last executing test programs: 4m11.129928229s ago: executing program 3 (id=1822): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc00", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="06f7c456", 0x4}, {&(0x7f00000012c0)="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", 0xd4c}], 0x2, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000062c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x400101c3, 0x0) 4m10.898024916s ago: executing program 3 (id=1825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xa2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c0005006c010000000000000c000200ff7f"], 0x7c}}, 0x20000000) 4m10.7792555s ago: executing program 3 (id=1827): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x800, 0x2fc}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x0, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4m9.833609121s ago: executing program 3 (id=1830): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0xb, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000ac0)="1c550e16"}) 4m9.671194255s ago: executing program 3 (id=1831): socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_io_uring_setup(0x3380, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 4m7.461644186s ago: executing program 3 (id=1840): io_setup(0x7ffd, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 3m52.376286518s ago: executing program 32 (id=1840): io_setup(0x7ffd, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 7.326099426s ago: executing program 0 (id=2612): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) 7.224488159s ago: executing program 0 (id=2613): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000003c0)={0x8, {"c23b585272aca28d9cad01a3cdd1e3a9", "d40000007dcbfb5d3cf7c2cac100", ')\x00'}, 0x1}) 6.213000162s ago: executing program 2 (id=2617): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404801c}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 5.623765281s ago: executing program 2 (id=2618): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877", 0xd3}], 0x1, &(0x7f00000008c0)=[@iv={0x18}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b", 0xa9}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c4", 0x66}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.70030515s ago: executing program 1 (id=2621): unshare(0x8040480) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 4.200318916s ago: executing program 2 (id=2623): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) openat$procfs(0xffffffffffffff9c, &(0x7f0000003500)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e100dc40030450f846a4850200010902"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 3.613113074s ago: executing program 1 (id=2624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x18, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 2.770130822s ago: executing program 2 (id=2625): unshare(0x24040600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x30}}, 0x4090) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000090"], 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="b0a982fa9f6aadffe8651eedd44f56f7c0580b5769c21209db97a91f876b2b310db1295f423c1945e8592e5654b8ee8f16183629d7d245cb55a831281684a559f1b7acc921abee63a316d6a17fd6e747713cbfcb7df2c60583e5efccd0cd1875d088560ae7ff83bd8d7417fa79d93f8fd57d121ab462a9f4304bf7608cc98181eb7d181964dc984c340e590fe28e857d83b64b7eb4e50e81be7b1908b56ed6c864eb6c9dc94f3c001cea5dff9f3a48ec7da8727d54f164f5a2a68875425df0315742a115dbf21d6ff91b01433220a0e7c3c71eaf448fe294371c29e29ba31203d27a684de82fb71badbbb4a768baf76a69ee42788c34d403a031f1be3be297", 0xff, 0x50, 0x0, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r1}, 0x38) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000200)=0x9700) sendto$inet6(r2, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) quotactl_fd$Q_GETQUOTA(r1, 0x1cfdd2f1c51dd36d, 0x0, &(0x7f0000000100)) 2.594104018s ago: executing program 2 (id=2626): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x3, 0x58, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x40, 0x9, 0xcff}}) 2.454836042s ago: executing program 2 (id=2627): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x91, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x15}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x1, 0x9], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x9, 0x2, 'y`4'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xcb, "dc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.978017537s ago: executing program 4 (id=2630): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4090) socket$inet6(0xa, 0x3, 0x2c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706f72742c6e65740000000900020073797a31000000000c000780080012400000000c050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.88289075s ago: executing program 4 (id=2631): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xc}, 0x0) 1.756531534s ago: executing program 4 (id=2632): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) openat$procfs(0xffffffffffffff9c, &(0x7f0000003500)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e100dc40030450f846a4850200010902"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 1.052503427s ago: executing program 0 (id=2614): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 866.350152ms ago: executing program 0 (id=2633): unshare(0x24040600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x30}}, 0x4090) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000090"], 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="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", 0xff, 0x50, 0x0, 0x0) unshare(0x22020600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r1}, 0x38) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, 0x0, &(0x7f0000000200)=0x9700) quotactl_fd$Q_GETQUOTA(r1, 0x1cfdd2f1c51dd36d, 0x0, &(0x7f0000000100)) 758.126276ms ago: executing program 0 (id=2634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x2c, r1, 0x4b24f17eae29800b, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x8020) 742.262597ms ago: executing program 0 (id=2635): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327a", 0x76, 0x5, 0xffffffff}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d92", 0xb6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670", 0x9c}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162", 0x28}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 523.099793ms ago: executing program 1 (id=2636): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100030000800021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d432000000640101010000000000000000000000000000000000000000000000000000000008000000000000000100000000000080fffffffffeffffff1000000000000000018000000000000043050020000000000400000000000000f0b100000000"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x200060dc) 394.186397ms ago: executing program 1 (id=2637): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) 337.117029ms ago: executing program 4 (id=2638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002340), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002440)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 194.153874ms ago: executing program 1 (id=2639): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xc}, 0x0) 171.183695ms ago: executing program 4 (id=2640): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f00000000000800"], 0x54}, 0x1, 0x0, 0x0, 0x4899}, 0x4004850) 49.969659ms ago: executing program 1 (id=2641): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0x21, 0xde, 0x7b, 0x20, 0xc45, 0x602d, 0xfaff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x91, 0x40, 0x1, "", [{{0x9, 0x4, 0x31, 0xe, 0x1, 0xfe, 0x6a, 0x3a, 0x0, [], [{{0x9, 0x5, 0xa, 0x3, 0x8, 0x9, 0x5, 0x9d}}]}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=2642): sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x14, 0x0, 0x3, 0x3, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5bf08cece5b99490}, 0x8000) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x90, 0x117, 0x2, 0x78, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245"}], 0x90, 0x40800}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): " exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9f0535d68e code=0x7ffc0000 [ 444.366706][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1368'. [ 444.604333][T10257] kvm: pic: non byte write [ 444.624557][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 445.052551][T10270] binder: BINDER_SET_CONTEXT_MGR already set [ 445.058970][T10270] binder: 10269:10270 ioctl 4018620d 200000000040 returned -16 [ 445.075936][T10270] binder: 10269:10270 ioctl c0306201 200000001ac0 returned -11 [ 445.239682][ T5808] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 445.734550][ T5808] usb 3-1: Using ep0 maxpacket: 8 [ 445.758804][ T5808] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 445.784515][ T5808] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 445.809715][ T5808] usb 3-1: Product: syz [ 445.813958][ T5808] usb 3-1: Manufacturer: syz [ 445.844479][ T5808] usb 3-1: SerialNumber: syz [ 445.871805][ T5808] usb 3-1: config 0 descriptor?? [ 445.919120][ T5808] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 445.968330][T10284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1379'. [ 446.068402][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'. [ 446.576993][ T5808] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 446.742135][ T5808] usb 3-1: USB disconnect, device number 11 [ 447.421446][T10306] autofs4:pid:10306:autofs_fill_super: called with bogus options [ 447.873015][T10321] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1393'. [ 448.094501][T10324] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 448.685659][T10337] autofs4:pid:10337:autofs_fill_super: called with bogus options [ 449.132995][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 449.153285][T10343] dummy0: left promiscuous mode [ 449.188347][T10344] netem: change failed [ 449.204272][T10343] netlink: 'syz.2.1400': attribute type 10 has an invalid length. [ 449.226650][T10343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1400'. [ 449.249388][T10343] dummy0: entered promiscuous mode [ 449.312713][T10348] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1402'. [ 452.028148][T10369] autofs4:pid:10369:autofs_fill_super: called with bogus options [ 452.535946][T10376] befs: (nbd3): No write support. Marking filesystem read-only [ 452.544499][T10376] syz.3.1412: attempt to access beyond end of device [ 452.544499][T10376] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 453.337941][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 453.406272][T10385] dummy0: left promiscuous mode [ 453.447659][T10389] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 453.476726][T10383] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1413'. [ 453.486495][T10389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1414'. [ 453.514441][T10389] dummy0: entered promiscuous mode [ 453.554823][T10393] loop8: detected capacity change from 0 to 7 [ 453.664405][T10393] Dev loop8: unable to read RDB block 7 [ 453.692563][T10393] loop8: unable to read partition table [ 453.714465][T10393] loop8: partition table beyond EOD, truncated [ 453.745831][T10393] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 456.667742][T10423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 456.675926][T10423] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 456.691586][T10423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 456.700498][T10423] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 456.741471][T10423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 456.748747][T10423] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 458.386368][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 458.709549][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 458.733971][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 458.789537][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 459.058890][T10462] befs: (nbd2): No write support. Marking filesystem read-only [ 459.074692][T10462] syz.2.1443: attempt to access beyond end of device [ 459.074692][T10462] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 460.466236][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 460.798377][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 460.886642][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 461.882018][T10506] befs: (nbd1): No write support. Marking filesystem read-only [ 461.890367][T10506] syz.1.1456: attempt to access beyond end of device [ 461.890367][T10506] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 466.089482][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1469'. [ 466.204240][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1470'. [ 466.268105][T10544] dummy0: left promiscuous mode [ 466.282084][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1469'. [ 466.321418][T10544] netlink: 'syz.2.1470': attribute type 10 has an invalid length. [ 466.331009][T10544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1470'. [ 466.344512][T10544] dummy0: entered promiscuous mode [ 466.541517][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 468.022608][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 468.281192][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.293055][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 468.309391][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 468.318533][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.331373][ T23] usb 1-1: config 0 descriptor?? [ 468.807902][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 468.815455][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 468.825641][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 468.834795][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 468.847021][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 468.854458][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 469.096927][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 469.104593][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 469.113397][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 469.121053][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 469.137616][ T23] HID 045e:07da: Invalid code 65791 type 1 [ 469.147273][ T23] HID 045e:07da: Invalid code 768 type 1 [ 469.153073][ T23] HID 045e:07da: Invalid code 769 type 1 [ 469.421614][ T23] HID 045e:07da: Invalid code 770 type 1 [ 469.427910][ T23] HID 045e:07da: Invalid code 771 type 1 [ 469.439745][ T23] HID 045e:07da: Invalid code 772 type 1 [ 469.445550][ T23] HID 045e:07da: Invalid code 773 type 1 [ 469.452202][ T23] HID 045e:07da: Invalid code 774 type 1 [ 469.458304][ T23] HID 045e:07da: Invalid code 775 type 1 [ 469.464217][ T23] HID 045e:07da: Invalid code 776 type 1 [ 469.482525][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input8 [ 469.716338][ T23] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 469.772822][ T23] usb 1-1: USB disconnect, device number 17 [ 470.391513][T10571] fido_id[10571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 470.594495][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 472.586777][T10582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.642825][T10587] netlink: 'syz.3.1482': attribute type 10 has an invalid length. [ 472.657829][T10587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1482'. [ 475.799271][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'. [ 475.931499][T10627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 475.979145][T10630] netlink: 'syz.3.1494': attribute type 10 has an invalid length. [ 476.407385][T10630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1494'. [ 476.865705][T10632] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 476.884742][T10632] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 476.892464][T10632] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.576233][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 478.898937][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'. [ 478.951586][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 478.951596][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 479.000581][T10665] befs: (nbd1): No write support. Marking filesystem read-only [ 479.009023][T10665] syz.1.1505: attempt to access beyond end of device [ 479.009023][T10665] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 479.548355][T10666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.747149][T10669] netlink: 'syz.0.1506': attribute type 10 has an invalid length. [ 479.755579][T10669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1506'. [ 480.648422][T10677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 480.689234][T10677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 480.758881][T10677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 481.116424][ T5773] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 481.439991][ T5773] usb 1-1: config 0 has no interfaces? [ 481.559236][ T5773] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 481.679581][ T5773] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 481.788320][ T5773] usb 1-1: Product: syz [ 481.868967][ T5773] usb 1-1: Manufacturer: syz [ 481.986210][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 482.085276][ T5773] usb 1-1: config 0 descriptor?? [ 482.187343][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 482.221446][T10704] 8021q: adding VLAN 0 to HW filter on device bond4 [ 482.237176][T10704] netlink: 'syz.2.1518': attribute type 10 has an invalid length. [ 482.245198][T10704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1518'. [ 482.382516][ T5810] usb 1-1: USB disconnect, device number 18 [ 482.796613][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 482.802833][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 484.893806][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 485.274532][T10735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 485.282897][T10736] netlink: 'syz.0.1529': attribute type 10 has an invalid length. [ 485.316874][T10736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1529'. [ 485.490067][T10745] befs: (nbd0): No write support. Marking filesystem read-only [ 485.497984][T10745] syz.0.1533: attempt to access beyond end of device [ 485.497984][T10745] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 486.668048][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 486.668139][ T28] audit: type=1326 audit(1781934034.787:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.2.1538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 486.725127][ T28] audit: type=1326 audit(1781934034.817:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.2.1538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 486.749237][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.797962][ T28] audit: type=1326 audit(1781934034.817:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.2.1538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 486.836338][ T28] audit: type=1326 audit(1781934034.817:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.2.1538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 486.890455][T10768] vivid-003: disconnect [ 486.915430][T10768] vivid-003: reconnect [ 486.924393][ T28] audit: type=1326 audit(1781934034.817:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.2.1538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 486.948524][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.973277][ T28] audit: type=1326 audit(1781934034.817:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.2.1538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 487.126729][ T28] audit: type=1326 audit(1781934034.817:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.2.1538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 487.514189][ T28] audit: type=1326 audit(1781934034.817:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10762 comm="syz.2.1538" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 487.913173][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 488.066269][T10777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.087412][T10783] netlink: 'syz.3.1542': attribute type 10 has an invalid length. [ 488.141758][T10783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1542'. [ 490.804131][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 490.963456][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1556'. [ 491.841700][T10823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.864743][T10828] netlink: 'syz.0.1556': attribute type 10 has an invalid length. [ 491.956360][T10828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1556'. [ 492.171031][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1561'. [ 492.202292][T10837] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 492.223105][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 492.486937][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'. [ 494.071694][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 495.007481][T10858] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.103108][T10870] netlink: 'syz.2.1574': attribute type 1 has an invalid length. [ 495.111296][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'. [ 495.131583][T10858] netlink: 'syz.0.1571': attribute type 10 has an invalid length. [ 495.176209][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1571'. [ 497.088676][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 497.227640][T10905] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.267998][T10903] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 497.376815][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 497.440666][T10909] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 497.476255][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1587'. [ 499.882444][ T5778] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 500.019186][T10949] netlink: 'syz.0.1601': attribute type 1 has an invalid length. [ 500.027142][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1601'. [ 501.435619][T10974] netlink: 'syz.3.1611': attribute type 1 has an invalid length. [ 501.458350][T10974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1611'. [ 501.676812][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.684144][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.069413][T10999] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 503.090895][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1621'. [ 504.632821][T11012] befs: (nbd3): No write support. Marking filesystem read-only [ 504.642262][T11012] syz.3.1625: attempt to access beyond end of device [ 504.642262][T11012] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 509.352233][T11051] befs: (nbd2): No write support. Marking filesystem read-only [ 509.399215][T11051] syz.2.1637: attempt to access beyond end of device [ 509.399215][T11051] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 510.725030][T11066] befs: (nbd1): No write support. Marking filesystem read-only [ 510.733486][T11066] syz.1.1643: attempt to access beyond end of device [ 510.733486][T11066] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 512.978029][T11091] binder: 11083:11091 ioctl c0306201 0 returned -14 [ 515.485117][T11101] befs: (nbd2): No write support. Marking filesystem read-only [ 515.535179][T11101] syz.2.1654: attempt to access beyond end of device [ 515.535179][T11101] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 520.248441][T11154] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 525.856740][T11192] fuse: Invalid rootmode [ 526.037296][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 526.102604][T11192] orangefs_mount: mount request failed with -4 [ 531.049582][T11233] loop5: detected capacity change from 0 to 7 [ 531.081338][T11233] Dev loop5: unable to read RDB block 7 [ 531.088303][T11233] loop5: AHDI p2 p3 [ 531.092253][T11233] loop5: partition table partially beyond EOD, truncated [ 531.124075][T11233] loop5: p2 size 151585024 extends beyond EOD, truncated [ 531.394932][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 532.983581][T11246] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 533.230580][T11251] loop3: detected capacity change from 0 to 64 [ 535.852342][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 540.839059][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1711'. [ 545.405427][T11332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 546.552281][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 546.849639][ T9] usb 2-1: config 0 has no interfaces? [ 547.016952][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 547.033194][ T9] usb 2-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 547.062535][ T9] usb 2-1: Product: syz [ 547.072646][ T9] usb 2-1: Manufacturer: syz [ 547.082055][ T9] usb 2-1: config 0 descriptor?? [ 547.439801][ T5810] usb 2-1: USB disconnect, device number 10 [ 548.486195][ T5773] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 548.610972][T11370] dummy0: left promiscuous mode [ 548.693881][T11370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.137426][ T5810] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 549.260285][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 549.267763][ T5773] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 549.276070][ T5773] usb 4-1: config 252 has no interface number 0 [ 549.283231][ T5773] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 549.311963][ T5773] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 549.332035][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.336323][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 549.348353][ T5773] usb 4-1: Product: syz [ 549.352647][ T5773] usb 4-1: Manufacturer: syz [ 549.354409][ T5810] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 549.376165][ T5773] usb 4-1: SerialNumber: syz [ 549.463045][ T5810] usb 1-1: config 0 has no interface number 0 [ 549.528339][ T5773] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 549.708238][ T5810] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 549.947863][ T787] usb 4-1: USB disconnect, device number 14 [ 549.948697][ T8234] usb 4-1: Failed to submit usb control message: -71 [ 549.966743][ T8234] usb 4-1: unable to send the bmi data to the device: -71 [ 549.975151][ T5810] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 549.994743][ T8234] usb 4-1: unable to get target info from device [ 550.002053][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.026797][ T8234] usb 4-1: could not get target info (-71) [ 550.030442][ T5810] usb 1-1: Product: syz [ 550.033090][ T8234] usb 4-1: could not probe fw (-71) [ 550.052030][ T5810] usb 1-1: Manufacturer: syz [ 550.058528][ T5810] usb 1-1: SerialNumber: syz [ 550.078061][ T5810] usb 1-1: config 0 descriptor?? [ 550.084449][T11366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 550.299930][T11366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 550.957219][ T5810] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 551.083830][ T5810] asix: probe of 1-1:0.188 failed with error -71 [ 551.247839][ T5810] usb 1-1: USB disconnect, device number 19 [ 554.351225][T11393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 554.357402][T11393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 554.363434][T11393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 554.546267][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 556.386310][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 556.392376][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 556.559982][T11435] befs: (nbd1): No write support. Marking filesystem read-only [ 556.567887][T11435] syz.1.1761: attempt to access beyond end of device [ 556.567887][T11435] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 558.693311][T11454] loop0: detected capacity change from 0 to 128 [ 559.767318][T11461] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 561.180430][T11474] loop2: detected capacity change from 0 to 8192 [ 561.234772][T11470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.270013][T11474] loop2: p1 p2 p3 [ 563.247074][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.253781][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.337861][T10293] udevd[10293]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 563.339577][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 563.356905][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 565.796893][T11499] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 566.145416][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'. [ 566.267379][T11504] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.337767][T11508] dummy0: left promiscuous mode [ 566.382821][T11508] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 566.534290][ T5810] IPVS: starting estimator thread 0... [ 566.657108][T11514] IPVS: using max 20 ests per chain, 48000 per kthread [ 567.174433][T11523] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1784'. [ 568.980206][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1790'. [ 569.030516][T11536] syz.3.1788 uses obsolete (PF_INET,SOCK_PACKET) [ 569.033788][T11548] 8021q: adding VLAN 0 to HW filter on device bond4 [ 569.088927][T11548] bond3: (slave dummy0): Releasing backup interface [ 569.118694][T11548] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 569.546489][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 569.818666][ T23] usb 3-1: config 0 has no interfaces? [ 569.832353][ T23] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 569.844596][ T23] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 569.855502][ T23] usb 3-1: Product: syz [ 569.911411][ T23] usb 3-1: Manufacturer: syz [ 569.951137][ T23] usb 3-1: config 0 descriptor?? [ 570.501605][T11567] befs: (nbd1): No write support. Marking filesystem read-only [ 570.511873][T11567] syz.1.1795: attempt to access beyond end of device [ 570.511873][T11567] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 570.532996][ T23] usb 3-1: USB disconnect, device number 12 [ 570.803764][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1803'. [ 570.830809][T11586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.849438][T11586] bond4: (slave dummy0): Releasing backup interface [ 570.861292][T11586] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 570.869668][T11573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 570.881056][T11573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 570.888855][T11573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.952105][T11589] loop8: detected capacity change from 0 to 7 [ 570.985658][T11589] Dev loop8: unable to read RDB block 7 [ 571.015924][T11589] loop8: unable to read partition table [ 571.039725][T11591] loop0: detected capacity change from 0 to 512 [ 571.041531][T11589] loop8: partition table beyond EOD, truncated [ 571.094912][T11589] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 571.230714][T11591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.288748][T11591] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.795595][T11591] Bluetooth: MGMT ver 1.22 [ 571.957935][T11591] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 572.074563][ T6391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.140281][T11609] loop2: detected capacity change from 0 to 64 [ 572.320548][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1813'. [ 572.626282][T11438] Bluetooth: hci1: command 0x0406 tx timeout [ 572.825228][T11615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 572.871477][T11622] dummy0: left promiscuous mode [ 572.930335][T11622] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 572.946350][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 572.952555][T11438] Bluetooth: hci2: command 0x0406 tx timeout [ 572.997497][T11616] befs: (nbd0): No write support. Marking filesystem read-only [ 573.005244][T11616] syz.0.1810: attempt to access beyond end of device [ 573.005244][T11616] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 573.193215][T11620] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 573.221966][T11620] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 573.245963][T11620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.684339][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1824'. [ 573.717922][T11649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1825'. [ 573.813188][T11646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.865489][T11651] dummy0: left promiscuous mode [ 573.906309][T11651] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 574.804854][T11666] binder: 11665:11666 ioctl c0306201 0 returned -14 [ 574.820176][T11666] binder: 11665:11666 ioctl c0306201 200000001ac0 returned -11 [ 574.829371][T11664] befs: (nbd0): No write support. Marking filesystem read-only [ 574.838396][T11664] syz.0.1828: attempt to access beyond end of device [ 574.838396][T11664] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 574.928086][T11663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 574.956050][T11663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 574.976462][T11663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.152873][T11681] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1835'. [ 576.847811][T11683] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 577.048932][T11438] Bluetooth: hci1: command 0x0406 tx timeout [ 577.054989][T11438] Bluetooth: hci2: command 0x0406 tx timeout [ 577.061528][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 577.092636][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1836'. [ 577.175824][T11685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 577.232563][T11689] bond5: (slave dummy0): Releasing backup interface [ 577.269492][T11689] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 577.838343][T11701] befs: (nbd1): No write support. Marking filesystem read-only [ 577.856974][T11701] syz.1.1841: attempt to access beyond end of device [ 577.856974][T11701] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 578.451976][T11712] befs: (nbd1): No write support. Marking filesystem read-only [ 578.486657][T11712] syz.1.1845: attempt to access beyond end of device [ 578.486657][T11712] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 578.675920][T11718] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1846'. [ 580.436710][T11727] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 582.006838][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 582.062063][T11739] 8021q: adding VLAN 0 to HW filter on device bond7 [ 582.094390][T11741] bond6: (slave dummy0): Releasing backup interface [ 582.113541][T11741] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 582.398988][T11750] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1855'. [ 583.978461][T11755] fuse: Bad value for 'fd' [ 584.786844][T11761] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 585.277026][T11764] tipc: Started in network mode [ 585.282187][T11764] tipc: Node identity 421e854ae1ea, cluster identity 4711 [ 585.311114][T11764] tipc: Enabled bearer , priority 0 [ 585.338383][T11768] syzkaller0: entered promiscuous mode [ 585.343909][T11768] syzkaller0: entered allmulticast mode [ 585.388275][T11763] tipc: Resetting bearer [ 585.469320][T11763] tipc: Disabling bearer [ 585.764741][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1863'. [ 585.849250][T11773] 8021q: adding VLAN 0 to HW filter on device bond7 [ 586.006378][T11776] bond6: (slave dummy0): Releasing backup interface [ 586.050708][T11776] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 586.315032][T11779] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1864'. [ 586.512813][T11783] loop1: detected capacity change from 0 to 1024 [ 586.651419][T11783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 586.717872][T11783] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.061643][T11792] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.1865: lblock 0 mapped to illegal pblock 0 (length 1) [ 588.128170][T11792] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 588.140552][T11792] EXT4-fs (loop1): This should not happen!! Data will be lost [ 588.140552][T11792] [ 588.491448][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 590.565134][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1872'. [ 590.631187][T11814] 8021q: adding VLAN 0 to HW filter on device bond8 [ 590.712625][T11816] bond7: (slave dummy0): Releasing backup interface [ 590.731592][T11816] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 593.359276][T11830] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 593.842138][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 593.865224][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 593.874643][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 593.883047][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 593.891146][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 593.900698][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 594.062607][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 594.144953][T11848] 8021q: adding VLAN 0 to HW filter on device bond9 [ 594.195122][T11851] bond8: (slave dummy0): Releasing backup interface [ 594.209292][T11851] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 594.370610][T11845] chnl_net:caif_netlink_parms(): no params data found [ 595.416223][T11845] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.448505][T11845] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.455787][T11845] bridge_slave_0: entered allmulticast mode [ 596.625872][ T5781] Bluetooth: hci4: command tx timeout [ 596.729315][T11845] bridge_slave_0: entered promiscuous mode [ 596.738194][T11845] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.745401][T11845] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.752722][T11845] bridge_slave_1: entered allmulticast mode [ 596.760424][T11845] bridge_slave_1: entered promiscuous mode [ 596.816456][T11845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.842316][T11845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.373764][T11873] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 597.700235][T11876] ceph: No mds server is up or the cluster is laggy [ 597.720540][T11873] tipc: Started in network mode [ 597.725465][T11873] tipc: Node identity ac1414aa, cluster identity 4711 [ 597.762579][T11873] tipc: Enabled bearer , priority 10 [ 597.799511][T11845] team0: Port device team_slave_0 added [ 597.878502][T11845] team0: Port device team_slave_1 added [ 597.953234][T11845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.974780][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.043923][T11845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.057690][T11845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.064684][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.156242][T11845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.169409][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 598.272513][T11883] 8021q: adding VLAN 0 to HW filter on device bond6 [ 598.416746][T11885] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 598.491864][T11845] hsr_slave_0: entered promiscuous mode [ 598.541254][T11845] hsr_slave_1: entered promiscuous mode [ 598.576621][T11845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.595315][T11845] Cannot create hsr debugfs directory [ 598.654411][T11891] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 598.706559][ T5781] Bluetooth: hci4: command tx timeout [ 598.760777][ T5985] tipc: Node number set to 2886997162 [ 601.102744][ T5781] Bluetooth: hci4: command tx timeout [ 601.280598][T11902] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1896'. [ 601.398218][T11845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 601.433548][T11845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 601.458417][T11845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 601.480661][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'. [ 601.579707][T11905] 8021q: adding VLAN 0 to HW filter on device bond7 [ 601.593537][T11845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 601.717994][T11908] bond6: (slave dummy0): Releasing backup interface [ 601.752308][T11908] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 602.643511][T11914] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 602.733077][T11845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.798269][T11845] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.809450][ T8230] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.816678][ T8230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.841717][ T8230] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.848955][ T8230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.190533][ T5781] Bluetooth: hci4: command tx timeout [ 603.273285][T11845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.087041][T11845] veth0_vlan: entered promiscuous mode [ 604.105001][T11845] veth1_vlan: entered promiscuous mode [ 604.835350][T11845] veth0_macvtap: entered promiscuous mode [ 604.901676][T11845] veth1_macvtap: entered promiscuous mode [ 604.930840][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.942108][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.953585][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.015578][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.050866][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.061724][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.078060][T11845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.126660][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.166188][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.205195][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.225256][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.258430][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.272459][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.312841][T11845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.476804][T11845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.519131][ T5808] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 605.542692][T11845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.675555][T11845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.796307][T11845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.878710][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 605.891291][ T5808] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 605.897314][T11958] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 605.900770][ T5808] usb 3-1: config 0 has no interface number 0 [ 605.955963][ T5808] usb 3-1: config 0 interface 184 has no altsetting 0 [ 605.973043][ T5808] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 605.983229][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.003473][ T5808] usb 3-1: Product: syz [ 606.008061][ T5808] usb 3-1: Manufacturer: syz [ 606.012694][ T5808] usb 3-1: SerialNumber: syz [ 606.065831][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.075035][ T5808] usb 3-1: config 0 descriptor?? [ 606.089502][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.102289][ T5808] smsc75xx v1.0.0 [ 606.151178][ T8230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.164709][ T8230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.406538][ T5773] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 606.625102][ T5773] usb 2-1: config 0 has no interfaces? [ 606.658514][ T5773] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 606.668632][ T5773] usb 2-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 606.693891][ T5773] usb 2-1: Product: syz [ 606.715365][ T5773] usb 2-1: Manufacturer: syz [ 606.762504][ T5773] usb 2-1: config 0 descriptor?? [ 606.832730][ T5808] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 606.852428][ T5808] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 606.996531][ T5811] usb 2-1: USB disconnect, device number 11 [ 607.983003][ T5808] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 608.007467][ T5808] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 608.034835][ T5808] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 608.061563][ T5808] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 608.093135][ T5808] usb 3-1: USB disconnect, device number 13 [ 609.516579][T11991] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 611.288115][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1926'. [ 612.148056][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'. [ 612.556758][ T5811] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 612.838740][ T5811] usb 5-1: config 0 has no interfaces? [ 612.937378][ T5811] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 613.069714][ T5811] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 613.190424][ T5811] usb 5-1: Product: syz [ 613.194638][ T5811] usb 5-1: Manufacturer: syz [ 613.238781][T12016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1931'. [ 613.249274][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 613.249338][ T5811] usb 5-1: config 0 descriptor?? [ 613.501708][ T28] audit: type=1326 audit(1781934161.617:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 613.525814][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.551427][ T23] usb 5-1: USB disconnect, device number 2 [ 613.557496][ T28] audit: type=1326 audit(1781934161.617:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fdf725592ac code=0x7ffc0000 [ 613.585170][ T28] audit: type=1326 audit(1781934161.617:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdf7255930e code=0x7ffc0000 [ 613.621917][ T28] audit: type=1326 audit(1781934161.647:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf7259caeb code=0x7ffc0000 [ 613.665202][ T28] audit: type=1326 audit(1781934161.647:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 613.689319][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.416235][ T28] audit: type=1326 audit(1781934161.647:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 614.492728][ T28] audit: type=1326 audit(1781934161.647:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 614.524886][ T28] audit: type=1326 audit(1781934161.657:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 614.549971][ T28] audit: type=1326 audit(1781934161.657:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 614.581722][ T28] audit: type=1326 audit(1781934161.687:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 614.754870][ T5810] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 614.948258][ T5810] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 614.956533][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.976206][ T5810] usb 5-1: config 0 has no interface number 0 [ 614.991644][ T5810] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 615.002844][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.015558][ T5810] usb 5-1: Product: syz [ 615.019875][ T5810] usb 5-1: Manufacturer: syz [ 615.024612][ T5810] usb 5-1: SerialNumber: syz [ 615.052590][ T5810] usb 5-1: config 0 descriptor?? [ 615.067210][ T5810] CoreChips: probe of 5-1:0.41 failed with error -22 [ 615.273067][ T5810] usb 5-1: USB disconnect, device number 3 [ 616.456954][T12049] loop0: detected capacity change from 0 to 128 [ 616.471355][T12049] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 616.486560][T12049] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 616.492719][T12049] vxfs: can't find superblock. [ 617.503938][T12060] fuse: Invalid rootmode [ 617.658398][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 617.739285][T12066] batadv_slave_1: entered promiscuous mode [ 617.752419][T12066] batadv_slave_1: left promiscuous mode [ 618.555616][ T9] usb 3-1: config 0 has no interfaces? [ 618.576572][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 618.642665][T12069] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 618.656312][ T9] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 618.684407][ T9] usb 3-1: Product: syz [ 618.688926][ T9] usb 3-1: Manufacturer: syz [ 618.711195][ T9] usb 3-1: config 0 descriptor?? [ 620.056226][ T5813] usb 3-1: USB disconnect, device number 14 [ 623.465797][T12103] befs: (nbd2): No write support. Marking filesystem read-only [ 623.474696][T12103] syz.2.1961: attempt to access beyond end of device [ 623.474696][T12103] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 624.155059][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 624.979799][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.186414][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.193236][T12113] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 625.367059][ T23] usb 5-1: config 0 has no interfaces? [ 625.399969][ T23] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 625.418184][ T23] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 625.457483][ T23] usb 5-1: Product: syz [ 625.473877][ T23] usb 5-1: Manufacturer: syz [ 625.503225][ T23] usb 5-1: config 0 descriptor?? [ 625.794462][ T5813] usb 5-1: USB disconnect, device number 4 [ 626.795932][T12136] loop8: detected capacity change from 0 to 7 [ 626.826264][T12136] Dev loop8: unable to read RDB block 7 [ 626.833950][T12136] loop8: unable to read partition table [ 626.856676][T12136] loop8: partition table beyond EOD, truncated [ 626.866236][T12136] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 627.859360][T12152] befs: (nbd0): No write support. Marking filesystem read-only [ 627.867804][T12152] syz.0.1974: attempt to access beyond end of device [ 627.867804][T12152] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 629.092017][T12173] loop1: detected capacity change from 0 to 1024 [ 629.157227][ T5813] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 629.319529][T12178] binder: BINDER_SET_CONTEXT_MGR already set [ 629.325585][T12178] binder: 12177:12178 ioctl 4018620d 200000000040 returned -16 [ 629.342677][T12178] binder: 12177:12178 ioctl c0306201 200000001ac0 returned -11 [ 629.372200][ T5813] usb 5-1: config 0 has no interfaces? [ 629.403229][ T5813] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 629.422929][ T5813] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 629.442204][ T5813] usb 5-1: Product: syz [ 629.456579][ T5813] usb 5-1: Manufacturer: syz [ 629.485668][ T5813] usb 5-1: config 0 descriptor?? [ 629.741237][ T5813] usb 5-1: USB disconnect, device number 5 [ 630.545220][T12201] loop4: detected capacity change from 0 to 1024 [ 630.823298][T12208] binder: 12207:12208 ioctl c0306201 200000001ac0 returned -11 [ 631.626211][ T5773] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 631.735636][T12223] loop1: detected capacity change from 0 to 1024 [ 631.843551][ T5773] usb 5-1: config 0 has no interfaces? [ 631.867008][ T5773] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 631.892820][T12225] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.895865][ T5773] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 631.931720][ T5773] usb 5-1: Product: syz [ 631.936023][ T5773] usb 5-1: Manufacturer: syz [ 631.966058][ T5773] usb 5-1: config 0 descriptor?? [ 631.975337][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.982756][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.209534][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 632.209549][ T28] audit: type=1326 audit(1781934180.327:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.2.2007" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x0 [ 632.253780][ T5813] usb 5-1: USB disconnect, device number 6 [ 632.516757][T12244] hub 8-0:1.0: USB hub found [ 632.525142][T12244] hub 8-0:1.0: 1 port detected [ 632.606305][T12244] capability: warning: `syz.2.2007' uses 32-bit capabilities (legacy support in use) [ 634.837171][ T23] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 635.047643][ T23] usb 1-1: config 0 has no interfaces? [ 635.689727][ T23] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 635.706146][ T23] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 635.715041][ T23] usb 1-1: Product: syz [ 635.724723][ T23] usb 1-1: Manufacturer: syz [ 635.760778][ T23] usb 1-1: config 0 descriptor?? [ 635.808125][T12282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.814622][T12282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 635.820854][T12282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 635.826913][T12282] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 635.832830][T12282] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 635.873509][T12282] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 636.001843][ T23] usb 1-1: USB disconnect, device number 20 [ 636.946509][T11688] Bluetooth: hci1: command 0x0406 tx timeout [ 637.907203][T11688] Bluetooth: hci4: command 0x0c1a tx timeout [ 637.907209][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 637.907289][T11688] Bluetooth: hci3: command 0x0406 tx timeout [ 638.752010][T12324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2038'. [ 639.486282][T12337] binder: 12336:12337 ioctl 4018620d 0 returned -22 [ 639.524589][T12337] binder: 12336:12337 ioctl c0306201 0 returned -14 [ 640.028975][T11688] Bluetooth: hci4: command 0x0c1a tx timeout [ 642.000738][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'. [ 642.066760][T11688] Bluetooth: hci4: command 0x0c1a tx timeout [ 642.189651][T12394] befs: (nbd1): No write support. Marking filesystem read-only [ 642.197475][T12394] syz.1.2052: attempt to access beyond end of device [ 642.197475][T12394] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 643.239755][T12412] binder: 12411:12412 ioctl 4018620d 0 returned -22 [ 643.291963][T12412] binder: 12411:12412 ioctl c0306201 0 returned -14 [ 644.786732][T12419] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 645.340530][T12457] loop4: detected capacity change from 0 to 512 [ 645.459651][T12459] befs: (nbd2): No write support. Marking filesystem read-only [ 645.467473][T12459] syz.2.2065: attempt to access beyond end of device [ 645.467473][T12459] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 645.622747][T12457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.635705][T12457] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.787028][T12473] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 645.822352][T11845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.165836][T12481] loop4: detected capacity change from 0 to 1024 [ 648.240905][T12505] befs: (nbd1): No write support. Marking filesystem read-only [ 648.248611][T12505] syz.1.2084: attempt to access beyond end of device [ 648.248611][T12505] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 648.543585][ T28] audit: type=1326 audit(1781934196.657:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.4.2088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed85f9ce59 code=0x0 [ 649.955906][T12523] hub 8-0:1.0: USB hub found [ 649.960917][T12523] hub 8-0:1.0: 1 port detected [ 652.047609][T12539] ceph: No mds server is up or the cluster is laggy [ 653.546582][T12551] loop2: detected capacity change from 0 to 32768 [ 653.617545][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2101'. [ 653.661637][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 654.692163][T12587] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 657.867147][T12614] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2104'. [ 658.052514][T12618] loop4: detected capacity change from 0 to 256 [ 658.065540][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2114'. [ 658.940832][T12624] ceph: No mds server is up or the cluster is laggy [ 659.063265][ T28] audit: type=1326 audit(1781934207.177:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.2.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 659.240346][ T28] audit: type=1326 audit(1781934207.177:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.2.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 660.326721][ T28] audit: type=1326 audit(1781934207.227:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.2.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 660.355344][ T28] audit: type=1326 audit(1781934207.227:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.2.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 660.379560][ T28] audit: type=1326 audit(1781934207.227:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.2.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 660.404916][ T28] audit: type=1326 audit(1781934207.227:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.2.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 660.429159][ T28] audit: type=1326 audit(1781934207.227:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.2.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 660.453449][ T28] audit: type=1326 audit(1781934207.227:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.2.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 660.563199][ T28] audit: type=1326 audit(1781934207.227:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12631 comm="syz.2.2119" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x7ffc0000 [ 661.360791][T12645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 661.451193][T12653] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 662.713522][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 663.766282][T12666] Set syz1 is full, maxelem 65536 reached [ 664.783426][T12677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2134'. [ 664.848192][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2134'. [ 665.140049][T12683] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 665.661984][T12689] befs: (nbd4): No write support. Marking filesystem read-only [ 665.670744][T12689] syz.4.2138: attempt to access beyond end of device [ 665.670744][T12689] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 666.298898][T12696] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2140'. [ 666.780391][T12708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2144'. [ 666.835156][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'. [ 668.413029][T12714] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 668.799518][T12729] befs: (nbd1): No write support. Marking filesystem read-only [ 668.807901][T12729] syz.1.2150: attempt to access beyond end of device [ 668.807901][T12729] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 670.221853][T12741] ubi16: attaching mtd0 [ 670.243327][T12741] ubi16: scanning is finished [ 670.248270][T12741] ubi16: empty MTD device detected [ 670.787359][T12741] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 670.795017][T12741] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 670.802445][T12741] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 670.809546][T12741] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 670.817170][T12741] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 670.824679][T12741] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 670.832883][T12741] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 392723730 [ 670.843421][T12741] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 670.946266][T12742] ubi16: background thread "ubi_bgt16d" started, PID 12742 [ 671.952364][T12748] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2158'. [ 674.814581][ T28] audit: type=1326 audit(1781934222.927:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.2.2163" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf7259ce59 code=0x0 [ 675.259073][T12774] hub 8-0:1.0: USB hub found [ 675.264819][T12774] hub 8-0:1.0: 1 port detected [ 676.377953][T12771] loop0: detected capacity change from 0 to 1024 [ 676.388233][T12771] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 676.414467][T12771] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 676.443410][T12771] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (23579!=20869) [ 676.483467][T12771] EXT4-fs error (device loop0): ext4_get_journal_inode:5820: inode #2: comm syz.0.2164: iget: special inode unallocated [ 676.537562][T12771] EXT4-fs (loop0): no journal found [ 677.450293][T12789] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 680.018878][ T28] audit: type=1326 audit(1781934228.137:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.0.2175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f0539ce59 code=0x0 [ 680.059015][T12807] loop1: detected capacity change from 0 to 256 [ 680.278975][T12815] hub 8-0:1.0: USB hub found [ 680.283903][T12815] hub 8-0:1.0: 1 port detected [ 681.060438][T12819] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2170'. [ 681.585196][T12826] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 682.035787][T12829] binder: 12828:12829 ioctl 4018620d 0 returned -22 [ 682.092848][T12829] binder: 12828:12829 ioctl c0306201 0 returned -14 [ 684.477594][ T6204] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 684.676480][ T6204] usb 3-1: Using ep0 maxpacket: 8 [ 684.743098][ T6204] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 684.845991][ T6204] usb 3-1: config 179 has no interface number 0 [ 684.920681][ T6204] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 685.032676][ T6204] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 685.146625][ T6204] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 685.260399][ T6204] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 685.335342][ T6204] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 685.361434][ T28] audit: type=1326 audit(1781934233.477:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.1.2187" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f940099ce59 code=0x0 [ 685.396079][ T6204] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 685.413484][ T6204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.427037][T12861] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.652184][T12883] hub 8-0:1.0: USB hub found [ 685.657565][T12883] hub 8-0:1.0: 1 port detected [ 686.406337][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.422985][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.498532][ T5813] usb 3-1: USB disconnect, device number 15 [ 686.498577][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 686.513378][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 686.751452][T12891] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 687.002822][T12897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2192'. [ 688.455596][T12907] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2194'. [ 688.465036][T12907] nbd: must specify a size in bytes for the device [ 688.619157][T12910] befs: (nbd2): No write support. Marking filesystem read-only [ 688.627223][T12910] syz.2.2196: attempt to access beyond end of device [ 688.627223][T12910] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 689.690349][T12919] loop0: detected capacity change from 0 to 512 [ 689.714810][T12919] ext2: Bad value for 'barrier' [ 689.854666][T12924] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 689.937905][T12928] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2201'. [ 690.748104][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2203'. [ 691.173444][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 691.522460][T12952] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2207'. [ 691.919001][T12949] befs: (nbd0): No write support. Marking filesystem read-only [ 691.926990][T12949] syz.0.2208: attempt to access beyond end of device [ 691.926990][T12949] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 692.240768][T12960] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 692.286414][ T5813] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 692.326544][ T23] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 692.446351][ T5813] usb 3-1: device descriptor read/64, error -71 [ 692.527128][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 692.537626][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 692.547418][ T23] usb 1-1: config 0 has no interface number 0 [ 692.559105][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 692.569542][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.577855][ T23] usb 1-1: Product: syz [ 692.582210][ T23] usb 1-1: Manufacturer: syz [ 692.587398][ T23] usb 1-1: SerialNumber: syz [ 692.597165][ T23] usb 1-1: config 0 descriptor?? [ 692.608838][ T23] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 692.630167][ T23] usb 1-1: selecting invalid altsetting 1 [ 692.635965][ T23] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 692.662030][ T23] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 692.673040][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 692.681869][ T23] usb 1-1: media controller created [ 692.721622][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 692.758554][ T5813] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 692.918841][ T5813] usb 3-1: device descriptor read/64, error -71 [ 693.037056][ T5813] usb usb3-port1: attempt power cycle [ 693.353861][T12976] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2219'. [ 693.497342][ T5813] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 693.541108][T12978] befs: (nbd1): No write support. Marking filesystem read-only [ 693.548918][T12978] syz.1.2220: attempt to access beyond end of device [ 693.548918][T12978] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 693.596531][ T5813] usb 3-1: device descriptor read/8, error -71 [ 693.806468][T12984] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 693.836598][ T23] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 693.845333][ T23] zl10353_read_register: readreg error (reg=127, ret==-110) [ 693.878752][T12958] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 693.887484][ T5813] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 693.952012][ T5813] usb 3-1: device descriptor read/8, error -71 [ 693.955526][ T23] usb 1-1: USB disconnect, device number 21 [ 694.089694][ T5813] usb usb3-port1: unable to enumerate USB device [ 694.387204][ T5778] Bluetooth: hci4: command 0x0c1a tx timeout [ 694.558408][T13005] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2229'. [ 695.645508][T13014] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 695.922207][T13019] binder: 13017:13019 ioctl 4018620d 0 returned -22 [ 695.937363][T13019] binder: 13017:13019 ioctl c0306201 0 returned -14 [ 696.095245][T13015] befs: (nbd4): No write support. Marking filesystem read-only [ 696.103527][T13015] syz.4.2231: attempt to access beyond end of device [ 696.103527][T13015] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 699.129377][T13063] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2240'. [ 699.679483][ T6204] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 699.763551][T13069] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2241'. [ 699.836294][ T6204] usb 1-1: device descriptor read/64, error -71 [ 700.106353][T13078] binder: 13076:13078 ioctl 4018620d 0 returned -22 [ 700.116200][ T6204] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 700.146817][T13078] binder: 13076:13078 ioctl c0306201 0 returned -14 [ 700.286187][ T6204] usb 1-1: device descriptor read/64, error -71 [ 700.292036][T13079] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 700.955063][ T6204] usb usb1-port1: attempt power cycle [ 701.396701][ T6204] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 701.436884][ T6204] usb 1-1: device descriptor read/8, error -71 [ 701.716817][ T6204] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 701.799162][ T6204] usb 1-1: device descriptor read/8, error -71 [ 701.977060][ T6204] usb usb1-port1: unable to enumerate USB device [ 702.269951][T13128] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2253'. [ 703.474540][T13138] befs: (nbd0): No write support. Marking filesystem read-only [ 703.482918][T13138] syz.0.2257: attempt to access beyond end of device [ 703.482918][T13138] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 704.278951][T11688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 704.289273][T11688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 704.298171][T11688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 704.306447][T11688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 704.314741][T11688] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 705.576531][T11688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 705.653918][T13146] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 705.916475][ T5811] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 705.988095][T13142] chnl_net:caif_netlink_parms(): no params data found [ 706.104887][ T5811] usb 5-1: device descriptor read/64, error -71 [ 706.153785][T13142] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.166315][T13142] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.183789][T13142] bridge_slave_0: entered allmulticast mode [ 706.197660][T13142] bridge_slave_0: entered promiscuous mode [ 706.220707][T13142] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.244268][T13142] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.252823][T13142] bridge_slave_1: entered allmulticast mode [ 706.272284][T13142] bridge_slave_1: entered promiscuous mode [ 706.355729][T13142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.379134][T13142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.396473][ T5811] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 706.498523][T13142] team0: Port device team_slave_0 added [ 706.514071][T13142] team0: Port device team_slave_1 added [ 706.576371][ T5811] usb 5-1: device descriptor read/64, error -71 [ 706.594510][T13142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.608980][T13142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.658842][T13142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.799070][T13142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.836351][T13142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.029249][T13142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.332281][ T5811] usb usb5-port1: attempt power cycle [ 707.381012][T13142] hsr_slave_0: entered promiscuous mode [ 707.388362][T13142] hsr_slave_1: entered promiscuous mode [ 707.395855][T13142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 707.412258][T13142] Cannot create hsr debugfs directory [ 707.666669][T11688] Bluetooth: hci0: command tx timeout [ 707.746748][ T5811] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 709.003264][ T5811] usb 5-1: device descriptor read/8, error -71 [ 709.070108][T13142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.462046][T13142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.644110][T13190] befs: (nbd4): No write support. Marking filesystem read-only [ 709.652978][T13190] syz.4.2272: attempt to access beyond end of device [ 709.652978][T13190] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 709.746329][T11688] Bluetooth: hci0: command tx timeout [ 710.293294][T13142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.914016][T13142] netdevsim netdevsim2 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.248460][T13142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 711.274849][T13142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 711.287135][T13142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 711.325650][T13207] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 711.338084][T13142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 711.605711][T13142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.670914][T13142] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.686154][T12567] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.694478][T12567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.737382][T12567] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.744730][T12567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.826274][T11688] Bluetooth: hci0: command tx timeout [ 711.884619][T13142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 711.895391][ T5813] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 712.060678][ T5813] usb 1-1: device descriptor read/64, error -71 [ 712.316970][T13226] loop4: detected capacity change from 0 to 16 [ 712.449009][T13226] erofs: (device loop4): mounted with root inode @ nid 36. [ 712.472777][ T5813] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 712.688014][T13142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.746563][ T5813] usb 1-1: device descriptor read/64, error -71 [ 712.814076][T13142] veth0_vlan: entered promiscuous mode [ 712.814171][T13228] syz.4.2282: attempt to access beyond end of device [ 712.814171][T13228] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 712.845225][T13228] syz.4.2282: attempt to access beyond end of device [ 712.845225][T13228] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 712.854438][T13142] veth1_vlan: entered promiscuous mode [ 712.867714][T13228] syz.4.2282: attempt to access beyond end of device [ 712.867714][T13228] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 712.881264][ T5813] usb usb1-port1: attempt power cycle [ 712.913296][T13142] veth0_macvtap: entered promiscuous mode [ 712.929552][T13142] veth1_macvtap: entered promiscuous mode [ 712.952568][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.963316][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.974485][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.985545][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.996608][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.007277][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.017812][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.037710][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.052493][T13142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.081205][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.091945][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.103350][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.114286][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.125735][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.141941][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.155579][T13142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.167555][T13142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.179200][T13142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.193989][T13142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.211051][T13142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.221550][T13142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.240085][T13142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.306750][ T5813] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 713.454415][ T5813] usb 1-1: device descriptor read/8, error -71 [ 713.471430][T13234] befs: (nbd4): No write support. Marking filesystem read-only [ 713.480193][T13234] syz.4.2284: attempt to access beyond end of device [ 713.480193][T13234] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 713.534955][T12565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.659098][T12565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.770791][ T8228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.788301][ T8228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.888471][ T5813] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 713.908772][T11688] Bluetooth: hci0: command tx timeout [ 713.972381][T13245] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 714.207045][ T5813] usb 1-1: device descriptor read/8, error -71 [ 714.347106][ T5813] usb usb1-port1: unable to enumerate USB device [ 714.437206][T13254] binder: 13252:13254 ioctl 4018620d 0 returned -22 [ 714.455596][T13254] binder: 13252:13254 ioctl c0306201 0 returned -14 [ 716.105109][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 716.491926][T13281] binder: 13280:13281 ioctl 4018620d 0 returned -22 [ 716.499803][T13281] binder: 13280:13281 ioctl c0306201 0 returned -14 [ 716.628151][T13285] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 716.937290][T13236] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 717.776379][ T5808] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 717.816399][T13236] usb 1-1: Using ep0 maxpacket: 16 [ 717.824041][T13236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.836512][T13236] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.849260][T13236] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 717.858676][T13236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.867656][T13236] usb 1-1: Product: syz [ 717.872085][T13236] usb 1-1: Manufacturer: syz [ 717.877252][T13236] usb 1-1: SerialNumber: syz [ 717.972760][ T5808] usb 5-1: no configurations [ 717.979086][ T5808] usb 5-1: can't read configurations, error -22 [ 718.097549][T13236] usb 1-1: 0:2 : does not exist [ 718.113092][T13236] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 718.136524][ T5808] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 718.155927][T13236] usb 1-1: USB disconnect, device number 30 [ 719.116949][ T5808] usb 5-1: no configurations [ 719.121608][ T5808] usb 5-1: can't read configurations, error -22 [ 719.133327][ T5808] usb usb5-port1: attempt power cycle [ 719.294224][T13314] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 719.388295][T13320] loop2: detected capacity change from 0 to 16 [ 719.431021][T13320] erofs: (device loop2): mounted with root inode @ nid 36. [ 719.556405][ T5808] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 719.627726][ T5808] usb 5-1: no configurations [ 719.636531][ T5808] usb 5-1: can't read configurations, error -22 [ 719.816432][ T5808] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 720.271863][ T5808] usb 5-1: device descriptor read/8, error -71 [ 720.434359][ T5808] usb usb5-port1: unable to enumerate USB device [ 720.716750][T13339] befs: (nbd1): No write support. Marking filesystem read-only [ 720.724520][T13339] syz.1.2319: attempt to access beyond end of device [ 720.724520][T13339] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 721.371478][T13345] can: request_module (can-proto-0) failed. [ 723.034107][ T5808] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 723.197809][T13384] binder: 13383:13384 ioctl 4018620d 0 returned -22 [ 723.205792][T13384] binder: 13383:13384 ioctl c0306201 0 returned -14 [ 723.229657][ T5808] usb 1-1: Using ep0 maxpacket: 8 [ 723.256706][ T5808] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 723.269677][ T5808] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.284824][ T5808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 723.296713][ T5808] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 723.326253][ T28] audit: type=1326 audit(1781934271.437:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.2.2334" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b7959ce59 code=0x0 [ 723.350285][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.356449][ T5808] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.376432][ T5808] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 723.397992][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.230762][ T5808] usb 1-1: GET_CAPABILITIES returned 0 [ 724.239230][ T5808] usbtmc 1-1:16.0: can't read capabilities [ 724.250335][ T5808] usb 1-1: USB disconnect, device number 31 [ 725.189950][T13414] binder: 13413:13414 ioctl 4018620d 0 returned -22 [ 725.211403][T13414] binder: 13413:13414 ioctl c0306201 0 returned -14 [ 725.363482][T13416] nbd: must specify a device to reconfigure [ 725.372717][ T28] audit: type=1326 audit(1781934273.487:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.2.2345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b7959ce59 code=0x0 [ 727.003080][T13425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 727.908926][T13433] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 729.916366][ T28] audit: type=1326 audit(1781934278.017:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13447 comm="syz.0.2355" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f0539ce59 code=0x0 [ 731.548685][ T5810] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 732.337056][ T5810] usb 3-1: no configurations [ 732.341703][ T5810] usb 3-1: can't read configurations, error -22 [ 732.461705][T13477] loop0: detected capacity change from 0 to 16 [ 732.480943][T13477] erofs: (device loop0): mounted with root inode @ nid 36. [ 732.516816][ T5810] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 732.734159][ T5810] usb 3-1: no configurations [ 732.744750][ T5810] usb 3-1: can't read configurations, error -22 [ 732.756559][ T5810] usb usb3-port1: attempt power cycle [ 732.803301][ T28] audit: type=1326 audit(1781934280.917:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13489 comm="syz.0.2366" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f0539ce59 code=0x0 [ 733.027561][T13494] hub 8-0:1.0: USB hub found [ 733.033467][T13494] hub 8-0:1.0: 1 port detected [ 733.806277][ T5810] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 733.845673][ T5810] usb 3-1: no configurations [ 733.853252][ T5810] usb 3-1: can't read configurations, error -22 [ 733.902735][T13496] befs: (nbd1): No write support. Marking filesystem read-only [ 733.910914][T13496] syz.1.2367: attempt to access beyond end of device [ 733.910914][T13496] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 734.021116][ T5810] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 734.059507][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2370'. [ 734.076307][ T5810] usb 3-1: no configurations [ 734.080971][ T5810] usb 3-1: can't read configurations, error -22 [ 734.167066][ T5810] usb usb3-port1: unable to enumerate USB device [ 734.251590][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 734.572242][T13515] loop0: detected capacity change from 0 to 16 [ 734.593524][T13515] erofs: (device loop0): mounted with root inode @ nid 36. [ 734.912555][T13521] loop4: detected capacity change from 0 to 16 [ 734.942726][ T28] audit: type=1326 audit(1781934283.057:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.0.2376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f0539ce59 code=0x0 [ 734.994259][T13521] erofs: (device loop4): mounted with root inode @ nid 36. [ 735.401137][T13528] syz.4.2375: attempt to access beyond end of device [ 735.401137][T13528] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 735.942199][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 735.953281][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 735.967505][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 735.988514][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.996465][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 736.005099][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 737.208692][ T28] audit: type=1326 audit(1781934285.327:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13556 comm="syz.0.2386" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f0539ce59 code=0x0 [ 738.117795][T11688] Bluetooth: hci3: command tx timeout [ 738.264225][T13530] chnl_net:caif_netlink_parms(): no params data found [ 738.297817][T13565] loop0: detected capacity change from 0 to 256 [ 738.767895][T13530] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.784286][T13530] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.819356][T13530] bridge_slave_0: entered allmulticast mode [ 738.833315][T13530] bridge_slave_0: entered promiscuous mode [ 738.909329][T13530] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.953402][T13530] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.971856][T13530] bridge_slave_1: entered allmulticast mode [ 738.987461][T13530] bridge_slave_1: entered promiscuous mode [ 739.070341][T13530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.137062][T13530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.391683][T13570] ceph: No mds server is up or the cluster is laggy [ 739.517316][T13530] team0: Port device team_slave_0 added [ 739.543166][T13530] team0: Port device team_slave_1 added [ 739.565300][ T28] audit: type=1326 audit(1781934287.667:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13587 comm="syz.0.2394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f0539ce59 code=0x0 [ 739.683743][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2393'. [ 740.308526][T11688] Bluetooth: hci3: command tx timeout [ 740.559181][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2393'. [ 740.757642][T13530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.784955][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.886833][T13530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.577384][T13607] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 741.641237][ T6204] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 741.685899][T13530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.714908][T13610] loop4: detected capacity change from 0 to 4096 [ 741.726265][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.807141][T13610] NILFS (loop4): invalid segment: Checksum error in segment payload [ 741.817412][T13530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.836359][T13610] NILFS (loop4): trying rollback from an earlier position [ 741.868481][ T6204] usb 1-1: no configurations [ 741.873137][ T6204] usb 1-1: can't read configurations, error -22 [ 741.968253][T13610] NILFS (loop4): recovery complete [ 742.006665][T13616] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 742.056536][ T6204] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 742.181649][T13530] hsr_slave_0: entered promiscuous mode [ 742.213565][T13530] hsr_slave_1: entered promiscuous mode [ 742.263379][ T6204] usb 1-1: no configurations [ 742.266505][T13530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.273818][ T6204] usb 1-1: can't read configurations, error -22 [ 742.275568][T13530] Cannot create hsr debugfs directory [ 742.305943][ T6204] usb usb1-port1: attempt power cycle [ 742.390269][T11688] Bluetooth: hci3: command tx timeout [ 742.516496][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 742.523557][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 742.756734][ T6204] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 742.799902][ T6204] usb 1-1: no configurations [ 742.807051][ T6204] usb 1-1: can't read configurations, error -22 [ 742.807549][T12565] IPVS: stopping backup sync thread 7912 ... [ 742.829065][ T23] libceph: connect (1)[c::]:6789 error -101 [ 742.835147][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 742.976221][ T6204] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 743.017748][ T6204] usb 1-1: no configurations [ 743.022408][ T6204] usb 1-1: can't read configurations, error -22 [ 743.037527][ T6204] usb usb1-port1: unable to enumerate USB device [ 743.301379][T12565] hsr_slave_0: left promiscuous mode [ 743.317490][T13624] ceph: No mds server is up or the cluster is laggy [ 743.391968][T12565] hsr_slave_1: left promiscuous mode [ 743.429714][T12565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.457410][T12565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.488881][T12565] bridge_slave_1: left allmulticast mode [ 743.494578][T12565] bridge_slave_1: left promiscuous mode [ 743.531666][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.725893][T12565] bridge_slave_0: left allmulticast mode [ 743.849955][T12565] bridge_slave_0: left promiscuous mode [ 743.912545][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.090899][T13648] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2405'. [ 744.100038][T13648] nbd: must specify at least one socket [ 744.171750][T13653] loop2: detected capacity change from 0 to 16 [ 744.234920][T13653] erofs: (device loop2): mounted with root inode @ nid 36. [ 744.427528][T13657] syz.2.2406: attempt to access beyond end of device [ 744.427528][T13657] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 744.441185][T13657] syz.2.2406: attempt to access beyond end of device [ 744.441185][T13657] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 744.476193][T11688] Bluetooth: hci3: command tx timeout [ 744.483624][T13661] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2409'. [ 744.771942][T12565] bond7 (unregistering): (slave dummy0): Releasing backup interface [ 744.938591][T12565] bond7 (unregistering): Released all slaves [ 745.175025][T13671] befs: (nbd4): No write support. Marking filesystem read-only [ 745.185044][T13671] syz.4.2412: attempt to access beyond end of device [ 745.185044][T13671] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 745.433069][T13664] ceph: No mds server is up or the cluster is laggy [ 746.017573][T12565] bond6 (unregistering): Released all slaves [ 746.482824][T12565] bond5 (unregistering): Released all slaves [ 746.898466][T12565] bond4 (unregistering): Released all slaves [ 747.323269][T12565] bond3 (unregistering): Released all slaves [ 747.441752][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.457713][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.843730][T13686] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2416'. [ 747.853531][T13686] nbd: must specify at least one socket [ 748.048424][T12565] bond2 (unregistering): Released all slaves [ 748.344047][T12565] bond1 (unregistering): Released all slaves [ 748.932743][T13708] befs: (nbd4): No write support. Marking filesystem read-only [ 748.941088][T13708] syz.4.2421: attempt to access beyond end of device [ 748.941088][T13708] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 749.442358][T13695] ceph: No mds server is up or the cluster is laggy [ 750.096412][ T787] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 750.306613][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 750.342429][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.352721][ T787] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 750.363900][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.377495][ T787] usb 1-1: config 0 descriptor?? [ 750.454512][T12565] team0 (unregistering): Port device team_slave_1 removed [ 750.585978][T12565] team0 (unregistering): Port device team_slave_0 removed [ 750.732860][T12565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.741991][ T5808] usb 1-1: USB disconnect, device number 36 [ 750.890367][T12565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.394014][ T23] libceph: connect (1)[c::]:6789 error -101 [ 751.404089][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 751.447569][T12565] bond0 (unregistering): (slave team0): Releasing backup interface [ 751.508164][T12565] bond0 (unregistering): Released all slaves [ 751.681115][ T23] libceph: connect (1)[c::]:6789 error -101 [ 751.689937][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 752.148128][T13733] ceph: No mds server is up or the cluster is laggy [ 752.945948][T13530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 753.029322][T13530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 753.081104][T13530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 753.196284][T13530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 754.144937][T13530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.274714][T13530] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.325026][T13703] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.332263][T13703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.379186][ T6204] libceph: connect (1)[c::]:6789 error -101 [ 754.385513][ T6204] libceph: mon0 (1)[c::]:6789 connect error [ 754.414266][T13704] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.421426][T13704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.656999][ T6204] libceph: connect (1)[c::]:6789 error -101 [ 754.686310][ T6204] libceph: mon0 (1)[c::]:6789 connect error [ 755.092972][T13530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.113985][T13778] ceph: No mds server is up or the cluster is laggy [ 755.484829][T13530] veth0_vlan: entered promiscuous mode [ 755.525086][T13530] veth1_vlan: entered promiscuous mode [ 755.587813][T13530] veth0_macvtap: entered promiscuous mode [ 755.608278][T13530] veth1_macvtap: entered promiscuous mode [ 755.675124][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.712069][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.842507][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 755.918414][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.010389][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.072101][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.135136][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.166552][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.186523][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.204099][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.217454][T13530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.252849][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.274092][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.285160][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.302841][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.314420][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.365676][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.396191][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.426149][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.441404][T13530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.452211][T13530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.481924][T13530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.512812][T13530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.536303][T13530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.555919][T13530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.575194][T13530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.798022][T13704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.811697][T13704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.887851][T13703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.895722][T13703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.058684][T13845] loop0: detected capacity change from 0 to 16 [ 758.112099][T13845] erofs: (device loop0): mounted with root inode @ nid 36. [ 758.234120][T13845] syz.0.2449: attempt to access beyond end of device [ 758.234120][T13845] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 758.284388][T13845] syz.0.2449: attempt to access beyond end of device [ 758.284388][T13845] loop0: rw=0, sector=36, nr_sectors = 1 limit=16 [ 760.580130][T13874] loop1: detected capacity change from 0 to 4096 [ 760.587735][T13874] EXT4-fs: Ignoring removed i_version option [ 760.593764][T13874] EXT4-fs: Ignoring removed oldalloc option [ 760.679272][T13874] EXT4-fs (loop1): Test dummy encryption mode enabled [ 760.692000][T13874] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 761.594520][T13877] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 761.997357][T13887] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 766.570176][ T787] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 766.976737][ T787] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 766.984380][ T787] usb 3-1: can't read configurations, error -61 [ 767.156347][ T787] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 769.099225][ T787] usb 3-1: device descriptor read/all, error -71 [ 769.122112][ T787] usb usb3-port1: attempt power cycle [ 769.696394][ T5985] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 769.926650][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 769.975165][ T5985] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 770.039556][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 770.245820][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 770.258496][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24685, setting to 1024 [ 770.272091][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.288764][ T5985] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 770.406374][ T5985] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 770.414497][ T5985] usb 1-1: Manufacturer: syz [ 770.499810][ T5985] usb 1-1: config 0 descriptor?? [ 770.847466][ T5985] rc_core: IR keymap rc-hauppauge not found [ 770.873862][ T5985] Registered IR keymap rc-empty [ 770.895114][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 770.962381][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 771.126552][ T5985] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 771.164098][ T5985] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 771.301111][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 771.403247][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 771.437505][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 771.468094][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 771.516516][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'. [ 771.528730][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 771.671232][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 771.880010][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 771.938558][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 771.975311][T13953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2486'. [ 771.995699][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 772.046573][ T5985] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 772.094052][ T5985] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 772.103716][ T5985] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 772.133250][ T5985] usb 1-1: USB disconnect, device number 37 [ 772.187040][ T5810] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 772.389211][ T5810] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 772.409925][ T5810] usb 2-1: can't read configurations, error -61 [ 773.376297][ T5810] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 773.787205][ T5810] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 773.794881][ T5810] usb 2-1: can't read configurations, error -61 [ 773.806887][ T5810] usb usb2-port1: attempt power cycle [ 774.226424][ T5810] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 774.372632][ T5810] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 774.383832][ T5810] usb 2-1: can't read configurations, error -61 [ 774.519530][T13984] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2496'. [ 774.546465][ T5810] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 774.615212][ T5810] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 774.625351][ T5810] usb 2-1: can't read configurations, error -61 [ 774.639023][ T5810] usb usb2-port1: unable to enumerate USB device [ 774.650532][T13986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2497'. [ 774.878607][T13988] loop0: detected capacity change from 0 to 512 [ 774.940216][T13988] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 774.985515][T13988] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 775.301930][T13988] EXT4-fs (loop0): 1 truncate cleaned up [ 775.423191][T13988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.904585][ T28] audit: type=1800 audit(1781934324.007:156): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2498" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 775.925781][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.403645][ T6391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.516922][T14019] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 778.256394][ T787] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 779.279140][ T787] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 779.289443][ T787] usb 5-1: can't read configurations, error -61 [ 779.456486][ T787] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 779.698618][ T787] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 779.732885][ T787] usb 5-1: can't read configurations, error -61 [ 779.752231][ T787] usb usb5-port1: attempt power cycle [ 788.256197][ T6204] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 788.438651][ T6204] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 788.447677][ T6204] usb 3-1: can't read configurations, error -61 [ 788.626607][ T6204] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 788.818799][ T6204] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 788.831695][ T6204] usb 3-1: can't read configurations, error -61 [ 788.847380][ T6204] usb usb3-port1: attempt power cycle [ 789.266301][ T6204] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 789.319792][ T6204] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 789.330581][ T6204] usb 3-1: can't read configurations, error -61 [ 789.486890][ T6204] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 789.570922][ T6204] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 789.581200][ T6204] usb 3-1: can't read configurations, error -61 [ 789.601782][ T6204] usb usb3-port1: unable to enumerate USB device [ 794.261552][T14167] netlink: 'syz.2.2556': attribute type 2 has an invalid length. [ 796.438069][T14176] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2559'. [ 796.447359][T14176] nbd: must specify a size in bytes for the device [ 801.591459][T11688] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 802.646945][ T5985] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 802.857197][ T5985] usb 2-1: config 0 has no interfaces? [ 802.877656][ T5985] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 802.908129][ T5985] usb 2-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 802.981301][ T5985] usb 2-1: Product: syz [ 803.002417][ T5985] usb 2-1: Manufacturer: syz [ 803.101562][ T5985] usb 2-1: config 0 descriptor?? [ 803.467527][ T5985] usb 2-1: USB disconnect, device number 16 [ 803.931250][T14241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2571'. [ 804.074037][T14246] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 805.150608][T13236] libceph: connect (1)[c::]:6789 error -101 [ 805.284020][T13236] libceph: mon0 (1)[c::]:6789 connect error [ 805.740104][T13236] libceph: connect (1)[c::]:6789 error -101 [ 805.817972][T14264] ceph: No mds server is up or the cluster is laggy [ 805.916674][T13236] libceph: mon0 (1)[c::]:6789 connect error [ 807.987933][T14288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2581'. [ 808.230322][T14294] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 808.266274][T13236] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 808.443689][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'. [ 808.493226][T14301] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.504761][T13236] usb 1-1: config 0 has no interfaces? [ 808.517629][T13236] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 808.539285][T13236] usb 1-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 808.653262][T13933] libceph: connect (1)[c::]:6789 error -101 [ 808.742978][T13933] libceph: mon0 (1)[c::]:6789 connect error [ 808.869939][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.876434][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.089038][T13933] libceph: connect (1)[c::]:6789 error -101 [ 809.159356][T13236] usb 1-1: Product: syz [ 809.160292][T13933] libceph: mon0 (1)[c::]:6789 connect error [ 809.385371][T14304] ceph: No mds server is up or the cluster is laggy [ 809.385849][T13236] usb 1-1: Manufacturer: syz [ 809.399259][T13236] usb 1-1: config 0 descriptor?? [ 809.870110][ T6204] libceph: connect (1)[c::]:6789 error -101 [ 809.887788][ T6204] libceph: mon0 (1)[c::]:6789 connect error [ 809.927400][T13236] usb 1-1: USB disconnect, device number 38 [ 811.396429][T14321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2593'. [ 811.535982][T14328] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 811.666283][ T5813] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 813.353578][ T5813] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 813.399478][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 813.409177][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 813.713455][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 813.740580][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 814.114685][T14341] ceph: No mds server is up or the cluster is laggy [ 814.115044][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.130200][ T5813] usb 1-1: Product: syz [ 814.134401][ T5813] usb 1-1: Manufacturer: syz [ 814.139167][ T5813] usb 1-1: SerialNumber: syz [ 814.163774][ T5813] usb 1-1: config 0 descriptor?? [ 814.174214][ T5813] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 814.188781][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 814.201840][ T5813] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 814.216290][ T5813] usb 1-1: media controller created [ 814.245461][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 814.304194][ T5813] DVB: Unable to find symbol mt352_attach() [ 814.395125][T14325] dvb-usb: bulk message failed: -22 (7/0) [ 814.417910][ T5813] DVB: Unable to find symbol nxt6000_attach() [ 814.424126][ T5813] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 814.723675][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 814.950827][ T5813] dvb-usb: schedule remote query interval to 1000 msecs. [ 814.971565][ T5813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 814.991041][ T5813] dvb-usb: bulk message failed: -22 (7/0) [ 815.004922][ T5813] dvb-usb: bulk message failed: -22 (7/0) [ 815.072834][ T5813] usb 1-1: USB disconnect, device number 39 [ 815.136380][ T5810] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 815.254638][T14361] netlink: 'syz.2.2605': attribute type 2 has an invalid length. [ 815.963783][ T5813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 816.118617][ T5810] usb 2-1: config 0 has no interfaces? [ 816.996668][ T5810] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 817.010254][ T5810] usb 2-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 817.018682][ T5810] usb 2-1: Product: syz [ 817.022979][ T5810] usb 2-1: Manufacturer: syz [ 817.030123][ T5810] usb 2-1: config 0 descriptor?? [ 817.250635][ T5810] usb 2-1: USB disconnect, device number 17 [ 817.996265][T14390] overlayfs: failed to resolve './file2': -2 [ 818.457999][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.483627][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.493462][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.505677][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.581071][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 818.589886][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 819.384060][T14409] loop4: detected capacity change from 0 to 40427 [ 819.398330][T14409] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 819.406609][T14409] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 819.422947][T14409] F2FS-fs (loop4): invalid crc value [ 819.441194][T14393] chnl_net:caif_netlink_parms(): no params data found [ 819.484272][T14409] F2FS-fs (loop4): Found nat_bits in checkpoint [ 819.550952][T14409] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 819.558460][T14409] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 819.832007][ T28] audit: type=1800 audit(1781934367.947:157): pid=14423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2619" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 819.962315][T14393] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.038934][T14393] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.086862][T14393] bridge_slave_0: entered allmulticast mode [ 820.126965][T14393] bridge_slave_0: entered promiscuous mode [ 820.136921][T14393] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.144100][T14393] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.151749][T14393] bridge_slave_1: entered allmulticast mode [ 820.159050][T14393] bridge_slave_1: entered promiscuous mode [ 820.212568][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.226390][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.264161][T14393] team0: Port device team_slave_0 added [ 820.323246][T14393] team0: Port device team_slave_1 added [ 820.424676][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.453762][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.517477][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.524295][T12570] kworker/u4:31: attempt to access beyond end of device [ 820.524295][T12570] loop4: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 820.623494][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.630791][ T5778] Bluetooth: hci1: command tx timeout [ 820.652756][T12570] kworker/u4:31: attempt to access beyond end of device [ 820.652756][T12570] loop4: rw=1, sector=49152, nr_sectors = 1928 limit=40427 [ 820.676661][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.712754][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.786790][ T23] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 820.817467][T14393] hsr_slave_0: entered promiscuous mode [ 820.843558][T14393] hsr_slave_1: entered promiscuous mode [ 820.866876][T14393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.895788][T14393] Cannot create hsr debugfs directory [ 820.977679][ T23] usb 3-1: config 0 has no interfaces? [ 820.988470][ T23] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 821.002600][ T23] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 821.010941][ T23] usb 3-1: Product: syz [ 821.015222][ T23] usb 3-1: Manufacturer: syz [ 821.022343][ T23] usb 3-1: config 0 descriptor?? [ 821.225220][T14393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.243662][ T23] usb 3-1: USB disconnect, device number 31 [ 821.397534][T14393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.527266][T14393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.663785][T14393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.998625][T14393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 822.026741][T14393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 822.042216][T14393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 822.059970][T14393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 822.243418][T14393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.273283][T14393] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.287769][T12380] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.294940][T12380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.310560][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.317807][T12565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.395890][T14393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.476299][ T5985] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 822.658354][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.686305][ T5985] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 822.707170][ T5778] Bluetooth: hci1: command tx timeout [ 822.727521][T14393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.739990][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.775821][ T5985] usb 3-1: config 0 descriptor?? [ 822.818766][T14393] veth0_vlan: entered promiscuous mode [ 822.849823][T14393] veth1_vlan: entered promiscuous mode [ 822.892671][T14393] veth0_macvtap: entered promiscuous mode [ 822.907632][T14393] veth1_macvtap: entered promiscuous mode [ 822.927256][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.938514][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.949664][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.960540][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.970591][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.981165][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.991115][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.003859][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.013821][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.024957][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.035892][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.048048][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.059602][T14393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.066752][ T5985] usbhid 3-1:0.0: can't add hid device: -71 [ 823.073259][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.073578][ T5985] usbhid: probe of 3-1:0.0 failed with error -71 [ 823.084386][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.100796][ T5985] usb 3-1: USB disconnect, device number 32 [ 823.110160][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.123766][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.134263][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.145081][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.155021][ T5813] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 823.163357][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.174593][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.184751][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.195883][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.207889][T14393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.218509][T14393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.231031][T14393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.247875][T14393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.257506][T14393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.267003][T14393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.275823][T14393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.349153][ T5813] usb 5-1: config 0 has no interfaces? [ 823.364585][ T5813] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 823.374551][T12369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.390059][ T5813] usb 5-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 823.398497][T12369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.406569][ T5813] usb 5-1: Product: syz [ 823.412995][ T5813] usb 5-1: Manufacturer: syz [ 823.429134][ T5813] usb 5-1: config 0 descriptor?? [ 823.458843][T12564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.472418][T12564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.616913][ T5985] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 823.643105][ T5813] usb 5-1: USB disconnect, device number 18 [ 823.808061][ T5985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.820897][ T5985] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 823.831511][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.858296][ T5985] usb 3-1: config 0 descriptor?? [ 824.111903][T14465] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2636'. [ 824.468886][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.690859][T14439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.699683][ T5985] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 824.725563][ T5985] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 824.735897][T14439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.796518][ T5778] Bluetooth: hci1: command tx timeout [ 824.799201][ C1] ================================================================================ [ 824.811250][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 824.819953][ C1] index 261 is out of range for type 'const int[34]' [ 824.826679][ C1] CPU: 1 PID: 14462 Comm: syz.0.2635 Not tainted syzkaller #0 [ 824.834180][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.844293][ C1] Call Trace: [ 824.847681][ C1] [ 824.850787][ C1] dump_stack_lvl+0x18c/0x250 [ 824.855609][ C1] ? show_regs_print_info+0x20/0x20 [ 824.860906][ C1] ? load_image+0x420/0x420 [ 824.865454][ C1] ubsan_epilogue+0xa/0x30 [ 824.869929][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 824.875720][ C1] aiptek_irq+0x1eb8/0x2920 [ 824.880279][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 824.885385][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 824.891181][ C1] __usb_hcd_giveback_urb+0x35d/0x520 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 824.896615][ C1] dummy_timer+0xa40/0x3420 [ 824.896856][ T787] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 824.901184][ C1] ? dummy_free_streams+0x520/0x520 [ 824.913924][ C1] ? dummy_free_streams+0x520/0x520 [ 824.919173][ C1] __hrtimer_run_queues+0x525/0xc10 [ 824.924448][ C1] ? hrtimer_interrupt+0x980/0x980 [ 824.929602][ C1] ? read_tsc+0x9/0x20 [ 824.933763][ C1] hrtimer_run_softirq+0x177/0x290 [ 824.938924][ C1] handle_softirqs+0x27d/0x820 [ 824.943821][ C1] ? read_tsc+0x9/0x20 [ 824.947938][ C1] ? ktime_get+0x24b/0x280 [ 824.952413][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 824.957228][ C1] ? do_softirq+0x1a0/0x1a0 [ 824.961793][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 824.967047][ C1] __irq_exit_rcu+0xd3/0x190 [ 824.971688][ C1] ? irq_exit_rcu+0x20/0x20 [ 824.976249][ C1] irq_exit_rcu+0x9/0x20 [ 824.980522][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 824.986205][ C1] [ 824.989240][ C1] [ 824.992257][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 824.998395][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x42/0x60 [ 825.004603][ C1] Code: e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 <48> 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 [ 825.024331][ C1] RSP: 0018:ffffc90003947350 EFLAGS: 00000246 [ 825.030532][ C1] RAX: ffffffff813b28b2 RBX: ffffffff8ea2cfd4 RCX: ffff88802ea08000 [ 825.038548][ C1] RDX: ffffc9000cc61000 RSI: ffffffff81df5347 RDI: ffffffff81df5335 [ 825.046561][ C1] RBP: ffffffff8ea2cfcc R08: ffffc900039474f0 R09: 0000000000000001 [ 825.054574][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff81df5335 [ 825.062584][ C1] R13: ffffffff8ea2cfd0 R14: ffffffff81df5347 R15: ffffffff8ea2cfcc [ 825.070603][ C1] ? kasan_save_free_info+0x27/0x40 [ 825.075852][ C1] ? kasan_save_free_info+0x15/0x40 [ 825.081115][ C1] ? unwind_next_frame+0x4e2/0x2990 [ 825.086364][ C1] ? kasan_save_free_info+0x27/0x40 [ 825.091617][ C1] ? kasan_save_free_info+0x15/0x40 [ 825.096871][ C1] unwind_next_frame+0x4e2/0x2990 [ 825.101947][ C1] ? kasan_save_free_info+0x27/0x40 [ 825.107202][ C1] ? kasan_save_free_info+0x28/0x40 [ 825.112452][ C1] ? kasan_save_free_info+0x28/0x40 [ 825.117690][ C1] ? stack_trace_save+0x100/0x100 [ 825.122927][ C1] arch_stack_walk+0x144/0x190 [ 825.127740][ C1] ? kasan_save_free_info+0x28/0x40 [ 825.133077][ C1] stack_trace_save+0xaa/0x100 [ 825.137884][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 825.143038][ C1] ? __stack_depot_save+0x1f/0x660 [ 825.148200][ C1] kasan_set_track+0x4e/0x70 [ 825.152830][ C1] ? kasan_set_track+0x4e/0x70 [ 825.156175][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 825.157603][ C1] ? kasan_save_free_info+0x28/0x40 [ 825.167992][ C1] ? kmem_cache_free+0xf8/0x290 [ 825.172889][ C1] kasan_save_free_info+0x28/0x40 [ 825.177955][ C1] ____kasan_slab_free+0x126/0x1f0 [ 825.183110][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 825.188605][ C1] ? kvm_mmu_free_memory_cache+0x111/0x260 [ 825.194860][ C1] kmem_cache_free+0xf8/0x290 [ 825.199635][ C1] kvm_mmu_free_memory_cache+0x111/0x260 [ 825.205328][ C1] ? kvm_arch_vcpu_destroy+0x143/0x280 [ 825.210838][ C1] kvm_arch_vcpu_destroy+0x16b/0x280 [ 825.216171][ C1] kvm_destroy_vcpus+0xe1/0x260 [ 825.221070][ C1] ? kvm_mmu_memory_cache_alloc+0x110/0x110 [ 825.227004][ C1] ? xa_find_after+0xaf/0x430 [ 825.231765][ C1] ? kvm_ioapic_destroy+0xac/0xc0 [ 825.236845][ C1] kvm_arch_destroy_vm+0x34b/0x430 [ 825.241992][ C1] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 825.247488][ C1] ? mmu_notifier_unregister+0x31e/0x3a0 [ 825.253156][ C1] ? mmu_notifier_unregister+0xaa/0x3a0 [ 825.258755][ C1] kvm_put_kvm+0xdae/0x16d0 [ 825.263318][ C1] kvm_vcpu_release+0x57/0x60 [ 825.268035][ C1] ? kvm_vcpu_mmap+0x230/0x230 [ 825.272793][ C1] __fput+0x221/0x930 [ 825.276789][ C1] task_work_run+0x1d4/0x260 [ 825.281427][ C1] ? task_work_cancel+0x220/0x220 [ 825.286484][ C1] get_signal+0x11da/0x1390 [ 825.291014][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 825.296600][ C1] ? get_sigframe_size+0x20/0x20 [ 825.301599][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 825.307099][ C1] exit_to_user_mode_loop+0x70/0x110 [ 825.312398][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 825.317963][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 825.323430][ C1] do_syscall_64+0x61/0xb0 [ 825.327852][ C1] ? clear_bhb_loop+0x40/0x90 [ 825.332526][ C1] ? clear_bhb_loop+0x40/0x90 [ 825.337217][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 825.343136][ C1] RIP: 0033:0x7fde8319ce59 [ 825.347583][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.367225][ C1] RSP: 002b:00007fde8404b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.375661][ C1] RAX: fffffffffffffffc RBX: 00007fde83415fa0 RCX: 00007fde8319ce59 [ 825.383637][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 825.391610][ C1] RBP: 00007fde83232e6f R08: 0000000000000000 R09: 0000000000000000 [ 825.399589][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.407588][ C1] R13: 00007fde83416038 R14: 00007fde83415fa0 R15: 00007fff1d83d728 [ 825.415591][ C1] [ 825.418618][ C1] ================================================================================ [ 825.427917][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 825.435112][ C1] CPU: 1 PID: 14462 Comm: syz.0.2635 Not tainted syzkaller #0 [ 825.442579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 825.452745][ C1] Call Trace: [ 825.456050][ C1] [ 825.458923][ C1] dump_stack_lvl+0x18c/0x250 [ 825.463646][ C1] ? show_regs_print_info+0x20/0x20 [ 825.468864][ C1] ? load_image+0x420/0x420 [ 825.473396][ C1] panic+0x2ca/0x720 [ 825.477318][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 825.481858][ C1] check_panic_on_warn+0x84/0xa0 [ 825.486823][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 825.492645][ C1] aiptek_irq+0x1eb8/0x2920 [ 825.497193][ C1] ? kcov_remote_start+0x8a/0x7e0 [ 825.502260][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 825.508019][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 825.513399][ C1] dummy_timer+0xa40/0x3420 [ 825.517941][ C1] ? dummy_free_streams+0x520/0x520 [ 825.523137][ C1] ? dummy_free_streams+0x520/0x520 [ 825.528348][ C1] __hrtimer_run_queues+0x525/0xc10 [ 825.533554][ C1] ? hrtimer_interrupt+0x980/0x980 [ 825.538685][ C1] ? read_tsc+0x9/0x20 [ 825.542762][ C1] hrtimer_run_softirq+0x177/0x290 [ 825.547905][ C1] handle_softirqs+0x27d/0x820 [ 825.552709][ C1] ? read_tsc+0x9/0x20 [ 825.556806][ C1] ? ktime_get+0x24b/0x280 [ 825.561265][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 825.566071][ C1] ? do_softirq+0x1a0/0x1a0 [ 825.570606][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 825.575844][ C1] __irq_exit_rcu+0xd3/0x190 [ 825.580450][ C1] ? irq_exit_rcu+0x20/0x20 [ 825.584981][ C1] irq_exit_rcu+0x9/0x20 [ 825.589232][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 825.594880][ C1] [ 825.597842][ C1] [ 825.600794][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 825.606826][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x42/0x60 [ 825.613014][ C1] Code: e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 <48> 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 [ 825.632651][ C1] RSP: 0018:ffffc90003947350 EFLAGS: 00000246 [ 825.638732][ C1] RAX: ffffffff813b28b2 RBX: ffffffff8ea2cfd4 RCX: ffff88802ea08000 [ 825.646727][ C1] RDX: ffffc9000cc61000 RSI: ffffffff81df5347 RDI: ffffffff81df5335 [ 825.654722][ C1] RBP: ffffffff8ea2cfcc R08: ffffc900039474f0 R09: 0000000000000001 [ 825.662728][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff81df5335 [ 825.670732][ C1] R13: ffffffff8ea2cfd0 R14: ffffffff81df5347 R15: ffffffff8ea2cfcc [ 825.678730][ C1] ? kasan_save_free_info+0x27/0x40 [ 825.683928][ C1] ? kasan_save_free_info+0x15/0x40 [ 825.689130][ C1] ? unwind_next_frame+0x4e2/0x2990 [ 825.694345][ C1] ? kasan_save_free_info+0x27/0x40 [ 825.699566][ C1] ? kasan_save_free_info+0x15/0x40 [ 825.704814][ C1] unwind_next_frame+0x4e2/0x2990 [ 825.709883][ C1] ? kasan_save_free_info+0x27/0x40 [ 825.715115][ C1] ? kasan_save_free_info+0x28/0x40 [ 825.720377][ C1] ? kasan_save_free_info+0x28/0x40 [ 825.725607][ C1] ? stack_trace_save+0x100/0x100 [ 825.730663][ C1] arch_stack_walk+0x144/0x190 [ 825.735446][ C1] ? kasan_save_free_info+0x28/0x40 [ 825.740673][ C1] stack_trace_save+0xaa/0x100 [ 825.745456][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 825.750585][ C1] ? __stack_depot_save+0x1f/0x660 [ 825.755734][ C1] kasan_set_track+0x4e/0x70 [ 825.760373][ C1] ? kasan_set_track+0x4e/0x70 [ 825.765151][ C1] ? kasan_save_free_info+0x28/0x40 [ 825.770410][ C1] ? kmem_cache_free+0xf8/0x290 [ 825.775266][ C1] kasan_save_free_info+0x28/0x40 [ 825.780300][ C1] ____kasan_slab_free+0x126/0x1f0 [ 825.785429][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 825.790908][ C1] ? kvm_mmu_free_memory_cache+0x111/0x260 [ 825.796729][ C1] kmem_cache_free+0xf8/0x290 [ 825.801449][ C1] kvm_mmu_free_memory_cache+0x111/0x260 [ 825.807118][ C1] ? kvm_arch_vcpu_destroy+0x143/0x280 [ 825.812590][ C1] kvm_arch_vcpu_destroy+0x16b/0x280 [ 825.817899][ C1] kvm_destroy_vcpus+0xe1/0x260 [ 825.822773][ C1] ? kvm_mmu_memory_cache_alloc+0x110/0x110 [ 825.828697][ C1] ? xa_find_after+0xaf/0x430 [ 825.833397][ C1] ? kvm_ioapic_destroy+0xac/0xc0 [ 825.838451][ C1] kvm_arch_destroy_vm+0x34b/0x430 [ 825.843585][ C1] ? kvm_arch_pre_destroy_vm+0x20/0x20 [ 825.849078][ C1] ? mmu_notifier_unregister+0x31e/0x3a0 [ 825.854746][ C1] ? mmu_notifier_unregister+0xaa/0x3a0 [ 825.860328][ C1] kvm_put_kvm+0xdae/0x16d0 [ 825.864853][ C1] kvm_vcpu_release+0x57/0x60 [ 825.869545][ C1] ? kvm_vcpu_mmap+0x230/0x230 [ 825.874343][ C1] __fput+0x221/0x930 [ 825.878354][ C1] task_work_run+0x1d4/0x260 [ 825.882949][ C1] ? task_work_cancel+0x220/0x220 [ 825.887979][ C1] get_signal+0x11da/0x1390 [ 825.892506][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 825.898075][ C1] ? get_sigframe_size+0x20/0x20 [ 825.903067][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 825.908563][ C1] exit_to_user_mode_loop+0x70/0x110 [ 825.913859][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 825.919433][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 825.924917][ C1] do_syscall_64+0x61/0xb0 [ 825.929358][ C1] ? clear_bhb_loop+0x40/0x90 [ 825.934051][ C1] ? clear_bhb_loop+0x40/0x90 [ 825.938844][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 825.944761][ C1] RIP: 0033:0x7fde8319ce59 [ 825.949208][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.968927][ C1] RSP: 002b:00007fde8404b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.977378][ C1] RAX: fffffffffffffffc RBX: 00007fde83415fa0 RCX: 00007fde8319ce59 [ 825.985377][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 825.993374][ C1] RBP: 00007fde83232e6f R08: 0000000000000000 R09: 0000000000000000 [ 826.001374][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.009374][ C1] R13: 00007fde83416038 R14: 00007fde83415fa0 R15: 00007fff1d83d728 [ 826.017360][ C1] [ 826.020637][ C1] Kernel Offset: disabled [ 826.024961][ C1] Rebooting in 86400 seconds..