last executing test programs: 1m19.037844486s ago: executing program 2 (id=551): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x804, &(0x7f00000006c0)={[{@shortname_lower}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@fat=@sys_immutable}, {@shortname_mixed}, {@shortname_win95}, {@utf8no}, {@fat=@debug}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_winnt}, {@shortname_mixed}, {@utf8no}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1m18.699082494s ago: executing program 2 (id=553): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000300)="df", 0x4000000000000000}) syz_clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m18.038452798s ago: executing program 2 (id=555): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x20f, &(0x7f0000000880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) munmap(&(0x7f0000004000/0x4000)=nil, 0x4000) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000007000/0x4000)=nil) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', '', [], 0xa, "71909e7dc8cd18fd2f87cffddcd48bf68a2152b535d3bfb5572c111a782a0bdb624390645daa0576b93ecfa00a25dc7b7aea2a32ec064e49d4fa5000a5f812c243203b55b2607123d3fa5a762499bdc2b0875838aa867eca9f7455e4bc1a87018a7ae03a487e5023c3dd5880938006ca4185d014c9d5bd0fc606499c8b60ec865acf509f8e0000000000"}, 0x9f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800c500001c0000000000119078000000000000000000004e2300089078"], 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000400)=0xfffffffffffeffff, r2, 0x0, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x120) clock_gettime(0x0, &(0x7f00000002c0)) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000000280)=0xfffffffd, 0x7, 0x40000000, 0x0, 0x0, 0x5) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) read$FUSE(r5, &(0x7f0000002900)={0x2020}, 0x2020) creat(0x0, 0x0) lseek(r0, 0x4655, 0x0) 1m13.864618208s ago: executing program 2 (id=556): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x0, "2e8cdf2866fd9d1d1f2282d33b5f8c1370dce4d14abed4cf7572b930432b10d3"}) 1m12.917441805s ago: executing program 2 (id=564): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x20) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0585611, &(0x7f00000000c0)=@overlay={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fc824b8b"}}) 1m12.00937966s ago: executing program 2 (id=568): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000004c0)={0x0, 0x0, 0xb, 0x5}) 58.402596089s ago: executing program 0 (id=616): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x7}]}, 0x18}}, 0x0) 58.041162168s ago: executing program 0 (id=617): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x89a0, 0x0) 58.040681348s ago: executing program 0 (id=618): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014004000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4", 0x6d}], 0x1}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000']) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 57.65117465s ago: executing program 0 (id=619): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 57.559250487s ago: executing program 0 (id=620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'geneve1\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 57.487599764s ago: executing program 0 (id=621): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 34.155688556s ago: executing program 1 (id=667): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e20, 0x48ed, @local}}, 0xcb5, 0x0, 0x4ef, 0xfffffffc, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000005400)=[{{&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x18}}], 0x1, 0x20040860) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000003c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x5}, 0x20) r2 = socket(0x2, 0xa, 0x80000009) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000440)={0x9, 0x0, 0x6, 0x5d137180}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r3, 0x1) r4 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) socket(0x1, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x71, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r5, 0x74, &(0x7f0000000100)=[@in={0x2, 0x4e22}, @in6={0xa, 0x4e24, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3f}, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1f}, @in6={0xa, 0x4e23, 0x5ed, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff3fd3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40, 0x1, 0x3, 0x6, 0x6, 0x3, 0x0, 0x2, 0x6, 0x3, 0x1}, 0xe) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 34.034508746s ago: executing program 1 (id=668): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) renameat2(r3, &(0x7f0000000080)='./file1\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0) 33.828816602s ago: executing program 1 (id=669): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x0, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000"], 0x0) 33.499462899s ago: executing program 1 (id=671): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003a00010100000000000000000a00000029c13799c9266dd85f147bfba12f0f898bf6d30400e51b7111b4efaeb5df904c8fa973"], 0x14}}, 0x0) r1 = socket$inet(0x2, 0x2000000080002, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001400)={'tunl0\x00', &(0x7f0000001380)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x20000012}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "460a996ff8a893ca"}}, 0x48}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7385b6116602f9fc"}}, 0x38}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x34, r6, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000018000000000000000000850000003600000085000000080000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) futex(0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) io_setup(0xd1, &(0x7f0000000040)=0x0) io_submit(r13, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, r12, &(0x7f0000000340)='\n', 0x1}]) accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000000)=0x6e, 0x80000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r14, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xc810) 31.685555517s ago: executing program 1 (id=675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000300)='hrtimer_expire_entry\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x4008af25, &(0x7f00000001c0)) 31.235927244s ago: executing program 1 (id=678): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 25.011121831s ago: executing program 3 (id=691): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0020}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r0, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 24.839136835s ago: executing program 3 (id=693): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x2, 0x0) 24.404539361s ago: executing program 3 (id=694): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 24.04306896s ago: executing program 3 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f0000000280)) 23.949066897s ago: executing program 3 (id=696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 17.995673893s ago: executing program 3 (id=699): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r1) execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000140)=[&(0x7f00000021c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'/1142, &(0x7f0000001080)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\ra\xb1\xc61\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfeJ\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1', 0x0]) 16.007044115s ago: executing program 4 (id=702): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './cgroup'}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x8, 0x0, &(0x7f0000000040)) 15.781737374s ago: executing program 4 (id=703): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) brk(0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x1}, 0x0, 0x81}}]}}]}, 0x64}}, 0x0) 11.983045343s ago: executing program 4 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f0000000280)) 8.018690976s ago: executing program 4 (id=705): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 3.019659204s ago: executing program 4 (id=707): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001051, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) readv(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 0s ago: executing program 4 (id=708): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000140)={r1}, 0xc) kernel console output (not intermixed with test programs): 46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.466461][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.477615][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.486910][ T4892] usb 3-1: USB disconnect, device number 7 [ 135.526231][ T3746] device bridge_slave_1 left promiscuous mode [ 135.532450][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.546708][ T3746] device bridge_slave_0 left promiscuous mode [ 135.552923][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.582508][ T5089] loop4: detected capacity change from 0 to 32768 [ 135.593965][ T3746] device hsr_slave_0 left promiscuous mode [ 135.617765][ T3746] device hsr_slave_1 left promiscuous mode [ 135.629692][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.639055][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.651181][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.670926][ T5089] XFS (loop4): Mounting V5 Filesystem [ 135.671191][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.696655][ T3746] device bridge_slave_1 left promiscuous mode [ 135.702956][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.726903][ T3746] device bridge_slave_0 left promiscuous mode [ 135.734341][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.772769][ T5089] XFS (loop4): Ending clean mount [ 135.782934][ T5089] XFS (loop4): Quotacheck needed: Please wait. [ 135.842470][ T5089] XFS (loop4): Quotacheck: Done. [ 135.907753][ T3746] device veth1_macvtap left promiscuous mode [ 135.914160][ T3746] device veth0_macvtap left promiscuous mode [ 135.921378][ T3746] device veth1_vlan left promiscuous mode [ 135.952879][ T3746] device veth0_vlan left promiscuous mode [ 135.962199][ T3746] device veth1_macvtap left promiscuous mode [ 135.968869][ T3746] device veth0_macvtap left promiscuous mode [ 135.975158][ T3746] device veth1_vlan left promiscuous mode [ 135.978352][ T4492] XFS (loop4): Unmounting Filesystem [ 135.980991][ T3746] device veth0_vlan left promiscuous mode [ 136.720011][ T5130] loop0: detected capacity change from 0 to 128 [ 136.857671][ T5130] syz.0.386: attempt to access beyond end of device [ 136.857671][ T5130] loop0: rw=34817, sector=121, nr_sectors = 8 limit=128 [ 136.944234][ T3637] kworker/u4:6: attempt to access beyond end of device [ 136.944234][ T3637] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 136.960730][ T3637] kworker/u4:6: attempt to access beyond end of device [ 136.960730][ T3637] loop0: rw=1, sector=385, nr_sectors = 656 limit=128 [ 137.106514][ T3746] team0 (unregistering): Port device team_slave_1 removed [ 137.139257][ T3746] team0 (unregistering): Port device team_slave_0 removed [ 137.173994][ T3746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.206507][ T3746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.324601][ T4891] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.499992][ T3746] bond0 (unregistering): Released all slaves [ 137.694723][ T4891] usb 1-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 137.703917][ T4891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.714895][ T4891] usb 1-1: config 0 descriptor?? [ 137.768316][ T4891] usb-storage 1-1:0.0: USB Mass Storage device detected [ 137.857100][ T3746] team0 (unregistering): Port device team_slave_1 removed [ 137.891363][ T3746] team0 (unregistering): Port device team_slave_0 removed [ 137.920051][ T3746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.950728][ T3746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.312531][ T3746] bond0 (unregistering): Released all slaves [ 138.392280][ T4878] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.411206][ T5131] netlink: 'syz.2.387': attribute type 21 has an invalid length. [ 138.419573][ T5131] netlink: 'syz.2.387': attribute type 15 has an invalid length. [ 138.451172][ T5131] netlink: 156 bytes leftover after parsing attributes in process `syz.2.387'. [ 138.464031][ T5131] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.489843][ T5131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.497634][ T5131] IPv6: NLM_F_CREATE should be set when creating new route [ 138.505025][ T5131] IPv6: NLM_F_CREATE should be set when creating new route [ 138.512341][ T5131] IPv6: NLM_F_CREATE should be set when creating new route [ 138.536938][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.555161][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.578637][ T4892] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.585814][ T4892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.594928][ T4892] usb 1-1: USB disconnect, device number 8 [ 138.603344][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.611695][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.633789][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.655954][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.663078][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.686402][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.700232][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.757354][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.775103][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.784025][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.817841][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.863710][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.871918][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.889107][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.932337][ T4878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.956529][ T4878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.991907][ T4817] device veth0_vlan entered promiscuous mode [ 139.012112][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.025366][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.044114][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.063165][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.081976][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.107623][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.126097][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.133781][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.155240][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.174200][ T4817] device veth1_vlan entered promiscuous mode [ 139.278763][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.289102][ T5140] loop4: detected capacity change from 0 to 32768 [ 139.296850][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.340919][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.353917][ T5140] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.390 (5140) [ 139.385447][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.398726][ T4817] device veth0_macvtap entered promiscuous mode [ 139.457518][ T5140] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.477331][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.490013][ T5140] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 139.509006][ T4817] device veth1_macvtap entered promiscuous mode [ 139.512359][ T5140] BTRFS info (device loop4): enabling auto defrag [ 139.522590][ T5140] BTRFS info (device loop4): max_inline at 0 [ 139.544960][ T5140] BTRFS info (device loop4): enabling ssd optimizations [ 139.585408][ T5140] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 139.599547][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.610568][ T5140] BTRFS info (device loop4): use lzo compression, level 0 [ 139.625163][ T5140] BTRFS info (device loop4): using free space tree [ 139.632662][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.649929][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.682107][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.707761][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.724156][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.746497][ T4817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.764621][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.773745][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.799856][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.820434][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.832410][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.844486][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.854316][ T4817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.865046][ T4341] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.872838][ T4817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.885721][ T4817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.894018][ T5182] Bluetooth: MGMT ver 1.22 [ 139.919944][ T4817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.929022][ T4817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.937978][ T4817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.947344][ T4817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.115826][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.128908][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.155879][ T27] audit: type=1800 audit(1721029419.337:9): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.390" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 140.210815][ T27] audit: type=1804 audit(1721029419.387:10): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.390" name="/newroot/27/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 140.210914][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.325987][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.403329][ T5192] loop2: detected capacity change from 0 to 512 [ 140.408021][ T4878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.422310][ T5192] EXT4-fs: Ignoring removed oldalloc option [ 140.448537][ T4341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.465953][ T4341] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.477896][ T4492] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.485292][ T4341] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.510347][ T5192] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.404: Parent and EA inode have the same ino 15 [ 140.538395][ T5192] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 140.562823][ T5192] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.404: Parent and EA inode have the same ino 15 [ 140.579983][ T5192] EXT4-fs (loop2): 1 orphan inode deleted [ 140.586435][ T5192] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.674649][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.683438][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.728391][ T3811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.742943][ T3811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.765853][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.773898][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.848845][ T4341] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.858097][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.866995][ T4341] usb 1-1: Product: syz [ 140.871178][ T4341] usb 1-1: Manufacturer: syz [ 140.875926][ T4341] usb 1-1: SerialNumber: syz [ 140.882412][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.895247][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.950622][ T4341] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 141.333287][ T4341] cdc_ncm 1-1:1.0: bind() failure [ 141.382756][ T4341] usb 1-1: USB disconnect, device number 9 [ 141.527787][ T5195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.536706][ T5195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.537082][ T4661] EXT4-fs (loop2): unmounting filesystem. [ 141.554877][ T4878] device veth0_vlan entered promiscuous mode [ 141.565453][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.595210][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.627091][ T4878] device veth1_vlan entered promiscuous mode [ 141.688792][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.707819][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.728070][ T4878] device veth0_macvtap entered promiscuous mode [ 141.734688][ T4395] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.739369][ T4878] device veth1_macvtap entered promiscuous mode [ 141.789220][ T5207] netlink: 'syz.3.326': attribute type 4 has an invalid length. [ 141.842626][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.867467][ T5209] loop2: detected capacity change from 0 to 512 [ 141.886418][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.904532][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.924993][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.941367][ T5209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 141.982328][ T5209] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 142.011970][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.090138][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.090161][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.090177][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.092405][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.100133][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.100785][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.101668][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.102479][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.106057][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.106075][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.106084][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.106096][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.106106][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.106117][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.106127][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.106138][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.107291][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.109955][ T4878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.110012][ T4878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.110038][ T4878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.110039][ T5209] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.408: corrupted inode contents [ 142.110064][ T4878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.112851][ T5209] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz.2.408: mark_inode_dirty error [ 142.114143][ T5209] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.408: corrupted inode contents [ 142.115767][ T4395] usb 5-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 142.115795][ T4395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.117993][ T4395] usb 5-1: config 0 descriptor?? [ 142.120870][ T5209] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.408: mark_inode_dirty error [ 142.157368][ T4395] usb-storage 5-1:0.0: USB Mass Storage device detected [ 142.186145][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.186904][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.303787][ T4661] EXT4-fs (loop2): unmounting filesystem. [ 142.338912][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.338980][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.358454][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.412128][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.412191][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.464330][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.500206][ T5225] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 142.500232][ T5225] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 142.500304][ T5225] vhci_hcd vhci_hcd.0: Device attached [ 142.544589][ T5226] vhci_hcd: connection closed [ 142.544925][ T3637] vhci_hcd: stop threads [ 142.544963][ T3637] vhci_hcd: release socket [ 142.544980][ T3637] vhci_hcd: disconnect device [ 142.725344][ T4394] usb 5-1: USB disconnect, device number 6 [ 142.744240][ T5216] loop0: detected capacity change from 0 to 2048 [ 142.970770][ T5241] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.073397][ T3590] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.086068][ T27] audit: type=1804 audit(1721029422.267:11): pid=5222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.409" name="/newroot/112/file0/file2" dev="loop0" ino=16 res=1 errno=0 [ 143.318761][ T3590] usb 2-1: Using ep0 maxpacket: 16 [ 143.404450][ T4394] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.444069][ T5216] syz.0.409 (5216) used greatest stack depth: 18704 bytes left [ 143.454764][ T3590] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.454802][ T3590] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.454840][ T3590] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 143.454864][ T3590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.456691][ T3590] usb 2-1: config 0 descriptor?? [ 143.470010][ T5250] netlink: 'syz.4.420': attribute type 4 has an invalid length. [ 143.494648][ T5215] tty tty1: ldisc open failed (-12), clearing slot 0 [ 143.763793][ T5235] loop1: detected capacity change from 0 to 1024 [ 143.775658][ T3590] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 143.845320][ T5235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.899658][ T5235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.984615][ T5235] EXT4-fs (loop1): Test dummy encryption mode enabled [ 144.028415][ T5258] loop4: detected capacity change from 0 to 512 [ 144.066346][ T5235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 144.089813][ T4394] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.104563][ T5235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.112880][ T5258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.132735][ T4394] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.134751][ T5258] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 144.141735][ T4394] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.198039][ T5260] loop3: detected capacity change from 0 to 4096 [ 144.250851][ T5258] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.421: corrupted inode contents [ 144.270014][ T5258] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz.4.421: mark_inode_dirty error [ 144.283062][ T5260] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 144.292701][ T5258] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.421: corrupted inode contents [ 144.325628][ T5258] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.421: mark_inode_dirty error [ 144.331888][ T5260] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 144.344648][ T4394] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.361511][ T4394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.388297][ T4394] usb 3-1: Product: syz [ 144.388978][ T5260] ntfs3: loop3: Failed to load $MFTMirr. [ 144.393745][ T4394] usb 3-1: Manufacturer: syz [ 144.413975][ T4394] usb 3-1: SerialNumber: syz [ 144.427672][ T4492] EXT4-fs (loop4): unmounting filesystem. [ 144.460485][ T4394] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 144.483293][ T4394] cdc_ncm 3-1:1.0: bind() failure [ 144.549248][ T5271] loop4: detected capacity change from 0 to 128 [ 144.562732][ T5235] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.686614][ T4395] usb 3-1: USB disconnect, device number 8 [ 144.778569][ T4394] usb 2-1: USB disconnect, device number 8 [ 144.819895][ T5271] syz.4.426: attempt to access beyond end of device [ 144.819895][ T5271] loop4: rw=34817, sector=121, nr_sectors = 8 limit=128 [ 144.847361][ T5278] loop3: detected capacity change from 0 to 256 [ 144.902165][ T3811] kworker/u4:12: attempt to access beyond end of device [ 144.902165][ T3811] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 144.920864][ T3811] kworker/u4:12: attempt to access beyond end of device [ 144.920864][ T3811] loop4: rw=1, sector=385, nr_sectors = 656 limit=128 [ 144.954113][ T3537] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.055214][ T5280] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 145.061959][ T5280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 145.089638][ T5280] vhci_hcd vhci_hcd.0: Device attached [ 145.109503][ T5281] vhci_hcd: connection closed [ 145.109797][ T3637] vhci_hcd: stop threads [ 145.121081][ T3637] vhci_hcd: release socket [ 145.149644][ T3637] vhci_hcd: disconnect device [ 146.386946][ T5292] netlink: 'syz.2.432': attribute type 4 has an invalid length. [ 146.648491][ T4878] EXT4-fs (loop1): unmounting filesystem. [ 146.651052][ T5303] loop0: detected capacity change from 0 to 512 [ 146.754014][ T5303] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.814724][ T5317] loop4: detected capacity change from 0 to 128 [ 146.831257][ T5303] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038 (0x7fffffff) [ 146.941615][ T5303] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz.0.437: corrupted inode contents [ 146.965850][ T5303] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz.0.437: mark_inode_dirty error [ 146.995783][ T5303] EXT4-fs error (device loop0): ext4_do_update_inode:5210: inode #2: comm syz.0.437: corrupted inode contents [ 147.012003][ T5320] syz.4.441: attempt to access beyond end of device [ 147.012003][ T5320] loop4: rw=34817, sector=121, nr_sectors = 8 limit=128 [ 147.044745][ T5303] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.437: mark_inode_dirty error [ 147.062284][ T5307] loop3: detected capacity change from 0 to 2048 [ 147.151556][ T3543] EXT4-fs (loop0): unmounting filesystem. [ 147.152053][ T5322] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.173272][ T3811] kworker/u4:12: attempt to access beyond end of device [ 147.173272][ T3811] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 147.199307][ T27] audit: type=1804 audit(1721029426.357:12): pid=5307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.435" name="/newroot/14/file0/file2" dev="loop3" ino=16 res=1 errno=0 [ 147.230179][ T3811] kworker/u4:12: attempt to access beyond end of device [ 147.230179][ T3811] loop4: rw=1, sector=385, nr_sectors = 656 limit=128 [ 147.518049][ T5315] loop1: detected capacity change from 0 to 40427 [ 147.554659][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 147.562931][ T5315] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 147.584650][ T5315] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 147.642144][ T5338] netlink: 'syz.2.447': attribute type 4 has an invalid length. [ 147.652177][ T5315] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.741944][ T5315] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 147.753077][ T5315] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.824616][ T5345] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 147.831173][ T5345] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 147.846000][ T5345] vhci_hcd vhci_hcd.0: Device attached [ 147.868186][ T5346] vhci_hcd: connection closed [ 147.868472][ T34] vhci_hcd: stop threads [ 147.883050][ T34] vhci_hcd: release socket [ 147.895432][ T34] vhci_hcd: disconnect device [ 148.073626][ T4394] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.247655][ T5358] loop4: detected capacity change from 0 to 512 [ 148.278454][ T5358] EXT4-fs (loop4): invalid inodes per group: 262176 [ 148.278454][ T5358] [ 148.324526][ T4394] usb 1-1: Using ep0 maxpacket: 16 [ 148.403249][ T5360] loop3: detected capacity change from 0 to 512 [ 148.454671][ T4394] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.471501][ T4394] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.490609][ T4394] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 148.515338][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.551680][ T4394] usb 1-1: config 0 descriptor?? [ 148.582873][ T5360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.601257][ T5360] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 148.637695][ T4394] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 148.690658][ T5360] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.454: corrupted inode contents [ 148.759346][ T5360] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz.3.454: mark_inode_dirty error [ 148.799212][ T5360] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.454: corrupted inode contents [ 148.859086][ T5360] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.454: mark_inode_dirty error [ 148.972746][ T5341] loop0: detected capacity change from 0 to 1024 [ 149.019524][ T5341] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.063834][ T5341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.085954][ T4817] EXT4-fs (loop3): unmounting filesystem. [ 149.103327][ T5341] EXT4-fs (loop0): Test dummy encryption mode enabled [ 149.142134][ T5341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 149.172690][ T5341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.174406][ C0] sched: RT throttling activated [ 149.281985][ T5366] loop2: detected capacity change from 0 to 2048 [ 149.349582][ T5370] loop3: detected capacity change from 0 to 512 [ 149.423831][ T5370] EXT4-fs: Ignoring removed oldalloc option [ 149.511354][ T5370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.456: Parent and EA inode have the same ino 15 [ 149.631242][ T5370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.456: Parent and EA inode have the same ino 15 [ 149.725771][ T5370] EXT4-fs (loop3): 1 orphan inode deleted [ 149.742967][ T5374] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.777265][ T5370] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.910595][ T5341] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.924537][ T27] audit: type=1804 audit(1721029429.047:13): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.455" name="/newroot/29/file0/file2" dev="loop2" ino=16 res=1 errno=0 [ 151.240142][ T4817] EXT4-fs (loop3): unmounting filesystem. [ 151.277122][ T4394] usb 1-1: USB disconnect, device number 10 [ 151.323485][ T3543] EXT4-fs (loop0): unmounting filesystem. [ 151.865118][ T5315] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 151.878437][ T5315] syz.1.438: attempt to access beyond end of device [ 151.878437][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 151.899509][ T5315] syz.1.438: attempt to access beyond end of device [ 151.899509][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 151.916383][ T5315] syz.1.438: attempt to access beyond end of device [ 151.916383][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 151.930959][ T5315] syz.1.438: attempt to access beyond end of device [ 151.930959][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 151.947269][ T5315] syz.1.438: attempt to access beyond end of device [ 151.947269][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 151.961826][ T5315] syz.1.438: attempt to access beyond end of device [ 151.961826][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 151.977784][ T5315] syz.1.438: attempt to access beyond end of device [ 151.977784][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 151.992307][ T5315] syz.1.438: attempt to access beyond end of device [ 151.992307][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 152.008374][ T5315] syz.1.438: attempt to access beyond end of device [ 152.008374][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 152.022899][ T5315] syz.1.438: attempt to access beyond end of device [ 152.022899][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 152.182068][ T5391] loop2: detected capacity change from 0 to 32768 [ 152.201847][ T5391] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.465 (5391) [ 152.350195][ T5395] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 152.356755][ T5395] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.370584][ T5395] vhci_hcd vhci_hcd.0: Device attached [ 152.399414][ T5396] vhci_hcd: connection closed [ 152.400924][ T34] vhci_hcd: stop threads [ 152.423530][ T34] vhci_hcd: release socket [ 152.428597][ T34] vhci_hcd: disconnect device [ 152.561825][ T5401] loop3: detected capacity change from 0 to 512 [ 152.586468][ T5401] EXT4-fs (loop3): invalid inodes per group: 262176 [ 152.586468][ T5401] [ 153.683387][ T5419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 154.162289][ T5391] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.176347][ T5391] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 154.185998][ T5391] BTRFS info (device loop2): enabling auto defrag [ 154.192597][ T5391] BTRFS info (device loop2): max_inline at 0 [ 154.217513][ T5391] BTRFS info (device loop2): enabling ssd optimizations [ 154.224599][ T5391] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 154.233807][ T5391] BTRFS info (device loop2): use lzo compression, level 0 [ 154.245303][ T5391] BTRFS info (device loop2): using free space tree [ 154.311445][ T5434] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 154.479075][ T5444] netlink: 'syz.4.477': attribute type 4 has an invalid length. [ 154.516889][ T5444] netlink: 17 bytes leftover after parsing attributes in process `syz.4.477'. [ 154.738548][ T5444] loop4: detected capacity change from 0 to 2048 [ 154.790199][ T5444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 155.186523][ T4492] EXT4-fs (loop4): unmounting filesystem. [ 155.259515][ T4661] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.457509][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 155.588220][ T5467] loop3: detected capacity change from 0 to 4096 [ 155.650281][ T5467] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 155.683862][ T5467] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 155.705885][ T5467] ntfs3: loop3: Failed to load $MFTMirr. [ 155.957677][ T5477] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 156.131497][ T5481] loop0: detected capacity change from 0 to 512 [ 156.164622][ T5481] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.339530][ T5481] EXT4-fs (loop0): orphan cleanup on readonly fs [ 156.400396][ T5481] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.490: bg 0: block 264: padding at end of block bitmap is not set [ 156.504505][ T3590] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.522237][ T5481] EXT4-fs (loop0): Remounting filesystem read-only [ 156.570958][ T5481] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 156.628748][ T5481] EXT4-fs (loop0): 1 truncate cleaned up [ 156.657527][ T5481] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.744517][ T3590] usb 5-1: Using ep0 maxpacket: 32 [ 156.864797][ T3590] usb 5-1: config 1 interface 0 altsetting 87 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.884723][ T5315] bio_check_eod: 3152 callbacks suppressed [ 156.884748][ T5315] syz.1.438: attempt to access beyond end of device [ 156.884748][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 156.905420][ T5315] syz.1.438: attempt to access beyond end of device [ 156.905420][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 156.922422][ T5315] syz.1.438: attempt to access beyond end of device [ 156.922422][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 156.924520][ T3590] usb 5-1: config 1 interface 0 altsetting 87 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.936915][ T5315] syz.1.438: attempt to access beyond end of device [ 156.936915][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 156.963493][ T5315] syz.1.438: attempt to access beyond end of device [ 156.963493][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 156.978041][ T5315] syz.1.438: attempt to access beyond end of device [ 156.978041][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 156.993869][ T5315] syz.1.438: attempt to access beyond end of device [ 156.993869][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 157.010644][ T5315] syz.1.438: attempt to access beyond end of device [ 157.010644][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 157.028507][ T5315] syz.1.438: attempt to access beyond end of device [ 157.028507][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 157.043284][ T5315] syz.1.438: attempt to access beyond end of device [ 157.043284][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 157.107799][ T3590] usb 5-1: config 1 interface 0 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.171961][ T3590] usb 5-1: config 1 interface 0 has no altsetting 0 [ 157.198838][ T3543] EXT4-fs (loop0): unmounting filesystem. [ 157.348515][ T3590] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 157.374041][ T3590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.397855][ T3557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.410991][ T3556] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.419318][ T3557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.428534][ T3557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.436451][ T3557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.443730][ T3557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.486822][ T3590] usb 5-1: Product: syz [ 157.506348][ T3590] usb 5-1: Manufacturer: syz [ 157.527642][ T3590] usb 5-1: SerialNumber: syz [ 157.674323][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 157.834726][ T3590] usbhid 5-1:1.0: can't add hid device: -22 [ 157.841983][ T3590] usbhid: probe of 5-1:1.0 failed with error -22 [ 157.890754][ T3590] usb 5-1: USB disconnect, device number 7 [ 158.119939][ T5504] chnl_net:caif_netlink_parms(): no params data found [ 158.218298][ T5517] capability: warning: `syz.3.500' uses 32-bit capabilities (legacy support in use) [ 158.407637][ T5526] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 158.516902][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.557751][ T5504] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.635081][ T5504] device bridge_slave_0 entered promiscuous mode [ 158.677929][ T5504] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.700140][ T5504] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.723324][ T5504] device bridge_slave_1 entered promiscuous mode [ 158.891117][ T5504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.948012][ T5504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.996126][ T5537] loop2: detected capacity change from 0 to 2048 [ 159.083881][ T5537] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 159.149225][ T5537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.165211][ T5504] team0: Port device team_slave_0 added [ 159.200814][ T5537] EXT4-fs error (device loop2): ext4_lookup:1855: inode #13: comm syz.2.504: casefold flag without casefold feature [ 159.237580][ T5504] team0: Port device team_slave_1 added [ 159.383605][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.422881][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.460105][ T4661] EXT4-fs (loop2): unmounting filesystem. [ 159.484651][ T3557] Bluetooth: hci5: command tx timeout [ 159.591683][ T5504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.686996][ T5504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.693981][ T5504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.724970][ T5553] fuse: Bad value for 'group_id' [ 159.842222][ T5504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.857911][ T5551] loop0: detected capacity change from 0 to 2048 [ 160.117676][ T5504] device hsr_slave_0 entered promiscuous mode [ 160.177227][ T5504] device hsr_slave_1 entered promiscuous mode [ 160.220920][ T5504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.289732][ T5504] Cannot create hsr debugfs directory [ 160.323168][ T5562] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.470874][ T27] audit: type=1804 audit(1721029439.657:14): pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.507" name="/newroot/130/file0/file2" dev="loop0" ino=16 res=1 errno=0 [ 161.082580][ T5576] netlink: 'syz.3.518': attribute type 4 has an invalid length. [ 161.323905][ T5578] loop3: detected capacity change from 0 to 2048 [ 161.390364][ T5578] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 161.421125][ T5578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.505501][ T5578] EXT4-fs error (device loop3): ext4_lookup:1855: inode #13: comm syz.3.519: casefold flag without casefold feature [ 161.564537][ T3557] Bluetooth: hci5: command tx timeout [ 161.656569][ T4817] EXT4-fs (loop3): unmounting filesystem. [ 161.894663][ T5315] bio_check_eod: 2830 callbacks suppressed [ 161.894680][ T5315] syz.1.438: attempt to access beyond end of device [ 161.894680][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 161.915011][ T5315] syz.1.438: attempt to access beyond end of device [ 161.915011][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 161.932894][ T5315] syz.1.438: attempt to access beyond end of device [ 161.932894][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 161.947536][ T5315] syz.1.438: attempt to access beyond end of device [ 161.947536][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 161.963404][ T5315] syz.1.438: attempt to access beyond end of device [ 161.963404][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 161.977940][ T5315] syz.1.438: attempt to access beyond end of device [ 161.977940][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 161.994027][ T5315] syz.1.438: attempt to access beyond end of device [ 161.994027][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 162.008573][ T5315] syz.1.438: attempt to access beyond end of device [ 162.008573][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 162.023536][ T5315] syz.1.438: attempt to access beyond end of device [ 162.023536][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 162.038019][ T5315] syz.1.438: attempt to access beyond end of device [ 162.038019][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 163.431864][ T5504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.644495][ T3557] Bluetooth: hci5: command tx timeout [ 163.959185][ T5597] loop3: detected capacity change from 0 to 4096 [ 164.942932][ T5610] loop0: detected capacity change from 0 to 16 [ 164.992130][ T5610] erofs: (device loop0): mounted with root inode @ nid 36. [ 165.043241][ T5610] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 165.062474][ T5610] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 165.083144][ T5610] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 165.796105][ T3557] Bluetooth: hci5: command tx timeout [ 165.946318][ T5504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.905972][ T5315] bio_check_eod: 2882 callbacks suppressed [ 166.905991][ T5315] syz.1.438: attempt to access beyond end of device [ 166.905991][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 166.926447][ T5315] syz.1.438: attempt to access beyond end of device [ 166.926447][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 166.941302][ T5315] syz.1.438: attempt to access beyond end of device [ 166.941302][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 166.955795][ T5315] syz.1.438: attempt to access beyond end of device [ 166.955795][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 166.970641][ T5315] syz.1.438: attempt to access beyond end of device [ 166.970641][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 166.985129][ T5315] syz.1.438: attempt to access beyond end of device [ 166.985129][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 167.000171][ T5315] syz.1.438: attempt to access beyond end of device [ 167.000171][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 167.014653][ T5315] syz.1.438: attempt to access beyond end of device [ 167.014653][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 167.029516][ T5315] syz.1.438: attempt to access beyond end of device [ 167.029516][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 167.044018][ T5315] syz.1.438: attempt to access beyond end of device [ 167.044018][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 167.241332][ T5620] netlink: 'syz.2.531': attribute type 4 has an invalid length. [ 167.399182][ T5627] loop0: detected capacity change from 0 to 8 [ 167.521545][ T5627] SQUASHFS error: Unable to read inode 0x11f [ 167.565419][ T4395] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.632720][ T5631] loop4: detected capacity change from 0 to 4096 [ 167.814523][ T4395] usb 4-1: Using ep0 maxpacket: 32 [ 167.934604][ T4395] usb 4-1: config 1 interface 0 altsetting 87 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.952400][ T4395] usb 4-1: config 1 interface 0 altsetting 87 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.963247][ T4395] usb 4-1: config 1 interface 0 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.983730][ T4395] usb 4-1: config 1 interface 0 has no altsetting 0 [ 168.144555][ T4395] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 168.153932][ T4395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.169597][ T4395] usb 4-1: Product: syz [ 168.175397][ T4395] usb 4-1: Manufacturer: syz [ 168.180001][ T4395] usb 4-1: SerialNumber: syz [ 168.263929][ T5504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.461057][ T5504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.495543][ T4395] usbhid 4-1:1.0: can't add hid device: -22 [ 168.501550][ T4395] usbhid: probe of 4-1:1.0 failed with error -22 [ 168.569935][ T4395] usb 4-1: USB disconnect, device number 3 [ 168.606050][ T5635] loop2: detected capacity change from 0 to 132 [ 168.745708][ T5637] loop0: detected capacity change from 0 to 16 [ 168.830819][ T5637] erofs: (device loop0): mounted with root inode @ nid 36. [ 168.887819][ T5637] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 169.194704][ T5637] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 169.990602][ T5637] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 170.223995][ T5648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.543'. [ 171.916173][ T5315] bio_check_eod: 2694 callbacks suppressed [ 171.916195][ T5315] syz.1.438: attempt to access beyond end of device [ 171.916195][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 171.936617][ T5315] syz.1.438: attempt to access beyond end of device [ 171.936617][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 171.952567][ T5315] syz.1.438: attempt to access beyond end of device [ 171.952567][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 171.967947][ T5315] syz.1.438: attempt to access beyond end of device [ 171.967947][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 171.983908][ T5315] syz.1.438: attempt to access beyond end of device [ 171.983908][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 171.998441][ T5315] syz.1.438: attempt to access beyond end of device [ 171.998441][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 172.014452][ T5315] syz.1.438: attempt to access beyond end of device [ 172.014452][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 172.028957][ T5315] syz.1.438: attempt to access beyond end of device [ 172.028957][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 172.045444][ T5315] syz.1.438: attempt to access beyond end of device [ 172.045444][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 172.059976][ T5315] syz.1.438: attempt to access beyond end of device [ 172.059976][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 172.441701][ T5504] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.505430][ T5504] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.574694][ T5504] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.603110][ T5659] loop4: detected capacity change from 0 to 1024 [ 172.660373][ T5504] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.704184][ T5659] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 172.850646][ T5659] hfsplus: bad catalog entry type [ 173.155344][ T5504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.184282][ T5666] loop2: detected capacity change from 0 to 256 [ 173.200113][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.285995][ T5667] loop4: detected capacity change from 0 to 132 [ 173.893711][ T5677] loop2: detected capacity change from 0 to 16 [ 174.004773][ T5677] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.082577][ T5677] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 174.164586][ T5677] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 174.168895][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.188769][ T5504] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.230317][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.241572][ T5677] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 174.261327][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.281728][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.288911][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.357958][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.376477][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.401714][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.431660][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.438796][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.924873][ T5315] bio_check_eod: 2916 callbacks suppressed [ 176.924896][ T5315] syz.1.438: attempt to access beyond end of device [ 176.924896][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 176.945395][ T5315] syz.1.438: attempt to access beyond end of device [ 176.945395][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 176.961358][ T5315] syz.1.438: attempt to access beyond end of device [ 176.961358][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 176.975875][ T5315] syz.1.438: attempt to access beyond end of device [ 176.975875][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 176.991818][ T5315] syz.1.438: attempt to access beyond end of device [ 176.991818][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 177.006308][ T5315] syz.1.438: attempt to access beyond end of device [ 177.006308][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 177.022240][ T5315] syz.1.438: attempt to access beyond end of device [ 177.022240][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 177.036727][ T5315] syz.1.438: attempt to access beyond end of device [ 177.036727][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 177.052654][ T5315] syz.1.438: attempt to access beyond end of device [ 177.052654][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 177.067149][ T5315] syz.1.438: attempt to access beyond end of device [ 177.067149][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 178.224768][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.233555][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.326111][ T5504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.399889][ T5504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.072490][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 179.148525][ T5694] loop3: detected capacity change from 0 to 256 [ 179.166120][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.221502][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.287688][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.381711][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.465998][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.532370][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.822835][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.005361][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.048270][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.083959][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.244913][ T5504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.299948][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.328907][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.379159][ T5717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.566'. [ 181.566314][ T5720] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 181.615813][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.645289][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.663697][ T5504] device veth0_vlan entered promiscuous mode [ 181.720090][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.789909][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.866568][ T5504] device veth1_vlan entered promiscuous mode [ 181.915186][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.923248][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.935402][ T5315] bio_check_eod: 3298 callbacks suppressed [ 181.935417][ T5315] syz.1.438: attempt to access beyond end of device [ 181.935417][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 181.955888][ T5315] syz.1.438: attempt to access beyond end of device [ 181.955888][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 181.972640][ T5315] syz.1.438: attempt to access beyond end of device [ 181.972640][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 181.987212][ T5315] syz.1.438: attempt to access beyond end of device [ 181.987212][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 181.992236][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.003826][ T5315] syz.1.438: attempt to access beyond end of device [ 182.003826][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 182.023134][ T5315] syz.1.438: attempt to access beyond end of device [ 182.023134][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 182.038996][ T5315] syz.1.438: attempt to access beyond end of device [ 182.038996][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 182.054035][ T5315] syz.1.438: attempt to access beyond end of device [ 182.054035][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 182.069992][ T5315] syz.1.438: attempt to access beyond end of device [ 182.069992][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 182.084503][ T5315] syz.1.438: attempt to access beyond end of device [ 182.084503][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 182.201019][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.233154][ T3559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.241553][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.251444][ T3559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.259037][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 182.266354][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.290387][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.183642][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.236585][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.410219][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 184.634307][ T5741] loop4: detected capacity change from 0 to 1024 [ 184.651753][ T3809] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.696019][ T5741] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 184.796828][ T5741] hfsplus: bad catalog entry type [ 184.923804][ T3809] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.184033][ T5749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.581'. [ 185.245094][ T3557] Bluetooth: hci3: command tx timeout [ 185.287668][ T5504] device veth0_macvtap entered promiscuous mode [ 185.350007][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 185.426983][ T3809] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.493972][ T5750] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 185.550134][ T5504] device veth1_macvtap entered promiscuous mode [ 185.638633][ T3809] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.801593][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.850529][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.901383][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.944184][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.008615][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.045097][ T3626] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 186.068235][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.083352][ T5762] loop4: detected capacity change from 0 to 1024 [ 186.111230][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.151961][ T5762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.167752][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.177681][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.188225][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.200704][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.231809][ T5762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 186.286671][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.334627][ T3626] usb 1-1: Using ep0 maxpacket: 8 [ 186.361353][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.415456][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.443067][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.474865][ T3626] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 186.489494][ T3626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.510190][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.541544][ T3626] usb 1-1: config 0 descriptor?? [ 186.559693][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.590055][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.627665][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.654609][ T5504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.691127][ T5504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.742535][ T4492] EXT4-fs (loop4): unmounting filesystem. [ 186.757186][ T5504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.793272][ T5504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.890533][ T5504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.930130][ T5504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.944820][ T5315] bio_check_eod: 3855 callbacks suppressed [ 186.944837][ T5315] syz.1.438: attempt to access beyond end of device [ 186.944837][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 186.960503][ T5504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.966405][ T5315] syz.1.438: attempt to access beyond end of device [ 186.966405][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 186.987272][ T5315] syz.1.438: attempt to access beyond end of device [ 186.987272][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 187.003104][ T5315] syz.1.438: attempt to access beyond end of device [ 187.003104][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 187.017712][ T5315] syz.1.438: attempt to access beyond end of device [ 187.017712][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 187.033597][ T5315] syz.1.438: attempt to access beyond end of device [ 187.033597][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 187.049205][ T5315] syz.1.438: attempt to access beyond end of device [ 187.049205][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 187.065099][ T5315] syz.1.438: attempt to access beyond end of device [ 187.065099][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 187.079588][ T5315] syz.1.438: attempt to access beyond end of device [ 187.079588][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 187.095508][ T5315] syz.1.438: attempt to access beyond end of device [ 187.095508][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 187.187888][ T5195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.196753][ T5195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.328704][ T3557] Bluetooth: hci3: command tx timeout [ 188.175047][ T5195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.183595][ T5195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.223657][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 188.245323][ T5706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.262276][ T5706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.318430][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.564585][ T3626] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 188.578182][ T3626] asix: probe of 1-1:0.0 failed with error -71 [ 188.637986][ T3626] usb 1-1: USB disconnect, device number 11 [ 189.002078][ T5789] netlink: 'syz.3.596': attribute type 7 has an invalid length. [ 189.363231][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.599'. [ 189.390531][ T3811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.404758][ T3557] Bluetooth: hci3: command tx timeout [ 189.429668][ T3811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.538539][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.774701][ T5809] netlink: 'syz.1.492': attribute type 4 has an invalid length. [ 190.782378][ T5809] netlink: 17 bytes leftover after parsing attributes in process `syz.1.492'. [ 190.963934][ T5813] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 190.970512][ T5813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.082450][ T5813] vhci_hcd vhci_hcd.0: Device attached [ 191.190343][ T5827] netlink: 'syz.0.606': attribute type 7 has an invalid length. [ 191.285436][ T5730] chnl_net:caif_netlink_parms(): no params data found [ 191.344572][ T4341] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 191.485195][ T3557] Bluetooth: hci3: command tx timeout [ 191.742790][ T5817] vhci_hcd: connection reset by peer [ 191.748587][ T102] vhci_hcd: stop threads [ 191.752992][ T102] vhci_hcd: release socket [ 191.784494][ T102] vhci_hcd: disconnect device [ 191.817114][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.880305][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.924566][ T5730] device bridge_slave_0 entered promiscuous mode [ 191.954715][ T5315] bio_check_eod: 2862 callbacks suppressed [ 191.954733][ T5315] syz.1.438: attempt to access beyond end of device [ 191.954733][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 191.976441][ T5315] syz.1.438: attempt to access beyond end of device [ 191.976441][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 191.991148][ T5315] syz.1.438: attempt to access beyond end of device [ 191.991148][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 192.004040][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.006901][ T5315] syz.1.438: attempt to access beyond end of device [ 192.006901][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 192.026139][ T5315] syz.1.438: attempt to access beyond end of device [ 192.026139][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 192.042120][ T5315] syz.1.438: attempt to access beyond end of device [ 192.042120][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 192.056791][ T5315] syz.1.438: attempt to access beyond end of device [ 192.056791][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 192.062873][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.072514][ T5315] syz.1.438: attempt to access beyond end of device [ 192.072514][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 192.091772][ T5315] syz.1.438: attempt to access beyond end of device [ 192.091772][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 192.107701][ T5315] syz.1.438: attempt to access beyond end of device [ 192.107701][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 192.161794][ T5730] device bridge_slave_1 entered promiscuous mode [ 193.419043][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.464080][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.674367][ T5867] netlink: 'syz.0.616': attribute type 7 has an invalid length. [ 193.737310][ T5730] team0: Port device team_slave_0 added [ 193.785439][ T5730] team0: Port device team_slave_1 added [ 193.927387][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.949250][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.040747][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.121854][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.158994][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165595][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.205721][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.326213][ T5875] loop0: detected capacity change from 0 to 7 [ 194.332557][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.353801][ T5875] Dev loop0: unable to read RDB block 7 [ 194.382499][ T5875] loop0: unable to read partition table [ 194.402615][ T5875] loop0: partition table beyond EOD, truncated [ 194.421606][ T5875] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 194.421606][ T5875] ) failed (rc=-5) [ 195.579964][ T3626] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 195.946756][ T3626] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 195.967615][ T3626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.008753][ T3626] usb 2-1: config 0 descriptor?? [ 196.604662][ T3626] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 196.634672][ T5889] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 196.641221][ T5889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 196.974328][ T5315] bio_check_eod: 2493 callbacks suppressed [ 196.974371][ T5315] syz.1.438: attempt to access beyond end of device [ 196.974371][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 196.997021][ T5315] syz.1.438: attempt to access beyond end of device [ 196.997021][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.021729][ T5315] syz.1.438: attempt to access beyond end of device [ 197.021729][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 197.038627][ T5315] syz.1.438: attempt to access beyond end of device [ 197.038627][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.063795][ T5315] syz.1.438: attempt to access beyond end of device [ 197.063795][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 197.080678][ T5315] syz.1.438: attempt to access beyond end of device [ 197.080678][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.106101][ T5315] syz.1.438: attempt to access beyond end of device [ 197.106101][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 197.123037][ T5315] syz.1.438: attempt to access beyond end of device [ 197.123037][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.148375][ T5315] syz.1.438: attempt to access beyond end of device [ 197.148375][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 197.165375][ T5315] syz.1.438: attempt to access beyond end of device [ 197.165375][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 197.323937][ T4341] vhci_hcd: vhci_device speed not set [ 197.457746][ T5889] vhci_hcd vhci_hcd.0: Device attached [ 197.624616][ T3626] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 197.724544][ T3591] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 198.131077][ T5892] vhci_hcd: connection reset by peer [ 198.137008][ T3811] vhci_hcd: stop threads [ 198.141366][ T3811] vhci_hcd: release socket [ 198.164822][ T3811] vhci_hcd: disconnect device [ 199.263286][ T3626] usb 2-1: USB disconnect, device number 9 [ 199.864757][ T4395] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.244204][ T4395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.260175][ T5730] device hsr_slave_0 entered promiscuous mode [ 200.310005][ T4395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.364565][ T4395] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 200.414489][ T4395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.473025][ T4395] usb 5-1: config 0 descriptor?? [ 200.987433][ T4395] hid (null): unknown global tag 0xc [ 200.994079][ T4395] hid (null): unknown global tag 0xe [ 201.022530][ T4395] lg-g15 0003:046D:C222.0003: unknown global tag 0xc [ 201.048031][ T4395] lg-g15 0003:046D:C222.0003: item 0 2 1 12 parsing failed [ 201.071569][ T4395] lg-g15: probe of 0003:046D:C222.0003 failed with error -22 [ 201.168885][ T5730] device hsr_slave_1 entered promiscuous mode [ 201.974567][ T5315] bio_check_eod: 2865 callbacks suppressed [ 201.974589][ T5315] syz.1.438: attempt to access beyond end of device [ 201.974589][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 201.996225][ T5315] syz.1.438: attempt to access beyond end of device [ 201.996225][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.010781][ T5315] syz.1.438: attempt to access beyond end of device [ 202.010781][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 202.026868][ T5315] syz.1.438: attempt to access beyond end of device [ 202.026868][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.041394][ T5315] syz.1.438: attempt to access beyond end of device [ 202.041394][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 202.057426][ T5315] syz.1.438: attempt to access beyond end of device [ 202.057426][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.071984][ T5315] syz.1.438: attempt to access beyond end of device [ 202.071984][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 202.087968][ T5315] syz.1.438: attempt to access beyond end of device [ 202.087968][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.103325][ T5315] syz.1.438: attempt to access beyond end of device [ 202.103325][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 202.120220][ T5315] syz.1.438: attempt to access beyond end of device [ 202.120220][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 202.166595][ T5730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.187256][ T5730] Cannot create hsr debugfs directory [ 202.848382][ T3591] vhci_hcd: vhci_device speed not set [ 205.101543][ T5948] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 205.108098][ T5948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.157051][ T5948] vhci_hcd vhci_hcd.0: Device attached [ 205.173426][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 205.424550][ T4341] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 205.909395][ T5959] loop3: detected capacity change from 0 to 2048 [ 206.021285][ T3559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.031626][ T3556] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.040267][ T3559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.051357][ T3556] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.059381][ T3559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 206.067870][ T3556] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 206.126869][ T5959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.379615][ T5949] vhci_hcd: connection reset by peer [ 206.386497][ T34] vhci_hcd: stop threads [ 206.391570][ T34] vhci_hcd: release socket [ 206.410976][ T34] vhci_hcd: disconnect device [ 206.986459][ T5315] bio_check_eod: 2907 callbacks suppressed [ 206.986480][ T5315] syz.1.438: attempt to access beyond end of device [ 206.986480][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.006758][ T5315] syz.1.438: attempt to access beyond end of device [ 207.006758][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 207.021685][ T5315] syz.1.438: attempt to access beyond end of device [ 207.021685][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.036168][ T5315] syz.1.438: attempt to access beyond end of device [ 207.036168][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 207.050959][ T5315] syz.1.438: attempt to access beyond end of device [ 207.050959][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.065420][ T5315] syz.1.438: attempt to access beyond end of device [ 207.065420][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 207.080329][ T5315] syz.1.438: attempt to access beyond end of device [ 207.080329][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.094813][ T5315] syz.1.438: attempt to access beyond end of device [ 207.094813][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 207.110634][ T5315] syz.1.438: attempt to access beyond end of device [ 207.110634][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 207.125100][ T5315] syz.1.438: attempt to access beyond end of device [ 207.125100][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 207.180519][ T3626] usb 5-1: USB disconnect, device number 8 [ 207.351433][ T5956] netlink: 'syz.3.640': attribute type 4 has an invalid length. [ 207.371185][ T5956] netlink: 17 bytes leftover after parsing attributes in process `syz.3.640'. [ 207.620751][ T4817] EXT4-fs (loop3): unmounting filesystem. [ 208.124697][ T3557] Bluetooth: hci6: command tx timeout [ 209.645493][ T5977] loop4: detected capacity change from 0 to 256 [ 210.205060][ T3557] Bluetooth: hci6: command tx timeout [ 210.604608][ T4341] vhci_hcd: vhci_device speed not set [ 211.254317][ T5977] FAT-fs (loop4): Directory bread(block 64) failed [ 211.289357][ T5977] FAT-fs (loop4): Directory bread(block 65) failed [ 211.994608][ T5315] bio_check_eod: 4775 callbacks suppressed [ 211.994623][ T5315] syz.1.438: attempt to access beyond end of device [ 211.994623][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.015283][ T5315] syz.1.438: attempt to access beyond end of device [ 212.015283][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.029495][ T5315] syz.1.438: attempt to access beyond end of device [ 212.029495][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.044289][ T5315] syz.1.438: attempt to access beyond end of device [ 212.044289][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.058474][ T5315] syz.1.438: attempt to access beyond end of device [ 212.058474][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.073224][ T5315] syz.1.438: attempt to access beyond end of device [ 212.073224][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.087387][ T5315] syz.1.438: attempt to access beyond end of device [ 212.087387][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.102121][ T5315] syz.1.438: attempt to access beyond end of device [ 212.102121][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.116283][ T5315] syz.1.438: attempt to access beyond end of device [ 212.116283][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 212.131025][ T5315] syz.1.438: attempt to access beyond end of device [ 212.131025][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 212.202619][ T5977] FAT-fs (loop4): Directory bread(block 66) failed [ 212.284854][ T3557] Bluetooth: hci6: command tx timeout [ 213.170129][ T5977] FAT-fs (loop4): Directory bread(block 67) failed [ 213.176969][ T5977] FAT-fs (loop4): Directory bread(block 68) failed [ 213.183511][ T5977] FAT-fs (loop4): Directory bread(block 69) failed [ 213.190825][ T5977] FAT-fs (loop4): Directory bread(block 70) failed [ 213.197547][ T5977] FAT-fs (loop4): Directory bread(block 71) failed [ 213.204146][ T5977] FAT-fs (loop4): Directory bread(block 72) failed [ 213.234940][ T5977] FAT-fs (loop4): Directory bread(block 73) failed [ 214.149128][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 214.367022][ T3557] Bluetooth: hci6: command tx timeout [ 214.439933][ T34] tipc: Subscription rejected, illegal request [ 214.728098][ T6011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 214.734655][ T6011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.797063][ T6011] vhci_hcd vhci_hcd.0: Device attached [ 214.942115][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.990490][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.042747][ T5960] device bridge_slave_0 entered promiscuous mode [ 215.064716][ T3625] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 215.113080][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.154676][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.162841][ T5960] device bridge_slave_1 entered promiscuous mode [ 215.504315][ T6025] netlink: 'syz.3.655': attribute type 4 has an invalid length. [ 215.702009][ T3809] device hsr_slave_0 left promiscuous mode [ 215.724373][ T6028] loop4: detected capacity change from 0 to 1024 [ 215.738441][ T3809] device hsr_slave_1 left promiscuous mode [ 215.760451][ T6013] vhci_hcd: connection reset by peer [ 215.775148][ T6028] EXT4-fs: Ignoring removed orlov option [ 215.789055][ T102] vhci_hcd: stop threads [ 215.793686][ T102] vhci_hcd: release socket [ 215.834686][ T102] vhci_hcd: disconnect device [ 215.839586][ T6028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.887868][ T3809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.953396][ T3809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.985079][ T6028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 216.045741][ T3809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.053219][ T3809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.123692][ T3809] device bridge_slave_1 left promiscuous mode [ 216.156585][ T3809] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.178597][ T3809] device bridge_slave_0 left promiscuous mode [ 216.194602][ T3809] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.006220][ T5315] bio_check_eod: 3505 callbacks suppressed [ 217.006241][ T5315] syz.1.438: attempt to access beyond end of device [ 217.006241][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.028562][ T5315] syz.1.438: attempt to access beyond end of device [ 217.028562][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.046247][ T5315] syz.1.438: attempt to access beyond end of device [ 217.046247][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.061323][ T5315] syz.1.438: attempt to access beyond end of device [ 217.061323][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.078236][ T5315] syz.1.438: attempt to access beyond end of device [ 217.078236][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.092604][ T5315] syz.1.438: attempt to access beyond end of device [ 217.092604][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.107598][ T5315] syz.1.438: attempt to access beyond end of device [ 217.107598][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.122108][ T5315] syz.1.438: attempt to access beyond end of device [ 217.122108][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.138151][ T5315] syz.1.438: attempt to access beyond end of device [ 217.138151][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 217.152420][ T5315] syz.1.438: attempt to access beyond end of device [ 217.152420][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 217.189821][ T3809] device veth1_macvtap left promiscuous mode [ 217.193304][ T4492] EXT4-fs (loop4): unmounting filesystem. [ 217.195949][ T3809] device veth0_macvtap left promiscuous mode [ 217.196074][ T3809] device veth1_vlan left promiscuous mode [ 217.196163][ T3809] device veth0_vlan left promiscuous mode [ 218.249582][ T6060] netlink: 'syz.4.659': attribute type 4 has an invalid length. [ 218.298206][ T6060] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.659'. [ 218.953315][ T3809] team0 (unregistering): Port device team_slave_1 removed [ 219.043226][ T3809] team0 (unregistering): Port device team_slave_0 removed [ 219.124218][ T3809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.189357][ T3809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.020958][ T3809] bond0 (unregistering): Released all slaves [ 220.208278][ T3625] vhci_hcd: vhci_device speed not set [ 220.251364][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.378164][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.725410][ T5960] team0: Port device team_slave_0 added [ 220.829888][ T5960] team0: Port device team_slave_1 added [ 221.052800][ T6092] loop4: detected capacity change from 0 to 1024 [ 221.067477][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.094883][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.178260][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.181121][ T6092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.191856][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.256983][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.454618][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.555495][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.764191][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.863011][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.933721][ T3811] tipc: Subscription rejected, illegal request [ 222.015748][ T5315] bio_check_eod: 2978 callbacks suppressed [ 222.015767][ T5315] syz.1.438: attempt to access beyond end of device [ 222.015767][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.036091][ T5315] syz.1.438: attempt to access beyond end of device [ 222.036091][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.045760][ T5960] device hsr_slave_0 entered promiscuous mode [ 222.051825][ T5315] syz.1.438: attempt to access beyond end of device [ 222.051825][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.070093][ T5315] syz.1.438: attempt to access beyond end of device [ 222.070093][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.086014][ T5315] syz.1.438: attempt to access beyond end of device [ 222.086014][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.100575][ T5315] syz.1.438: attempt to access beyond end of device [ 222.100575][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.116587][ T5315] syz.1.438: attempt to access beyond end of device [ 222.116587][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.131180][ T5315] syz.1.438: attempt to access beyond end of device [ 222.131180][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.147191][ T5315] syz.1.438: attempt to access beyond end of device [ 222.147191][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 222.157180][ T5960] device hsr_slave_1 entered promiscuous mode [ 222.205942][ T5315] syz.1.438: attempt to access beyond end of device [ 222.205942][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 222.311221][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.330704][ T5960] Cannot create hsr debugfs directory [ 222.371370][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.975758][ T6113] loop4: detected capacity change from 0 to 1024 [ 223.115454][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.137123][ T6113] hfsplus: bad catalog entry type [ 223.352109][ T5706] hfsplus: b-tree write err: -5, ino 4 [ 223.461278][ T5960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.604055][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.621837][ T6099] loop3: detected capacity change from 0 to 32768 [ 223.630954][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.689446][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.850414][ T5960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.962136][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.993026][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.044916][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.052054][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.125624][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.172921][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.212409][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.219599][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.274955][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.536962][ T5960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.685562][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.693586][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.775595][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.855187][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.863943][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.005784][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.064997][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.128679][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.188930][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.385600][ T5730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.454237][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.465254][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.533804][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.699654][ T5960] team0: Port device netdevsim0 removed [ 225.757630][ T5960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.798578][ T6140] loop4: detected capacity change from 0 to 4096 [ 225.912922][ T6140] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 0. [ 226.011000][ T6140] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 226.108560][ T6140] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 226.165484][ T6140] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 226.197915][ T6140] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 226.308128][ T6140] ntfs: volume version 3.1. [ 226.497814][ T5960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.653118][ T5960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.714456][ T5960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.807966][ T5960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.024783][ T5315] bio_check_eod: 2907 callbacks suppressed [ 227.024800][ T5315] syz.1.438: attempt to access beyond end of device [ 227.024800][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.047562][ T5315] syz.1.438: attempt to access beyond end of device [ 227.047562][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.062159][ T5315] syz.1.438: attempt to access beyond end of device [ 227.062159][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.077939][ T5315] syz.1.438: attempt to access beyond end of device [ 227.077939][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.092468][ T5315] syz.1.438: attempt to access beyond end of device [ 227.092468][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.108616][ T5315] syz.1.438: attempt to access beyond end of device [ 227.108616][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.123150][ T5315] syz.1.438: attempt to access beyond end of device [ 227.123150][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.139057][ T5315] syz.1.438: attempt to access beyond end of device [ 227.139057][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.153597][ T5315] syz.1.438: attempt to access beyond end of device [ 227.153597][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 227.169631][ T5315] syz.1.438: attempt to access beyond end of device [ 227.169631][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 227.223774][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.316760][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.324305][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.483875][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 227.523583][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.641303][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.664217][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.772524][ T5730] device veth0_vlan entered promiscuous mode [ 227.805254][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.864127][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.896876][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.953554][ T5730] device veth1_vlan entered promiscuous mode [ 228.023169][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.089830][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 228.111199][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.166233][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.319360][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 228.350059][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.425205][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.433672][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.440805][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.482066][ T6183] syz.3.696 (6183): attempted to duplicate a private mapping with mremap. This is not supported. [ 228.594887][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.645313][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.681842][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.689012][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.768639][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.830821][ T5730] device veth0_macvtap entered promiscuous mode [ 229.180403][ T5730] device veth1_macvtap entered promiscuous mode [ 230.046099][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.435224][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.205805][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.034957][ T5315] bio_check_eod: 4413 callbacks suppressed [ 232.034972][ T5315] syz.1.438: attempt to access beyond end of device [ 232.034972][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.044522][ T3559] Bluetooth: hci2: command 0x0406 tx timeout [ 232.055183][ T5315] syz.1.438: attempt to access beyond end of device [ 232.055183][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 232.075448][ T5315] syz.1.438: attempt to access beyond end of device [ 232.075448][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.089622][ T5315] syz.1.438: attempt to access beyond end of device [ 232.089622][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 232.104635][ T5315] syz.1.438: attempt to access beyond end of device [ 232.104635][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.118833][ T5315] syz.1.438: attempt to access beyond end of device [ 232.118833][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 232.133838][ T5315] syz.1.438: attempt to access beyond end of device [ 232.133838][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.148031][ T5315] syz.1.438: attempt to access beyond end of device [ 232.148031][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 232.166162][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.191079][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.206694][ T5315] syz.1.438: attempt to access beyond end of device [ 232.206694][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 232.221155][ T5315] syz.1.438: attempt to access beyond end of device [ 232.221155][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 233.246720][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.308502][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.174498][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.190347][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.224462][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.274507][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.327084][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.374559][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.424605][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.482264][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.533703][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.574958][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.663772][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.714502][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.775382][ T3637] tipc: Subscription rejected, illegal request [ 235.784918][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.835390][ T3557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.846047][ T3557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.863169][ T3556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.872434][ T3556] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.880930][ T3557] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.888394][ T3557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.921937][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.949677][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.989301][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.020250][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.051764][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.100965][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.165756][ T5730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.252025][ T5730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.273292][ T5730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.327471][ T5730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.046284][ T5315] bio_check_eod: 4300 callbacks suppressed [ 237.046303][ T5315] syz.1.438: attempt to access beyond end of device [ 237.046303][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.066772][ T5315] syz.1.438: attempt to access beyond end of device [ 237.066772][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.082775][ T5315] syz.1.438: attempt to access beyond end of device [ 237.082775][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.097313][ T5315] syz.1.438: attempt to access beyond end of device [ 237.097313][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.113461][ T5315] syz.1.438: attempt to access beyond end of device [ 237.113461][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.128279][ T5315] syz.1.438: attempt to access beyond end of device [ 237.128279][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.144259][ T5315] syz.1.438: attempt to access beyond end of device [ 237.144259][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.173624][ T5960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.185367][ T5960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.199263][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 237.207986][ T5315] syz.1.438: attempt to access beyond end of device [ 237.207986][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.225042][ T5315] syz.1.438: attempt to access beyond end of device [ 237.225042][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 237.239603][ T5315] syz.1.438: attempt to access beyond end of device [ 237.239603][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 237.258113][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 237.295972][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 237.348547][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 237.377853][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 237.418568][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 237.455869][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 237.499931][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.544048][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 237.591856][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.628677][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 237.665418][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.702487][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 237.738831][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.964575][ T3559] Bluetooth: hci0: command tx timeout [ 239.198924][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.044547][ T3559] Bluetooth: hci0: command tx timeout [ 240.191489][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.055377][ T5315] bio_check_eod: 4950 callbacks suppressed [ 242.055391][ T5315] syz.1.438: attempt to access beyond end of device [ 242.055391][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.075408][ T5315] syz.1.438: attempt to access beyond end of device [ 242.075408][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.090159][ T5315] syz.1.438: attempt to access beyond end of device [ 242.090159][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.104324][ T5315] syz.1.438: attempt to access beyond end of device [ 242.104324][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.119087][ T5315] syz.1.438: attempt to access beyond end of device [ 242.119087][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.125190][ T3559] Bluetooth: hci0: command tx timeout [ 242.133503][ T5315] syz.1.438: attempt to access beyond end of device [ 242.133503][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.153137][ T5315] syz.1.438: attempt to access beyond end of device [ 242.153137][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.205973][ T5315] syz.1.438: attempt to access beyond end of device [ 242.205973][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 242.221760][ T5315] syz.1.438: attempt to access beyond end of device [ 242.221760][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 242.235976][ T5315] syz.1.438: attempt to access beyond end of device [ 242.235976][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 244.204836][ T3559] Bluetooth: hci0: command tx timeout [ 247.065058][ T5315] bio_check_eod: 5286 callbacks suppressed [ 247.065073][ T5315] syz.1.438: attempt to access beyond end of device [ 247.065073][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 247.085314][ T5315] syz.1.438: attempt to access beyond end of device [ 247.085314][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 247.100121][ T5315] syz.1.438: attempt to access beyond end of device [ 247.100121][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 247.114535][ T5315] syz.1.438: attempt to access beyond end of device [ 247.114535][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 247.129555][ T5315] syz.1.438: attempt to access beyond end of device [ 247.129555][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 247.144355][ T5315] syz.1.438: attempt to access beyond end of device [ 247.144355][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 247.206666][ T5315] syz.1.438: attempt to access beyond end of device [ 247.206666][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 247.221065][ T5315] syz.1.438: attempt to access beyond end of device [ 247.221065][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 247.236980][ T5315] syz.1.438: attempt to access beyond end of device [ 247.236980][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 247.251614][ T5315] syz.1.438: attempt to access beyond end of device [ 247.251614][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 247.404589][ T3560] Bluetooth: hci4: command 0x0406 tx timeout [ 247.410699][ T3560] Bluetooth: hci1: command 0x0406 tx timeout [ 252.074581][ T5315] bio_check_eod: 5279 callbacks suppressed [ 252.074595][ T5315] syz.1.438: attempt to access beyond end of device [ 252.074595][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 252.095546][ T5315] syz.1.438: attempt to access beyond end of device [ 252.095546][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 252.109750][ T5315] syz.1.438: attempt to access beyond end of device [ 252.109750][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 252.124816][ T5315] syz.1.438: attempt to access beyond end of device [ 252.124816][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 252.139068][ T5315] syz.1.438: attempt to access beyond end of device [ 252.139068][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 252.154636][ T5315] syz.1.438: attempt to access beyond end of device [ 252.154636][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 252.205925][ T5315] syz.1.438: attempt to access beyond end of device [ 252.205925][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 252.220798][ T5315] syz.1.438: attempt to access beyond end of device [ 252.220798][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 252.235019][ T5315] syz.1.438: attempt to access beyond end of device [ 252.235019][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 252.250262][ T5315] syz.1.438: attempt to access beyond end of device [ 252.250262][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 256.156763][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.163098][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.084564][ T5315] bio_check_eod: 5324 callbacks suppressed [ 257.084584][ T5315] syz.1.438: attempt to access beyond end of device [ 257.084584][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 257.105540][ T5315] syz.1.438: attempt to access beyond end of device [ 257.105540][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 257.119824][ T5315] syz.1.438: attempt to access beyond end of device [ 257.119824][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 257.134910][ T5315] syz.1.438: attempt to access beyond end of device [ 257.134910][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 257.149103][ T5315] syz.1.438: attempt to access beyond end of device [ 257.149103][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 257.206683][ T5315] syz.1.438: attempt to access beyond end of device [ 257.206683][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 257.220981][ T5315] syz.1.438: attempt to access beyond end of device [ 257.220981][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 257.236875][ T5315] syz.1.438: attempt to access beyond end of device [ 257.236875][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 257.251161][ T5315] syz.1.438: attempt to access beyond end of device [ 257.251161][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 257.266555][ T5315] syz.1.438: attempt to access beyond end of device [ 257.266555][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 262.095465][ T5315] bio_check_eod: 5319 callbacks suppressed [ 262.095480][ T5315] syz.1.438: attempt to access beyond end of device [ 262.095480][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 262.115936][ T5315] syz.1.438: attempt to access beyond end of device [ 262.115936][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 262.131104][ T5315] syz.1.438: attempt to access beyond end of device [ 262.131104][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 262.145573][ T5315] syz.1.438: attempt to access beyond end of device [ 262.145573][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 262.160481][ T5315] syz.1.438: attempt to access beyond end of device [ 262.160481][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 262.205907][ T5315] syz.1.438: attempt to access beyond end of device [ 262.205907][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 262.221954][ T5315] syz.1.438: attempt to access beyond end of device [ 262.221954][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 262.236171][ T5315] syz.1.438: attempt to access beyond end of device [ 262.236171][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 262.251195][ T5315] syz.1.438: attempt to access beyond end of device [ 262.251195][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 262.265385][ T5315] syz.1.438: attempt to access beyond end of device [ 262.265385][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 267.105454][ T5315] bio_check_eod: 5308 callbacks suppressed [ 267.105469][ T5315] syz.1.438: attempt to access beyond end of device [ 267.105469][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 267.125749][ T5315] syz.1.438: attempt to access beyond end of device [ 267.125749][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 267.140571][ T5315] syz.1.438: attempt to access beyond end of device [ 267.140571][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 267.155002][ T5315] syz.1.438: attempt to access beyond end of device [ 267.155002][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 267.206841][ T5315] syz.1.438: attempt to access beyond end of device [ 267.206841][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 267.221076][ T5315] syz.1.438: attempt to access beyond end of device [ 267.221076][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 267.235883][ T5315] syz.1.438: attempt to access beyond end of device [ 267.235883][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 267.250070][ T5315] syz.1.438: attempt to access beyond end of device [ 267.250070][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 267.264880][ T5315] syz.1.438: attempt to access beyond end of device [ 267.264880][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 267.279078][ T5315] syz.1.438: attempt to access beyond end of device [ 267.279078][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 272.115529][ T5315] bio_check_eod: 5300 callbacks suppressed [ 272.115544][ T5315] syz.1.438: attempt to access beyond end of device [ 272.115544][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 272.136894][ T5315] syz.1.438: attempt to access beyond end of device [ 272.136894][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 272.152528][ T5315] syz.1.438: attempt to access beyond end of device [ 272.152528][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 272.189219][ T3557] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.198950][ T3557] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.206583][ T5315] syz.1.438: attempt to access beyond end of device [ 272.206583][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 272.222184][ T5315] syz.1.438: attempt to access beyond end of device [ 272.222184][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 272.236420][ T5315] syz.1.438: attempt to access beyond end of device [ 272.236420][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 272.251171][ T5315] syz.1.438: attempt to access beyond end of device [ 272.251171][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 272.265378][ T5315] syz.1.438: attempt to access beyond end of device [ 272.265378][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 272.280173][ T5315] syz.1.438: attempt to access beyond end of device [ 272.280173][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 272.294665][ T5315] syz.1.438: attempt to access beyond end of device [ 272.294665][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 273.170891][ T3557] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.179129][ T3557] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.204626][ T3557] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.180433][ T3557] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.284884][ T3557] Bluetooth: hci7: command tx timeout [ 277.124527][ T5315] bio_check_eod: 5317 callbacks suppressed [ 277.124542][ T5315] syz.1.438: attempt to access beyond end of device [ 277.124542][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 277.146274][ T5315] syz.1.438: attempt to access beyond end of device [ 277.146274][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 277.192851][ T6202] chnl_net:caif_netlink_parms(): no params data found [ 277.205770][ T5315] syz.1.438: attempt to access beyond end of device [ 277.205770][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 277.224187][ T5315] syz.1.438: attempt to access beyond end of device [ 277.224187][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 277.247139][ T5315] syz.1.438: attempt to access beyond end of device [ 277.247139][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 277.265237][ T5315] syz.1.438: attempt to access beyond end of device [ 277.265237][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 277.279448][ T5315] syz.1.438: attempt to access beyond end of device [ 277.279448][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 277.294207][ T5315] syz.1.438: attempt to access beyond end of device [ 277.294207][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 277.308382][ T5315] syz.1.438: attempt to access beyond end of device [ 277.308382][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 277.323159][ T5315] syz.1.438: attempt to access beyond end of device [ 277.323159][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 278.364755][ T3557] Bluetooth: hci7: command tx timeout [ 280.444814][ T3557] Bluetooth: hci7: command tx timeout [ 282.135107][ T5315] bio_check_eod: 5279 callbacks suppressed [ 282.135122][ T5315] syz.1.438: attempt to access beyond end of device [ 282.135122][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 282.155392][ T5315] syz.1.438: attempt to access beyond end of device [ 282.155392][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 282.196407][ T3556] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 282.196444][ T3546] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 282.212714][ T5315] syz.1.438: attempt to access beyond end of device [ 282.212714][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 282.227053][ T5315] syz.1.438: attempt to access beyond end of device [ 282.227053][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 282.241812][ T5315] syz.1.438: attempt to access beyond end of device [ 282.241812][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 282.255010][ T3546] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 282.257052][ T5315] syz.1.438: attempt to access beyond end of device [ 282.257052][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 282.263888][ T3546] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 282.278234][ T5315] syz.1.438: attempt to access beyond end of device [ 282.278234][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 282.283937][ T3546] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 282.297331][ T5315] syz.1.438: attempt to access beyond end of device [ 282.297331][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 282.304858][ T3546] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 282.319361][ T5315] syz.1.438: attempt to access beyond end of device [ 282.319361][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 282.324287][ T3546] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 282.338461][ T5315] syz.1.438: attempt to access beyond end of device [ 282.338461][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 282.525025][ T3546] Bluetooth: hci7: command tx timeout [ 283.165719][ T3546] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 283.176852][ T3546] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 283.187553][ T3546] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 283.199551][ T3559] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 283.244650][ T3560] Bluetooth: hci5: command 0x0406 tx timeout [ 284.176609][ T3546] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 286.204678][ T3546] Bluetooth: hci8: command tx timeout [ 287.145188][ T5315] bio_check_eod: 5276 callbacks suppressed [ 287.145202][ T5315] syz.1.438: attempt to access beyond end of device [ 287.145202][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 287.205717][ T5315] syz.1.438: attempt to access beyond end of device [ 287.205717][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 287.220761][ T5315] syz.1.438: attempt to access beyond end of device [ 287.220761][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 287.234987][ T5315] syz.1.438: attempt to access beyond end of device [ 287.234987][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 287.244751][ T3546] Bluetooth: hci9: command tx timeout [ 287.250647][ T5315] syz.1.438: attempt to access beyond end of device [ 287.250647][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 287.268228][ T5315] syz.1.438: attempt to access beyond end of device [ 287.268228][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 287.283104][ T5315] syz.1.438: attempt to access beyond end of device [ 287.283104][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 287.297294][ T5315] syz.1.438: attempt to access beyond end of device [ 287.297294][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 287.312920][ T5315] syz.1.438: attempt to access beyond end of device [ 287.312920][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 287.330619][ T5315] syz.1.438: attempt to access beyond end of device [ 287.330619][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 288.284820][ T3546] Bluetooth: hci8: command tx timeout [ 289.324536][ T3546] Bluetooth: hci9: command tx timeout [ 290.364643][ T3557] Bluetooth: hci8: command tx timeout [ 291.176716][ T3557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.405467][ T3557] Bluetooth: hci9: command tx timeout [ 292.159066][ T3557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.205415][ T5315] bio_check_eod: 5285 callbacks suppressed [ 292.205430][ T5315] syz.1.438: attempt to access beyond end of device [ 292.205430][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 292.226156][ T5315] syz.1.438: attempt to access beyond end of device [ 292.226156][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 292.240346][ T5315] syz.1.438: attempt to access beyond end of device [ 292.240346][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 292.255162][ T5315] syz.1.438: attempt to access beyond end of device [ 292.255162][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 292.269869][ T5315] syz.1.438: attempt to access beyond end of device [ 292.269869][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 292.285919][ T5315] syz.1.438: attempt to access beyond end of device [ 292.285919][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 292.300395][ T5315] syz.1.438: attempt to access beyond end of device [ 292.300395][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 292.315487][ T5315] syz.1.438: attempt to access beyond end of device [ 292.315487][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 292.329694][ T5315] syz.1.438: attempt to access beyond end of device [ 292.329694][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 292.344744][ T5315] syz.1.438: attempt to access beyond end of device [ 292.344744][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 292.444778][ T3560] Bluetooth: hci8: command tx timeout [ 293.176598][ T3560] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.514506][ T3557] Bluetooth: hci9: command tx timeout [ 294.175178][ T3560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.184260][ T3560] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.192429][ T3560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.245078][ T28] INFO: task syz.1.438:5354 blocked for more than 143 seconds. [ 295.252678][ T28] Not tainted 6.1.98-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 297.194985][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.214571][ T5315] bio_check_eod: 5318 callbacks suppressed [ 297.214581][ T5315] syz.1.438: attempt to access beyond end of device [ 297.214581][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 297.235465][ T5315] syz.1.438: attempt to access beyond end of device [ 297.235465][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 297.249976][ T5315] syz.1.438: attempt to access beyond end of device [ 297.249976][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 297.254839][ T3546] Bluetooth: hci2: command tx timeout [ 297.265729][ T5315] syz.1.438: attempt to access beyond end of device [ 297.265729][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 297.283198][ T5315] syz.1.438: attempt to access beyond end of device [ 297.283198][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 297.298013][ T5315] syz.1.438: attempt to access beyond end of device [ 297.298013][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 297.312901][ T5315] syz.1.438: attempt to access beyond end of device [ 297.312901][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 297.327747][ T5315] syz.1.438: attempt to access beyond end of device [ 297.327747][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 297.341947][ T5315] syz.1.438: attempt to access beyond end of device [ 297.341947][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 297.356738][ T5315] syz.1.438: attempt to access beyond end of device [ 297.356738][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 299.155824][ T28] task:syz.1.438 state:D stack:25856 pid:5354 ppid:4878 flags:0x00004004 [ 299.165199][ T28] Call Trace: [ 299.169985][ T28] [ 299.174453][ T28] __schedule+0x142d/0x4550 [ 299.179275][ T28] ? print_irqtrace_events+0x210/0x210 [ 299.204509][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 299.324539][ T3546] Bluetooth: hci2: command tx timeout [ 300.182812][ T28] ? __sched_text_start+0x8/0x8 [ 300.195216][ T28] ? kasan_check_range+0x5c/0x290 [ 300.204696][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 300.210045][ T28] schedule+0xbf/0x180 [ 300.214119][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 301.404511][ T3546] Bluetooth: hci2: command tx timeout [ 302.165823][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 302.171794][ T28] ? down_write_killable_nested+0x90/0x90 [ 302.177635][ T28] ? read_lock_is_recursive+0x10/0x10 [ 302.184431][ T28] ? ima_lsm_policy_change+0x620/0x620 [ 302.191345][ T28] ? rwsem_write_trylock+0x166/0x210 [ 302.196766][ T28] ? clear_nonspinnable+0x60/0x60 [ 302.201876][ T28] process_measurement+0x446/0x21b0 [ 302.225564][ T5315] bio_check_eod: 5261 callbacks suppressed [ 302.225576][ T5315] syz.1.438: attempt to access beyond end of device [ 302.225576][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 302.245550][ T5315] syz.1.438: attempt to access beyond end of device [ 302.245550][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 302.260294][ T5315] syz.1.438: attempt to access beyond end of device [ 302.260294][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 302.274532][ T5315] syz.1.438: attempt to access beyond end of device [ 302.274532][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 302.289331][ T5315] syz.1.438: attempt to access beyond end of device [ 302.289331][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 302.303492][ T5315] syz.1.438: attempt to access beyond end of device [ 302.303492][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 302.318836][ T5315] syz.1.438: attempt to access beyond end of device [ 302.318836][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 302.333035][ T5315] syz.1.438: attempt to access beyond end of device [ 302.333035][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 302.347797][ T5315] syz.1.438: attempt to access beyond end of device [ 302.347797][ T5315] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 302.361950][ T5315] syz.1.438: attempt to access beyond end of device [ 302.361950][ T5315] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 303.170028][ T28] ? mark_lock+0x9a/0x340 [ 303.174622][ T28] ? ima_file_mmap+0x1c0/0x1c0 [ 303.181264][ T28] ? dquot_initialize+0x20/0x20 [ 303.186368][ T28] ? aa_get_current_label+0x111/0x1d0 [ 303.203039][ T28] ? apparmor_current_getsecid_subj+0xac/0x110 [ 304.175388][ T3546] Bluetooth: hci2: command tx timeout [ 305.180674][ T28] ima_file_check+0xed/0x170 [ 305.186139][ T28] ? do_dentry_open+0xce4/0x10f0 [ 305.197968][ T28] ? ima_bprm_check+0x2b0/0x2b0