C1] Call Trace: [ 277.996619][ C1] [ 277.996624][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 277.996645][ C1] ? read_lock_is_recursive+0x10/0x10 [ 277.996666][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 277.996685][ C1] ? nmi_handle+0x25/0x440 [ 277.996711][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 277.996731][ C1] ? nmi_handle+0x12e/0x440 [ 277.996749][ C1] ? nmi_handle+0x25/0x440 [ 277.996767][ C1] ? kasan_check_range+0x33/0x290 [ 277.996780][ C1] ? default_do_nmi+0x62/0x150 [ 277.996795][ C1] ? exc_nmi+0xa8/0x100 [ 277.996808][ C1] ? end_repeat_nmi+0x16/0x31 [ 277.996830][ C1] ? down_read+0x2fa/0xa30 [ 277.996844][ C1] ? kasan_check_range+0x33/0x290 [ 277.996858][ C1] ? kasan_check_range+0x33/0x290 [ 277.996872][ C1] ? kasan_check_range+0x33/0x290 [ 277.996886][ C1] [ 277.996890][ C1] [ 277.996896][ C1] down_read+0x2fa/0xa30 [ 277.996912][ C1] ? do_garbage_collect+0x22d7/0x81f0 [ 277.996931][ C1] ? xas_find_conflict+0x890/0x890 [ 277.996949][ C1] ? __down_common+0x8b0/0x8b0 [ 277.996963][ C1] ? __up_read+0x2b9/0x690 [ 277.996980][ C1] ? up_read+0x20/0x20 [ 277.996995][ C1] ? PageHeadHuge+0x8e/0x1c0 [ 277.997013][ C1] do_garbage_collect+0x21ed/0x81f0 [ 277.997069][ C1] ? f2fs_gc+0x32a0/0x32a0 [ 277.997085][ C1] ? get_victim_by_default+0x6893/0x6ff0 [ 277.997104][ C1] ? mark_lock+0x9a/0x340 [ 277.997130][ C1] ? f2fs_gc+0xef4/0x32a0 [ 277.997147][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 277.997172][ C1] ? up_write+0x19d/0x580 [ 277.997187][ C1] ? get_ckpt_valid_blocks+0x260/0x260 [ 277.997202][ C1] ? __up_read+0x690/0x690 [ 277.997227][ C1] f2fs_gc+0x1169/0x32a0 [ 277.997260][ C1] ? f2fs_start_bidx_of_node+0x370/0x370 [ 277.997288][ C1] ? rwsem_write_trylock+0x166/0x210 [ 277.997312][ C1] f2fs_balance_fs+0x506/0x6c0 [ 277.997331][ C1] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 277.997349][ C1] ? __up_read+0x2b9/0x690 [ 277.997366][ C1] ? folio_unlock+0x122/0x2f0 [ 277.997388][ C1] f2fs_map_blocks+0x2871/0x3ab0 [ 277.997420][ C1] ? f2fs_do_map_lock+0x70/0x70 [ 277.997443][ C1] expand_inode_data+0x56d/0xaf0 [ 277.997465][ C1] ? f2fs_insert_range+0x3c0/0x3c0 [ 277.997477][ C1] ? file_modified_flags+0x3e1/0x480 [ 277.997503][ C1] ? rcu_read_lock_any_held+0xb3/0x160 [ 277.997522][ C1] f2fs_fallocate+0x44a/0x9f0 [ 277.997548][ C1] vfs_fallocate+0x547/0x6b0 [ 277.997568][ C1] do_vfs_ioctl+0x222c/0x2a90 [ 277.997584][ C1] ? __x64_compat_sys_ioctl+0x80/0x80 [ 277.997598][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 277.997614][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 277.997632][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 277.997651][ C1] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 277.997668][ C1] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 277.997683][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 277.997704][ C1] ? __fget_files+0x28/0x4a0 [ 277.997727][ C1] ? __fget_files+0x28/0x4a0 [ 277.997739][ C1] ? __fget_files+0x435/0x4a0 [ 277.997753][ C1] ? __fget_files+0x28/0x4a0 [ 277.997769][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 277.997783][ C1] ? security_file_ioctl+0x7d/0xa0 [ 277.997798][ C1] __se_sys_ioctl+0x81/0x160 [ 277.997818][ C1] do_syscall_64+0x3b/0xb0 [ 277.997835][ C1] ? clear_bhb_loop+0x45/0xa0 [ 277.997852][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.997870][ C1] RIP: 0033:0x7f2d90975bd9 [ 277.997882][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.997893][ C1] RSP: 002b:00007f2d916af048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.997908][ C1] RAX: ffffffffffffffda RBX: 00007f2d90b04038 RCX: 00007f2d90975bd9 [ 277.997918][ C1] RDX: 00000000200000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 277.997928][ C1] RBP: 00007f2d909e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 277.997936][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.997945][ C1] R13: 000000000000006e R14: 00007f2d90b04038 R15: 00007ffd47c94ea8 [ 277.997962][ C1] [ 278.379796][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 278.379811][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.97-syzkaller #0 [ 278.379828][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 278.379837][ T28] Call Trace: [ 278.379843][ T28] [ 278.379849][ T28] dump_stack_lvl+0x1e3/0x2cb [ 278.379880][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 278.379903][ T28] ? panic+0x764/0x764 [ 278.379919][ T28] ? llist_add_batch+0x160/0x1d0 [ 278.379942][ T28] ? vscnprintf+0x59/0x80 [ 278.379962][ T28] panic+0x318/0x764 [ 278.379979][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 278.380003][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 278.380024][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 278.380045][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 278.380069][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 278.380094][ T28] watchdog+0xfc7/0xfd0 [ 278.380118][ T28] ? watchdog+0x1f8/0xfd0 [ 278.380140][ T28] kthread+0x28d/0x320 [ 278.380154][ T28] ? hungtask_pm_notify+0x50/0x50 [ 278.380172][ T28] ? kthread_blkcg+0xd0/0xd0 [ 278.380187][ T28] ret_from_fork+0x1f/0x30 [ 278.380217][ T28] [ 278.384231][ T28] Kernel Offset: disabled [ 278.655600][ T28] Rebooting in 86400 seconds..